{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T16:15:37Z","timestamp":1791303337376,"version":"4.1.0"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T00:00:00Z","timestamp":1682294400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T00:00:00Z","timestamp":1682294400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]},{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]},{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]},{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]},{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]},{"name":"Project of China State Railway Group","award":["Grant N2021W005"],"award-info":[{"award-number":["Grant N2021W005"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cloud Comp"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>With the introduction of emerging technologies such as cloud computing, the railway communication network has the characteristics of complex structure and blurred boundaries, which leads to a series of security threats including information leakage and malicious access. Specifically, the third-party cloud services are difficult to be supervised, and network traffic is untrustworthy. To ensure system security, we propose a zero-trust security model in this paper. Then, we introduce blockchain and Merkle tree to build a distributed identity storage scheme for guaranteeing reliable, confidential and efficient data updates, and improving authentication efficiency. Furthermore, the proxy was introduced for two-way authentication with cloud servers, so that internal and external threats could be counteracted. Moreover, reputation assessment mechanism has been adopted to reduce the possibility of nodes accessing malicious cloud services. Performance analysis demonstrated that the proposed security model is able to enhance the security, efficiency and stability of the system, and consequently can guarantee the safety and reliability of railway transportation.<\/jats:p>","DOI":"10.1186\/s13677-023-00411-z","type":"journal-article","created":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T04:01:52Z","timestamp":1682308912000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":29,"title":["Blockchain enabled zero trust based authentication scheme for railway communication networks"],"prefix":"10.1186","volume":"12","author":[{"given":"Yuan","family":"Feng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhangdui","family":"Zhong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaofang","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lei","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunlong","family":"Lu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yongsheng","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,4,24]]},"reference":[{"key":"411_CR1","unstructured":"The Central Committee of the Communist Party of China, the State Council of the People's Republic of China Outline for Building a Strong Transportation Country [EB\/OL]. http:\/\/www.gov.cn\/zhengce\/2019-09\/19\/content_5431432.htm, 2019-09-19\/2021-06-23"},{"key":"411_CR2","unstructured":"White Paper on 5G Public Private Network of Railway Industry. Editor in Chief: Nanjing Metro Group Co., Ltd, China United Network Communications Co., Ltd. Jiangsu Branch and Huawei Technology Co., Ltd. Release date: April 2021"},{"key":"411_CR3","doi-asserted-by":"publisher","first-page":"79764","DOI":"10.1109\/ACCESS.2020.2988579","volume":"8","author":"U Bodkhe","year":"2020","unstructured":"Bodkhe U, Tanwar S, Parekh K et al (2020) Blockchain for industry 4.0: a comprehensive review. IEEE Access 8:79764\u201379800","journal-title":"IEEE Access"},{"issue":"02","key":"411_CR4","first-page":"70","volume":"4","author":"C Tan","year":"2020","unstructured":"Tan C, Chen M-j, Ackah AE (2020) Research on distributed identity authentication mechanism of IoT device based on blockchain. Chin J Internet Things 4(02):70\u201377","journal-title":"Chin J Internet Things"},{"issue":"09","key":"411_CR5","first-page":"70","volume":"11","author":"S-y Cao","year":"2020","unstructured":"Cao S-y, Yao Y-y, Chang X-l (2020) Lightweight secure authentication scheme using blockchain for RFID system in smart factory. Cyberspace Secur 11(09):70\u201377+93","journal-title":"Cyberspace Secur"},{"issue":"07","key":"411_CR6","first-page":"1722","volume":"48","author":"L Le","year":"2020","unstructured":"Le L, Yong S (2020) Intelligent device authentication scheme based on blockchain technology. Comput Digit Eng 48(07):1722\u20131726","journal-title":"Comput Digit Eng"},{"issue":"5","key":"411_CR7","first-page":"1214","volume":"54","author":"T Peng-guo","year":"2021","unstructured":"Peng-guo T, Fei L (2021) A method of user authentication based on blockchain. Commun Tech 54(5):1214\u20131219","journal-title":"Commun Tech"},{"issue":"1","key":"411_CR8","doi-asserted-by":"publisher","first-page":"450","DOI":"10.1109\/JIOT.2017.2750180","volume":"5","author":"N Abbas","year":"2018","unstructured":"Abbas N et al (2018) Mobile edge computing: a survey. IEEE Internet Things J 5(1):450\u2013465","journal-title":"IEEE Internet Things J"},{"key":"411_CR9","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/MWC.001.2100229","volume-title":"Reconfigurable Intelligent Surface for Low-Latency Edge Computing in 6G","author":"Y Dai","year":"2021","unstructured":"Dai Y, Guan YL, Leung KK, Zhang Y (2021) \"Reconfigurable Intelligent Surface for Low-Latency Edge Computing in 6G.\" IEEE\u00a0Wirel Commun\u00a028(6):72\u201379. https:\/\/doi.org\/10.1109\/MWC.001.2100229."},{"issue":"8","key":"411_CR10","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MCOM.2017.1600896","volume":"55","author":"H Zhang","year":"2017","unstructured":"Zhang H et al (2017) A hierarchical game framework for resource management in fog computing. IEEE Commun Mag 55(8):52\u201357","journal-title":"IEEE Commun Mag"},{"issue":"1","key":"411_CR11","doi-asserted-by":"publisher","first-page":"1618","DOI":"10.1109\/TSP.2020.2973488","volume":"68","author":"C Xing","year":"2020","unstructured":"Xing C, Jing Y, Wang S, Ma S, Poor HV (2020)\u00a0\u00a0\"New Viewpoint and Algorithms for Water-Filling Solutions in Wireless Communications.\" IEEE\u00a0Trans Signal Process\u00a068:1618\u20131634. https:\/\/doi.org\/10.1109\/TSP.2020.2973488","journal-title":"IEEE Transactions on Signal"},{"issue":"8","key":"411_CR12","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1109\/MCOM.2018.1701095","volume":"56","author":"Z Xiong","year":"2018","unstructured":"Xiong Z, Zhang Y, Niyato D, Wang P, Han Z (2018) When Mobile Blockchain meets edge computing. IEEE Commun Mag 56(8):33\u201339. https:\/\/doi.org\/10.1109\/MCOM.2018.1701095","journal-title":"IEEE Commun Mag"},{"key":"411_CR13","doi-asserted-by":"publisher","first-page":"467","DOI":"10.1109\/ICCE.2016.7430693","volume-title":"Proceedings of the 2016 IEEE international conference on consumer electronics (ICCE)","author":"H Watanabe","year":"2016","unstructured":"Watanabe H, Fujimura S, Nakadaira A et al (2016) Blockchain contract: securing a blockchain applied to smart contracts. In: Proceedings of the 2016 IEEE international conference on consumer electronics (ICCE). IEEE Press, Ha Long, pp 467\u2013468"},{"issue":"3","key":"411_CR14","doi-asserted-by":"publisher","first-page":"4660","DOI":"10.1109\/JIOT.2018.2875542","volume":"6","author":"J Kang","year":"2019","unstructured":"Kang J, Yu R, Huang X et al (2019) Blockchain for secure and efficient data sharing in vehicular edge computing and networks. IEEE Internet Things J 6(3):4660\u20134670","journal-title":"IEEE