A Blockchain-Based Access Control Scheme for Zero Trust Cross-Organizational Data Sharing

【Author】 Gai, Keke; She, Yufeng; Zhu, Liehuang; Choo, Kim-Kwang Raymond; Wan, Zhiguo

【Source】ACM TRANSACTIONS ON INTERNET TECHNOLOGY

【影响因子】3.989

【Abstract】Multi-organization data sharing is becoming increasingly prevalent due to the interconnectivity of systems and the need for collaboration across organizations (e.g., exchange of data in a supply chain involving multiple upstream and downstream vendors). There are, however, data security concerns due to lack of trust between organizations that may be located in jurisdictions with varying security and privacy legislation and culture (also referred to as a zero trust environment). Hence, in such a zero trust setting, one should introduce strengthened, yet efficient, access control mechanisms to facilitate cross-organizational data access and exchange requests. Contemporary access control schemes generally focus on protecting a single objective rather than multiple parties, due to higher security costs. In this article, we propose a blockchain-based access control scheme, designed to facilitate lightweight data sharing among different organizations. Specifically, our approach utilizes the consortium blockchain to establish a trustworthy environment, in which a Role-Based Access Control (RBAC) model is then deployed using our proposed multi-signature protocol and smart contract methods. Evaluation of our proposed approach is performed on the HyperLedger Fabric consortium blockchain platform using both Caliper and BFT-SMaRT benchmarks, and the findings demonstrate the utility of our approach.

【Keywords】Consortium blockchain; zero trust; multi-signature; access control; multi-organizational data sharing

【发表时间】2023 AUG

【收录时间】2023-10-16

【文献类型】实验仿真

【主题类别】

区块链技术-协同技术-数据管理