Trusted and Efficient Cross-Domain Access Control System Based on Blockchain

In a distributed system, cross-domain access control is an important mechanism to realize secure data sharing among multiple domains. Most of the existing cross-domain access control mechanisms are generally based on a single-server architecture, which has limitations in terms of security and reliability (the access decision may be incorrect) and completeness and confidentiality (the access records can be modified). Blockchain technology with decentralization, verifiability, and immutability properties can solve these problems. Motivated by these facts, in this article, we construct a trusted and efficient cross-domain access control system based on blockchain. Consequently, we integrate blockchain and role mapping technology to provide reliable and verifiable cross-domain access process. We use blockchain to record user roles, role mapping rules, access policies, and audit records, realizing user self-validation, and access nonreputation. Considering the low throughput of the blockchain, we design an efficient smart contract to make the access decision based on the access history of users. Finally, a performance evaluation of the system is presented to demonstrate the feasibility of the proposed system.

Download Full-text

Towards a Decentralized Access Control System for IoT Platforms based on Blockchain Technology

2020 International Symposium on Networks, Computers and Communications (ISNCC) ◽

10.1109/isncc49221.2020.9297174 ◽

2020 ◽

Author(s):

Dana Haj Hussein ◽

Ragunath Anbarasu ◽

Ashraf Matrawy ◽

Mohamed Ibnkahla

Keyword(s):

Control System ◽

Access Control ◽

Blockchain Technology ◽

Access Control System ◽

Iot Platforms

Download Full-text

PyRos: A State Channel-Based Access Control System for a Public Blockchain Network

Security and Communication Networks ◽

10.1155/2020/8891183 ◽

2020 ◽

Vol 2020 ◽

pp. 1-13

Author(s):

Siwan Noh ◽

Sang Uk Shin ◽

Kyung-Hyune Rhee

Keyword(s):

Control System ◽

Access Control ◽

The State ◽

Security Requirements ◽

Decentralized System ◽

Blockchain Technology ◽

Access Control Policies ◽

Previous State ◽

Access Control System

Blockchain is a technology that enables the implementation of a decentralized system by replacing the role of the centralized entity with the consensus of participants in the system to solve the problem of subordination to the centralized entity. Blockchain technology is being considered for application in numerous fields; however, the scalability limitation of a public blockchain has led many researchers to consider private blockchains, which reduce the security of the system while improving scalability. A state channel represents a leading approach among several scalability solutions, intended to address public blockchain scalability challenges while ensuring the security of the blockchain network. Participants in the channel perform the process of updating the state of the channel outside the blockchain. This process can proceed very quickly because it does not require the consensus of the blockchain network, but still, like on-chain, it can guarantee features such as irreversibility. In this paper, we propose the PyRos protocol, an access control system that supports the trading and sharing of data between individuals on a public blockchain based on the state channel. As far as we know, the research using the off-chain state channel for access control has not been proposed yet, so PyRos is a new approach in this field. In PyRos, user-defined access control policies are stored off-chain, and policy updates are always rapid regardless of the performance of the blockchain network. Moreover, PyRos provides means to prevent malicious participants from arbitrarily using the channel’s previous state while resolving constraints due to scalability problems, along with privacy guarantees for the transaction content. To evaluate the efficiency and security of PyRos, we provide qualitative analysis of security requirements and analysis in terms of the performance of public blockchain platforms.

Download Full-text

A Supply-chain System Framework Based on Internet of Things Using Blockchain Technology

ACM Transactions on Internet Technology ◽

10.1145/3409798 ◽

2021 ◽

Vol 21 (1) ◽

pp. 1-24

Author(s):

A. Qun Song ◽

Yuhao Chen ◽

Yan Zhong ◽

Kun Lan ◽

Simon Fong ◽

...

Keyword(s):

Supply Chain ◽

Control System ◽

Internet Of Things ◽

Access Control ◽

Time Data ◽

Supply Chain System ◽

Full Account ◽

Blockchain Technology ◽

Access Control System ◽

Data Isolation

Numerous supply-chain combines with internet of things (IoT) applications have been proposed, and many methods and algorithms enhance the convenience of supply chains. However, new businesses still find it challenging to enter a supply chain, because unauthorised IoT devices of different companies illegally access resources. As security is paramount in a supply chain, IoT management has become very difficult. Public resources allocation and waste management also pose a problem. To solve the above problems, we proposed a new IoT management framework that embraces blockchain technology to help companies to form a supply chain effectively. This framework consists of an access control system, a backup peer mechanism and an internal data isolation and transmission approach. The access control system has a registrar module and an inspection module. The registrar module is mainly responsible for information registration with a registration policy, which has to be followed by all the companies in the supply chain. Besides, it provides a revocation and updating function. The inspection module focuses on judging misbehaviour and monitors the actions of the subjects; when any misoperation occurs, the system will correspondingly penalise violators. So that all related actions and information are verified and stored into blockchain, the IoT access control and safety of IoT admission are enhanced. Furthermore, in a blockchain system, if one single peer in the network breaks down, then the whole system may stop, because consensus cannot be reached. The data of the broken peer may be lost if it does not commit yet. The backup peer mechanism allows the primary peer and the backup peer to connect to an inspecting server for acquiring real-time data. The internal data isolation and transmission modules transmit and stores private data without creating a new subchannel. The proposed method is taken full account of the stability of the network and the fault tolerance to guarantee the robust of the system. To obtain unbiases results, experiments are conducted in two different blockchain environment. The results show our proposed method are promising IoT blockchain system for the supply chain.

Download Full-text