Internet Things J"},{"key":"411_CR15","doi-asserted-by":"publisher","first-page":"119961","DOI":"10.1109\/ACCESS.2020.3005541","volume":"8","author":"B Shala","year":"2020","unstructured":"Shala B, Trick U, Lehmann A et al (2020) Blockchain and trust for secure, end-user-based and decentralized IoT service provision. IEEE Access 8:119961\u2013119979","journal-title":"IEEE Access"},{"key":"411_CR16","volume-title":"Zero trust networks","author":"E Gilman","year":"2017","unstructured":"Gilman E, Barth D (2017) Zero trust networks. O'Reilly Media, Inc, Boston"},{"key":"411_CR17","unstructured":"Chakrabarti A. Lessons learned from five years of multi-cloud at PagerDuty[EB\/OL]. https:\/\/www.usenix.org\/conference\/srecon18americas\/presentation\/chakrabarti. 2018-03-28\/2021-06-23"},{"key":"411_CR18","unstructured":"Ward R, Beyer B (2014) Beyondcorp: A new approach to enterprise security.\u00a0USENIX Annul Technical Conference 39(6):6\u201311"},{"key":"411_CR19","doi-asserted-by":"publisher","unstructured":"Ma D, Li L, Ren H, Wang D, Li X, Han Z (2020) Distributed Rate Optimization for Intelligent Reflecting Surface with Federated Learning. In: 2020 IEEE International Conference on Communications Workshops (ICC Workshops), Dublin, pp 1\u20136. https:\/\/doi.org\/10.1109\/ICCWorkshops49005.2020.9145388","DOI":"10.1109\/ICCWorkshops49005.2020.9145388"},{"issue":"2","key":"411_CR20","doi-asserted-by":"publisher","first-page":"1223","DOI":"10.1109\/JIOT.2022.3204637","volume":"10","author":"S Mao","year":"2023","unstructured":"Mao S et al (2023) Intelligent reflecting surface-assisted low-latency federated learning over wireless networks. IEEE Internet Things J 10(2):1223\u20131235. https:\/\/doi.org\/10.1109\/JIOT.2022.3204637","journal-title":"IEEE Internet Things J"},{"key":"411_CR21","doi-asserted-by":"publisher","first-page":"101697","DOI":"10.1016\/j.phycom.2022.101697","volume":"52","author":"K Tian","year":"2022","unstructured":"Tian K, Chai H, Liu Y, Liu B (2022) Computation rate maximization for IRS-enhanced dynamic spectrum access assisted MEC system. Phys Commun 52:101697","journal-title":"Phys Commun"},{"key":"411_CR22","doi-asserted-by":"publisher","unstructured":"Chen G, Wu Q (2022) Computation Rate Maximization for IRS-Aided Wireless Powered MEC Systems. In: 2022 IEEE wireless communications and networking conference (WCNC).\u00a0Institute of Electrical and Electronics Engineers (IEEE), Austin, pp 417\u2013422. https:\/\/doi.org\/10.1109\/WCNC51071.2022.9771984","DOI":"10.1109\/WCNC51071.2022.9771984"},{"issue":"1","key":"411_CR23","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1109\/TNSE.2021.3068340","volume":"9","author":"J Du","year":"2022","unstructured":"Du J et al (2022) Resource pricing and allocation in MEC enabled Blockchain systems: an A3C deep reinforcement learning approach. IEEE Trans Netw Sci Eng 9(1):33\u201344. https:\/\/doi.org\/10.1109\/TNSE.2021.3068340","journal-title":"IEEE Trans Netw Sci Eng"},{"issue":"5","key":"411_CR24","doi-asserted-by":"publisher","first-page":"3220","DOI":"10.1109\/TCOMM.2022.3163439","volume":"70","author":"J Feng","year":"2022","unstructured":"Feng J, Zhang W, Pei Q, Wu J, Lin X (2022) Heterogeneous computation and resource allocation for wireless powered federated edge learning systems. IEEE Trans Commun 70(5):3220\u20133233. https:\/\/doi.org\/10.1109\/TCOMM.2022.3163439","journal-title":"IEEE Trans Commun"},{"issue":"11","key":"411_CR25","doi-asserted-by":"publisher","first-page":"2687","DOI":"10.1109\/TPDS.2021.3131654","volume":"33","author":"J Feng","year":"2022","unstructured":"Feng J, Liu L, Pei Q, Li K (2022) Min-max cost optimization for efficient hierarchical federated learning in wireless edge networks. IEEE Trans Parallel Distrib Syst 