基于区块链的可溯源访问控制机制

doi:10.11959/j.issn.1000-436X.2020232

Abstract

Abstract:

To improve the transparency and traceability of access control, a blockchain-based access control mechanism for data traceability and provenance was proposed.The proposed access control policy was transferred to the smart contract and deployed on the blockchain, and the access authorization evaluation was realized by executing the smart contract deployed on the blockchain to ensure the decentralization, transparency and traceability of the access control process.The manner of combining off-chain and on-chain was adopted, the object was stored in off-chain data server, and the object index was generated by the object storage address and hash value, and deployed on the object blockchain.The log of object access authorization and access were recorded in the log blockchain, any misbehavior was immutably recorded.The security analysis show that, the proposed mechanism achieve the properties of decentralization, transparency and traceability while ensuring the privacy of data.

Key words: blockchain, access control, smart contract, decentralized, traceability

CLC Number:

TP302

Rongna XIE, Hui LI, Guozhen SHI, Yunchuan GUO, Ming ZHANG, Xiuze DONG. Blockchain-based access control mechanism for data traceability[J]. Journal on Communications, 2020, 41(12): 82-93.

Figures/Tables 10

References 19

[1]	NAKAMOTO S . Bitcoin:a peer-to-peer electronic cash system[R]. (2018)[2020-06-22].
[2]	NOVO O . Blockchain meets IoT:an architecture for scalable access management in IoT[J]. IEEE Internet of Things Journal, 2018,5(2): 1184-1195.
[3]	SUKHODOLSKIY I , ZAPECHNIKOV S . A blockchain-based access control system for cloud storage[C]// Proceedings of the 2018 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering. Piscataway:IEEE Press, 2018: 1575-1578.
[4]	ZHU Y , QIN Y , GAN G H ,et al. TBAC:transaction-based access control on blockchain for resource sharing with cryptographically decentralized authorization[C]// Proceedings of the 2018 IEEE 42nd Annual Computer Software and Applications Conference. Piscataway:IEEE Press, 2018: 535-544.
[5]	ES-SAMAALI H , OUTCHAKOUCHT A , LEROY J P . A blockchain-based access control for big data[J]. Journal of Computer Networks and Communications, 2017,5(7): 137-147.
[6]	MAESA D D F , MORI P , RICCI L . Blockchain based access control[C]// Proceedings of the IFIP International Conference on Distributed Applications and Interoperable Systems. Geneva:IFIP Newsletter, 2017: 206-220.
[7]	MAESA D D F , MORI P , RICC L . A blockchain based approach for the definition of auditable access control system[J]. Computers ＆ Security, 2019,84(7): 93-119.
[8]	MAESA D D F , MORI P , RICCI L . Blockchain based access control services[C]// Proceedings of the IEEE International Symposium on Recent Advances on Blockchain and Its Applications (BlockchainApp). Piscataway:IEEE Press, 2018: 1379-1386.
[9]	刘敖迪, 杜学绘, 王娜 ,等. 基于区块链的大数据访问控制机制[J]. 软件学报, 2019,30(9): 2636-2654.
	LIU A D , DU X H , WANG N ,et al. Blockchain-based access control mechanism for big data[J]. Journal of Software, 2019,30(9): 2636-2654.
[10]	杜瑞忠, 刘妍, 田俊峰 . 物联网中基于智能合约的访问控制方法[J]. 计算机研究与发展, 2019,56(10): 2287-2298.
	DU R Z , LIU Y , TIAN J F . An access control method using smart con-tract for internet of things[J]. Journal of Computer Research and De-velopment, 2019,56(10): 2287-2298.
[11]	TRUONG N B , SUN K , LEE G M ,et al. GDPR-compliant personal data management:a blockchain-based solution[J]. IEEE Transaction on Information Forensics and Security, 2019,15(10): 1746-1761.
[12]	WU Z , WILLIAMS A B , PEROULI D . Dependable public ledger for policy compliance,a blockchain based approach[C]// Proceedings of the 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS). Piscataway:IEEE Press, 2019: 1891-1900.
[13]	ZYSKIND G , NATHAN O . Decentralizing privacy:using blockchain to protect personal data[C]// Proceedings of the Security and Privacy Workshops (SPW). Piscataway:IEEE Press, 2015: 180-184.
[14]	KOSBA A , MILLER A , SHI E ,et al. Hawk:the blockchain model of cryptography and privacy-preserving smart contracts[C]// Proceedings of IEEE Symposium on Security and Privacy. Piscataway:IEEE Press, 2016: 839-858.
[15]	MAKHDOOM I , ZHOU I , ABOLHASAN M ,et al. PrivySharing:a blockchain-based framework for privacy-preserving and secure data sharing in smart cities[J]. Computers ＆ Security, 2020,88(1): 1-34.
[16]	RAHMAN M S , OMAR A A , BHUIYAN M Z A ,et al. Accountable cross-border data sharing using blockchain under relaxed trust assumption[J]. IEEE Transaction on engineering management, 2020,67(4): 1476-1486.
[17]	王秀利, 江晓舟, 李洋 . 应用区块链的数据访问控制与共享模型[J]. 软件学报, 2019,30(6): 1661-1669.
	WANG X L , JIANG X Z , LI Y . Model for data access control and sharing based on blockchain[J]. Journal of Software, 2019,30(6): 1661-1669.
[18]	牛淑芬, 刘文科, 陈俐霞 ,等. 基于联盟链的可搜索加密电子病历数据共享方案[J]. 通信学报, 2020,41(8): 204-214.
	NIU S F , LIU W K , CHEN L X ,et al. Electronic medical record data sharing scheme based on searchable encryption via consortium block-chain[J]. Journal on Communications, 2020,41(8): 204-214.
[19]	NEISSE R , STERI G,NAI-FOVINO I . A blockchain-based approach for data accountability and provenance tracking[C]// Proceedings of the 12th International Conference on Availability,Reliability and Security (ARES’17). New York:ACM Press, 2017: 1-10.

