A Blockchain-Based Access Control Scheme for Zero Trust Cross-Organizational Data Sharing
Top Cited Papers
Open Access
- 21 August 2023
- journal article
- research article
- Published by Association for Computing Machinery (ACM) in ACM Transactions on Internet Technology
- Vol. 23 (3) , 1-25
Abstract
Multi-organization data sharing is becoming increasingly prevalent due to the interconnectivity of systems and the need for collaboration across organizations (e.g., exchange of data in a supply chain involving multiple upstream and downstream vendors). There are, however, data security concerns due to lack of trust between organizations that may be located in jurisdictions with varying security and privacy legislation and culture (also referred to as a zero trust environment). Hence, in such a zero trust setting, one should introduce strengthened, yet efficient, access control mechanisms to facilitate cross-organizational data access and exchange requests. Contemporary access control schemes generally focus on protecting a single objective rather than multiple parties, due to higher security costs. In this article, we propose a blockchain-based access control scheme, designed to facilitate lightweight data sharing among different organizations. Specifically, our approach utilizes the consortium blockchain to establish a trustworthy environment, in which a Role-Based Access Control (RBAC) model is then deployed using our proposed multi-signature protocol and smart contract methods. Evaluation of our proposed approach is performed on the HyperLedger Fabric consortium blockchain platform using both Caliper and BFT-SMaRT benchmarks, and the findings demonstrate the utility of our approach.Keywords
Funding Information
- National Key Research and Development Program of China (2021YFB2701300)
- National Natural Science Foundation of China (61972034)
- Natural Science Foundation of Beijing Municipality (4202068)
- Natural Science Foundation of Shandong Province (ZR2019ZD10, ZR2020ZD01)
- Defense Industrial Technology Development Program (JCKY2020206C058)
- Industrial Technology Basic Public Service Platform Project–Information Encoding Algorithm Application Public Service Platform (2019-00904-1-1)
- Cloud Technology Endowed Professorship
This publication has 18 references indexed in Scilit:
- BSeIn: A blockchain-based secure mutual authentication with fine-grained access control system for industry 4.0Journal of Network and Computer Applications, 2018
- Hyperledger fabric2018
- Decentralized, BlockChain Based Access Control Framework for the Heterogeneous Internet of Things2018
- RBAC-SC: Role-Based Access Control Using Smart ContractIEEE Access, 2018
- Blockchain Meets IoT: An Architecture for Scalable Access Management in IoTIEEE Internet of Things Journal, 2018
- Decentralized Access Control Mechanism with Temporal Dimension Based on Blockchain2017
- Implementing Zero Trust Cloud Networks with Transport Access Control and First Packet Authentication2016
- FairAccess: a new Blockchain‐based access control framework for the Internet of ThingsSecurity and Communication Networks, 2016
- PKI Trust Models2013
- Role-based access control modelsComputer, 1996