33(11):2687\u20132700. https:\/\/doi.org\/10.1109\/TPDS.2021.3131654","journal-title":"IEEE Trans Parallel Distrib Syst"},{"key":"411_CR26","doi-asserted-by":"publisher","unstructured":"Liu L, Zhao M, Yu M, Jan MA, Lan D, Taherkordi A  Mobility-Aware Multi-Hop Task Offloading for Autonomous Driving in Vehicular Edge Computing and Networks. In: IEEE Transactions on Intelligent Transportation Systems. https:\/\/doi.org\/10.1109\/TITS.2022.3142566","DOI":"10.1109\/TITS.2022.3142566"},{"issue":"03","key":"411_CR27","first-page":"60","volume":"40","author":"L Wei-gang","year":"2021","unstructured":"Wei-gang L, Qiang L (2021) Analysis of environment monitoring network security based on zero trust network model. Sichuan Environ 40(03):60\u201363","journal-title":"Sichuan Environ"},{"issue":"5","key":"411_CR28","first-page":"1229","volume":"54","author":"Y Xin-yue","year":"2021","unstructured":"Xin-yue Y, Gang S, Ya-wei Z (2021) Research on software-defined -perimeter network stealth technology based on zero trust. Commun Techn 54(5):1229\u20131234","journal-title":"Commun Techn"},{"key":"411_CR29","first-page":"13","volume-title":"Proceeding of the 2004 workshop on specification and automated processing of security requirements (SAPS)","author":"Y Chevalier","year":"2004","unstructured":"Chevalier Y, Compagna L, Cuellar J et al (2004) A high level protocol specification language for industrial security-sensitive protocols. In: Proceeding of the 2004 workshop on specification and automated processing of security requirements (SAPS). Austrian Computer Society, Linz, p 13"},{"key":"411_CR30","unstructured":"Genet T. A short span+ avispa tutorial [EB\/OL]. http:\/\/people.irisa.fr\/Thomas.Genet\/span\/SPAN_AVISPA_tutorial.pdf. 2015-10-15\/2021-06-23"},{"issue":"5","key":"411_CR31","doi-asserted-by":"publisher","first-page":"2165","DOI":"10.1093\/ietcom\/e88-b.5.2165","volume":"88","author":"WC Ku","year":"2005","unstructured":"Ku WC, Chang ST (2005) Impersonation attack on a dynamic ID-based remote user authentication scheme using smart cards. IEICE Trans Commun 88(5):2165\u20132167","journal-title":"IEICE Trans Commun"},{"key":"411_CR32","first-page":"911","volume-title":"Proceeding of the 2009 47th annual Allerton conference on communication, control, and computing (Allerton)","author":"Y Mo","year":"2009","unstructured":"Mo Y, Sinopoli B (2009) Secure control against replay attacks. In: Proceeding of the 2009 47th annual Allerton conference on communication, control, and computing (Allerton). IEEE Press, Illinois, pp 911\u2013918"}],"container-title":["Journal of Cloud Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-023-00411-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13677-023-00411-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-023-00411-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T16:07:41Z","timestamp":1682352461000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofcloudcomputing.springeropen.com\/articles\/10.1186\/s13677-023-00411-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,24]]},"references-count":32,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2023,12]]}},"alternative-id":["411"],"URL":"https:\/\/doi.org\/10.1186\/s13677-023-00411-z","relation":{},"ISSN":["2192-113X"],"issn-type":[{"value":"2192-113X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,4,24]]},"assertion":[{"value":"8 December 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 February 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 April 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"I declare that the authors have no competing interests as defined by Springer, or other interests that might be perceived to influence the results and\/or discussion reported in this paper.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"62"}}