Today, the Internet of Things (IoT) technology is applied everywhere, providing tremendous amounts of IoT service. The GS1, a non-profit international standards organization, has established standards for IoT technology. Especially, the GS1 standardized an Object Name Service (ONS) leveraging DNS's distributed and federated infrastructure, enables users to manage and discover IoT services such as the retail, food, healthcare, smart city, and so on. However, the ONS is vulnerable to the data tampering, privilege escalation, and service fault caused by DNS attacks including the man in the middle, cache poisoning, replay, hijacking, and denial of service attacks. Nowadays, IoT services are used in security-sensitive areas, such as finance and healthcare. Therefore, the security of ONS should be strengthened before causing severe problems such as data breach, economic loss, and social loss. In this paper, we propose a blockchain-based ONS with a tokenized authority called the BlockONS. The BlockONS provides strength in the data tampering and privilege escalation allowing a fault tolerance. The BlockONS consists of a content off-chain scaling, a data tampering validation method, a fault-tolerance method, and a Blockchain Token-Based Access Control (BTBAC) method. We designed the BlockONS into two parts: A BlockONS Node part manages the validation method and BTBAC model. A BlockONS Agent part manages the off-chain scaling and fault tolerance. Finally, we implemented the BlockONS leveraging a Hyperledger Sawtooth blockchain. We proved the proposed validation method, fault tolerance method, and BTBAC method through use cases and security analyses on attack situations. We deployed the BlockONS in the Daejeon city and evaluated the performance to show the feasibility of the BlockONS.

中文翻译：

---

具有令牌化权限的基于区块链的对象名称服务

如今，物联网（IoT）技术无处不在，提供了海量的物联网服务。GS1 是一个非营利性国际标准组织，已经为物联网技术制定了标准。特别是，GS1 利用 DNS 的分布式和联合基础设施标准化了对象名称服务 (ONS)，使用户能够管理和发现物联网服务，例如零售、食品、医疗保健、智慧城市等。但是ONS容易受到中间人攻击、缓存中毒、重放、劫持、拒绝服务攻击等DNS攻击引起的数据篡改、提权、服务故障等问题。如今，物联网服务用于安全敏感领域，例如金融和医疗保健。所以，在造成数据泄露、经济损失和社会损失等严重问题之前，应加强ONS的安全性。在本文中，我们提出了一种基于区块链的 ONS，其具有称为 BlockONS 的标记化权限。BlockONS 在数据篡改和权限提升方面提供了强大的能力，允许容错。BlockONS 由内容链下扩展、数据篡改验证方法、容错方法和基于区块链令牌的访问控制（BTBAC）方法组成。我们将 BlockONS 设计为两部分：BlockONS 节点部分管理验证方法和 BTBAC 模型。BlockONS 代理部分管理链下扩展和容错。最后，我们利用 Hyperledger Sawtooth 区块链实施了 BlockONS。我们证明了所提出的验证方法，容错方法，和 BTBAC 方法通过用例和对攻击情况的安全分析。我们在大田市部署了 BlockONS 并评估了性能以展示 BlockONS 的可行性。