Abstract: Edge service nodes have diversified service capabilities, and play an important role in improving the capability of data acquisition, communication, information awareness, command and control. To solve the problems of lack of security information sharing means and vulnerability of edge service nodes in a complex environment, an endogenous security blockchain network architecture composed of main chain, key chain and data chain is designed based on the DAG data structure in this paper, multipolicy security control techniques such as hardware private key storage, dynamic audit on the chain, data security transmission and network dynamic adjustment are adopted to establish a complete endogenous security mechanism for edge service nodes. Experiments show that the security mechanism in this paper can ensure the security of personnel, device, data storage, data access, data transmission, and data services, and form the basis of security for the industrial Internet.Key words edge service; blockchain; key chain; data security; dynamic audit

Key words: edge service, blockchain, key chain, data security, dynamic audit

摘要： 边缘服务节点具备多样化保障能力，对于末端网络通信、数据采集、信息处理及控制等方面能力提升发挥着重要的作用，针对复杂环境中边缘服务节点易受攻击，安全信息共享手段缺乏的问题，基于DAG数据结构，设计了一个由主链、安全密钥链和业务链组成的安全区块链网络架构，采用硬件私钥存储、链上动态审计、数据安全传输和网络动态调整等多策略安全控制技术，为边缘服务节点建立了完备的安全机制.实验结果表明，提出的多策略安全机制能够确保边缘服务节点设备、数据存储、数据访问、数据传输、数据服务等各方面的安全，为工业互联网的发展奠定安全的基石.关键词边缘服务；区块链；密钥链；数据安全；动态审计

关键词: 边缘服务, 区块链, 密钥链, 数据安全, 动态审计