Authentication and Access Control based on Distributed Ledger Technology: A survey

Abstract

As the first step in preserving system security, Authentication and Access Control (AAC) plays a vital role in all businesses. Recently, emerging the blockchain and smart contract technology has attracted significant scientific interest in research areas like authentication and access control processes. In the context of authentication and access control, blockchain can offer greater data and rule confidentiality and integrity, as well as increasing the availability of the system by removing the single point of failure in the procedure. To categorize and find the most important open problems in this research area, having a comprehensive review is crucial. To the best of our knowledge, for the first time in this survey, we aim to describe the current state of the art in deploying blockchain and smart contracts specifically in authentication and access control. Following an introduction to AAC and blockchain technology, we present a brief background of distributed ledger technology, access control and authentication. To offer a clearer understanding of the state of the art, we propose taxonomy to categorize the existing methods based on their type, application environment and their justification for exploiting blockchain. For the conclusion of the paper, we examined the advantages and disadvantages of the proposed method in different contexts like security, resource consumption and privacy. Also we discussed about the future work.

A Blockchain-Based Verifiable User Data Access Control Policy for Secured Cloud Data Storage

“…On the other hand, Ghaffari et al [ 11 ] conducted a comprehensive study to provide a comprehensive picture of the current state of the art in integrating blockchain and smart contracts in access control and authentication techniques. They began by outlining the history of distributed ledger technology, proposing a taxonomy for categorizing current methods based on type, application environment, and blockchain exploitation.…”

A Novel Access Control Method Via Smart Contracts for Internet-Based Service Provisioning

“…As an example, using Blockchain for access control procedure may decrease the time efficiency, while it increases the non-repudiation and removes the single point of failure. Existing Blockchain-based access control methods can be classified into two main categories [21]. In the first category, they use Blockchain as a distributed database to store rules (see Fig.…”

Blockchain for IoT Access Control: Recent Trends and Future Research Directions

“…While a few other proposals (e.g., [21], [22], [23], [24], [25], [26], [27]) try to survey blockchain convergence in access control for the IoT, they do not focus on the various distinct properties of blockchain and their integration into IoT access control to a fine-grained level. Their discussions do not focus on key attributes that determine the suitability of an access control approach for a given context, e.g., how access control manages resources, whether it transfers access rights, how it enforces permissions or manages attributes, and whether it is scalable.…”