水产品质量安全风险溯源系统访问控制模型研究

Access Control Model of Aquatic Product HACCP Traceability System

摘要:

鉴于危害分析与关键控制点(HACCP)质量溯源系统覆盖了企业的敏感数据,为保护企业的隐私数据,并兼顾企业因适应外部市场的不确定性而进行的动态调整,本文以巴氏杀菌蟹肉HACCP计划为例,结合Fabric多通道技术和基于属性的访问控制(Attribute based access control,ABAC)模型,提出了HACCP溯源系统的访问控制模型(HACCP traceability system access control model,HTSACM)。该模型根据巴氏杀菌蟹肉的HACCP计划国家标准提取溯源数据,给出数据的风险等级定义,并按照用户类别做出了访问需求定义。从不同用户的数据访问权限出发,构建数据的双通道结构,采用私有数据集合存储隐私数据,实现了敏感数据的独立存储。设计属性混合存储形式和策略灵活更新机制,增强了基于区块链访问控制的动态性,在此基础上构建基于区块链的访问控制模型。最终实现了基于双通道的HACCP溯源系统访问控制模型,此访问控制模型实现了对链上数据的细粒度访问控制。在保障关键数据透明化与可追溯性的基础上,企业敏感信息通过私有通道进行隔离存储与独立管理,有效避免外部溯源操作对其造成的影响,从而提升企业隐私数据的安全性与可控性。同时,模型能够适应企业发展过程中出现的组织结构变化、业务扩展等不确定性因素,具备良好的灵活性与可扩展性。实验结果表明,系统在引入安全访问控制模型后,仍可实现300笔/ s的吞吐量,在提升安全性与隐私保护能力的同时,并未对系统性能产生明显影响。

Abstract:

In view of the fact that the HACCP quality traceability system covers the sensitive data of enterprises, in order to protect the private data of enterprises and take into account the dynamic adjustment of enterprises to adapt to the uncertainty of the external market, taking the pasteurized crab meat HACCP plan as an example, combined the Fabric multi-channel technology and the attribute based access control (ABAC) model, the HACCP traceability system access control model ( HTSACM) was proposed. This model extracted the traceability data according to the HACCP plan national standard of pasteurized crab meat, gave the definition of the risk level of the data, and defined the access requirements according to the user category. Starting from the data access rights of different users, a dual channel structure of data was constructed, and private data collections were used to store private data, realizing independent storage of sensitive data. The attribute hybrid storage form and flexible policy update mechanism were designed to enhance the dynamics of blockchain based access control, and on this basis, a blockchain based access control model was built. Finally, the HACCP traceability system access control model based on dual channels was implemented, and this access control model implemented the fine-grained access control of data on the chain. On the basis of ensuring the transparency and traceability of key data, enterprise sensitive information was isolated, stored and independently managed through private channels, effectively avoiding the impact of external traceability operations on it, thus improving the security and controllability of enterprise private data. At the same time, the model can adapt to organizational structure changes, business expansion and other uncertainties in the process of enterprise development, and had good flexibility and scalability. The experimental results showed that the system can still achieve a throughput of 300 transactions/ s after the introduction of the security access control model. While improving the system’s security and privacy protection capabilities, it had no significant impact on the system performance.