Fine-Grained Data Access Control for Collaborative Process Execution on Blockchain

Edoardo, Marangone,; Ciccio, Claudio Di; Weber, Ingo

doi:10.1007/978-3-031-16168-1_4

Cited by 8 publications

(1 citation statement)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, these and all of the above works deal with the access control policy of individual resources, while distributed applications contain many resources and are subject to the access control policies of the respective organizational domains of the underlying resources. Marangone et al [18] propose an approach based on blockchain technology to control data access in the context of a multi-party business process using attribute-based encryption. They encrypt data on the basis of user permissions such that only those who have access to the data are actually able to decrypt it.…”

Section: Related Workmentioning

confidence: 99%

Blockchain Based Auditable Access Control For Business Processes With Event Driven Policies

Akhtar,

Barati,

Shafiq

et al. 2024

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

The use of blockchain technology has been proposed to provide auditable access control for individual resources. Unlike the case where all resources are owned by a single organization, this work focuses on distributed applications such as business processes and distributed workflows. These applications are often composed of multiple resources/services that are subject to the security and access control policies of different organizational domains. Here, blockchains provide an attractive decentralized solution to provide auditability. However, the underlying access control policies may have event-driven constraints and can be overlapping in terms of the component conditions/rules as well as events. Existing work cannot handle event-driven constraints and also does not sufficiently account for overlaps leading to significant overhead in terms of cost and computation time for evaluating authorizations over the blockchain. In this work, we propose an automata-theoretic approach for generating a cost-efficient composite access control policy. We reduce this composite policy generation problem to the standard weighted set cover problem. We show that the composite policy correctly captures all the local access control policies and reduces the policy evaluation cost over the blockchain. We have implemented the initial prototype of our approach using Ethereum as the underlying blockchain and empirically validated the effectiveness and efficiency of our approach.

show abstract

Section: Related Workmentioning

confidence: 99%