Industrial OT network access authorization traceability method based on balanced Merkle tree

To solve the problem of low efficiency of access authorization traceback in industrial operational technology (OT) network, an access authorization traceback method based on balanced Merkle tree was proposed. Based on the traditional Bloom filter and Merkle tree, the original structure was reconstructed to construct a double-layer Bloom filter and a balanced Merkle tree, which was more suitable for the data processing in industrial OT network. In order to solve the time cost caused by the construction of a balanced Merkle tree, a segmenting construction method was used in the construction process. At the same time, interplanetary file system (IPFS) storage was introduced to ensure the reliability and security of every access operation and raw data. Experimental results show that under different data sizes, the proposed method significantly improves the efficiency of access authorization traceability and reduces the system response time.