Metrics

Recommended 0

No Suggested Reading articles found!

每秒发送交易次数	读区块链速度/(次·秒^-1)	写区块链速度/(次·秒^-1)
5	3.15	2.51
20	2.71	0.34
50	2.74	0.29
70	2.71	0.34

每秒发送交易次数	读区块链的时间/ms	写区块链的时间/ms
1	314	399
20	7379	57 727
50	18 271	169 463
70	25 805	204 852

每秒发送交易次数	读区块链速度/(次·秒^-1)	写区块链速度/(次·秒^-1)
5	2.90	2.39
20	2.63	0.30
50	2.56	0.28
70	2.58	0.26

每秒发送交易次数	读区块链的时间/ms	写区块链的时间/ms
1	345	418
20	7 603	67 263
50	19 537	178 235
70	27 098	265 645

Blockchain-based access control mechanism for data traceability

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 19

Related Articles 15

Metrics

Recommended 0

[1]	Haibo ZHANG, Yukun CAO, Kaijian LIU, Ruyan WANG. Distributed trust management scheme based on blockchain in Internet of vehicles [J]. Journal on Communications, 2023, 44(5): 148-157.
[2]	Xuejiao LIU, Qiang ZHONG, Yingjie XIA. Efficient authentication scheme for cross-trust domain of IoV based on double-layer shard blockchain [J]. Journal on Communications, 2023, 44(5): 213-223.
[3]	Yingjie XIA, Siyu ZHU, Xuejiao LIU. Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture [J]. Journal on Communications, 2023, 44(4): 111-123.
[4]	Baiji HU, Xiaojuan ZHANG, Yuancheng LI, Rongxin LAI. Multi-function supported privacy protection data aggregation scheme for V2G network [J]. Journal on Communications, 2023, 44(4): 187-200.
[5]	Li JIANG, Shengli XIE, Hui TIAN. Adaptive resource optimization mechanism for blockchain sharding in digital twin edge network [J]. Journal on Communications, 2023, 44(3): 12-23.
[6]	Qianyi DAI, Bin ZHANG, Song GUO, Kaiyong XU. Blockchain network layer anomaly traffic detection method based on multiple classifier integration [J]. Journal on Communications, 2023, 44(3): 66-80.
[7]	Pujie JING, Liangmin WANG, Xuewen DONG, Yushu ZHANG, Qian WANG, Sohail Muhammad. CHA: cross-chain based hierarchical architecture for practicable blockchain regulatory [J]. Journal on Communications, 2023, 44(3): 93-104.
[8]	Xuejiao LIU, Tiancong CAO, Yingjie XIA. Research on efficient and secure cross-domain data sharing of IoV under blockchain architecture [J]. Journal on Communications, 2023, 44(3): 186-197.
[9]	Dongyan HUANG, Kun LI. Research on multi-address time-based blockchain covert communication method [J]. Journal on Communications, 2023, 44(2): 148-159.
[10]	Yiliang HAN, Kaiyang GUO, Riming WU, Kai LIU. Attribute-based encryption scheme against key abuse based on OBDD access structure from lattice [J]. Journal on Communications, 2023, 44(1): 75-88.
[11]	Wei JIN, Fenghua LI, Mingjie YU, Yunchuan GUO, Ziyan ZHOU, Liang FANG. HDFS-oriented cryptographic key resource control mechanism [J]. Journal on Communications, 2022, 43(9): 27-41.
[12]	Yatao YANG, Deli LIU, Peihe LIU, Ping ZENG, Song XIAO. BFV-Blockchainvoting: blockchain-based electronic voting systems with BFV full homomorphic encryption [J]. Journal on Communications, 2022, 43(9): 100-111.
[13]	Xia FENG, Kaiping CUI, Qingqing XIE, Liangmin WANG. Distributed anonymous authentication scheme based on the blockchain in VANET [J]. Journal on Communications, 2022, 43(9): 134-147.
[14]	Leixiao LI, Jinze DU, Hao LIN, Haoyu GAO, Yanyan YANG, Jing GAO. Research progress of blockchain network covert channel [J]. Journal on Communications, 2022, 43(9): 209-223.
[15]	Xuewang ZHANG, Zhihong LI, Jinzhao LIN. Privacy protection scheme based on fair blind signature and hierarchical encryption for consortium blockchain [J]. Journal on Communications, 2022, 43(8): 131-141.