BSSPD: A Blockchain‐Based Security Sharing Scheme for Personal Data with Fine‐Grained Access Control

Abstract

Privacy protection and open sharing are the core of data governance in the AI-driven era. A common data-sharing management platform is indispensable in the existing data-sharing solutions, and users upload their data to the cloud server for storage and dissemination. However, from the moment users upload the data to the server, they will lose absolute ownership of their data, and security and privacy will become a critical issue. Although data encryption and access control are considered up-and-coming technologies in protecting personal data security on the cloud server, they alleviate this problem to a certain extent. However, it still depends too much on a third-party organization’s credibility, the Cloud Service Provider (CSP). In this paper, we combined blockchain, ciphertext-policy attribute-based encryption (CP-ABE), and InterPlanetary File System (IPFS) to address this problem to propose a blockchain-based security sharing scheme for personal data named BSSPD. In this user-centric scheme, the data owner encrypts the sharing data and stores it on IPFS, which maximizes the scheme’s decentralization. The address and the decryption key of the shared data will be encrypted with CP-ABE according to the specific access policy, and the data owner uses blockchain to publish his data-related information and distribute keys for data users. Only the data user whose attributes meet the access policy can download and decrypt the data. The data owner has fine-grained access control over his data, and BSSPD supports an attribute-level revocation of a specific data user without affecting others. To further protect the data user’s privacy, the ciphertext keyword search is used when retrieving data. We analyzed the security of the BBSPD and simulated our scheme on the EOS blockchain, which proved that our scheme is feasible. Meanwhile, we provided a thorough analysis of the storage and computing overhead, which proved that BSSPD has a good performance.

BFR‐SE: A Blockchain‐Based Fair and Reliable Searchable Encryption Scheme for IoT with Fine‐Grained Access Control in Cloud Environment

“…The private and public keys are used by users to sign and verify a transaction. Our definition of a transaction is consistent with our previous work [35,36]:…”

A survey of application research based on blockchain smart contract

“…In addition, For the privacy security problem caused by over reliance on cloud-service providers in data sharing management platform, Gao et al [ 134 ] proposed a blockchain based personal data security sharing scheme (BSSPD) by combining EOS, CP-ABE and IPFS, which realized data management and sharing by using smart contract, and maximized the decentralization of scheme by using EOS and IPFS, however, the overhead of computation is high in large-scale application. In order to solve the trouble that sensitive data is easily tampered with or leaked by hackers or cloud internal managers due to centralized access control mechanism in cloud, Yang et al [ 135 ] put forward an access control framework for privacy protection based on blockchain (AuthPrivacyChain), which is based on EOS local test network and uses smart contract to achieve the settings such as transaction, encryption and access control permission, but the efficiency and performance of system needing to be strengthened.…”

A Novel User Collusion‐Resistant Decentralized Multi‐Authority Attribute‐Based Encryption Scheme Using the Deposit on a Blockchain

“…Many researchers have recently used ABE to achieve decentralized data sharing. Gao et al [24] and Zhang et al [25] proposed a decentralized data sharing system. They propose a method that combines the blockchain and CP-ABE to resolve problems caused by the untrusted cloud service provider in traditional data sharing systems.…”

“…They propose a method that combines the blockchain and CP-ABE to resolve problems caused by the untrusted cloud service provider in traditional data sharing systems. Instead of storing personal data on the untrusted cloud server, Gao et al [24] suggested that InterPlanetary File System (IPFS) nodes store a chunk of encrypted data. In his data sharing scheme, only users with appropriate attributes can collect chunks from the decentralized file system and reconstruct the original decrypted data.…”

“…Subsequently, the IoT device submits ABS to the cloud server and obtains encrypted data via a secure channel established through mutual authentication. However, [22,24,25] assumed a single attribute key authority in their system, so it failed to present available ABE in the multi-authority model in which several different authorities operate simultaneously. A singleauthority ABE model violates our goal of mitigating the dependence of the centralized authority.…”