Attribute-based Access Control Research Articles

[formula omitted]: A blockchain-based secure access control management for the Internet of Things

The Internet of Things (IoT) paradigm has widespread applications across many fields in which private and sensitive user or environmental data are sensed and shared. Most present-day IoT applications depend on centralized cloud servers for authentication and access control. Validating the identity of a user and determining the legitimacy of his/her access requests require multiple rounds of data communications over the untrusted Internet, exposing sensitive data to potential attacks. Thus, protecting these data from security and privacy attacks and ensuring legitimate access is imperative. To address this challenge, we adopt an emerging technology called blockchain to propose a decentralized security framework called BloAC. It ensures secure access control in IoT networks without the intervention of the back-end cloud. We have used the Hyperledger Fabric, an open-source, permissioned blockchain platform, for implementing a prototype system using customized attribute-based access control (ABAC) policies. We have performed simulated and real test bed-based experiments to illustrate that BloAC outperforms the cloud–server-based access control in latency and scalability, significantly reducing latency by up to 42.45% compared to cloud-based solutions. Finally, we conduct a security analysis to formally verify the ABAC policies used in BloAC and establish its robustness against attacks theoretically and using the AVISPA tool.

Enhancing attribute-based access control with Ethereum and ZK-SNARK technologies

Enhancing attribute-based access control with Ethereum and ZK-SNARK technologies

Attribute-Based Access Control in Internet of Things Security

Attribute-Based Access Control in Internet of Things Security

An Efficient Verification Approach to Separation of Duty in Attribute-Based Access Control

An Efficient Verification Approach to Separation of Duty in Attribute-Based Access Control

Blockchain-based proxy re-encryption access control method for biological risk privacy protection of agricultural products

In today’s globalized agricultural system, information leakage of agricultural biological risk factors can lead to business risks and public panic, jeopardizing corporate reputation. To solve the above problems, this study constructs a blockchain network for agricultural product biological risk traceability based on agricultural product biological risk factor data to achieve traceability of biological risk traceability data of agricultural product supply chain to meet the sustainability challenges. To guarantee the secure and flexible sharing of agricultural product biological risk privacy information and limit the scope of privacy information dissemination, the blockchain-based proxy re-encryption access control method (BBPR-AC) is designed. Aiming at the problems of proxy re-encryption technology, such as the third-party agent being prone to evil, the authorization judgment being cumbersome, and the authorization process not automated, we design the proxy re-encryption access control mechanism based on the traceability of agricultural products’ biological risk factors. Designing an attribute-based access control (ABAC) mechanism based on the traceability blockchain for agricultural products involves defining the attributes of each link in the agricultural supply chain, formulating policies, and evaluating and executing these policies, deployed in the blockchain system in the form of smart contracts. This approach achieves decentralization of authorization and automation of authority judgment. By analyzing the data characteristics within the agricultural product supply chain to avoid the malicious behavior of third-party agents, the decentralized blockchain system acts as a trusted third-party agent, and the proxy re-encryption is combined with symmetric encryption to improve the encryption efficiency. This ensures a efficient encryption process, making the system safe, transparent, and efficient. Finally, a prototype blockchain system for traceability of agricultural biological risk factors is built based on Hyperledger Fabric to verify this research method’s reliability, security, and efficiency. The experimental results show that this research scheme’s initial encryption, re-encryption, and decryption sessions exhibit lower computational overheads than traditional encryption methods. When the number of policies and the number of requests in the access control session is 100, the policy query latency is less than 400 ms, the request-response latency is slightly more than 360ms, and the data uploading throughput is 48.7 tx/s. The data query throughput is 81.8 tx/s, the system performance consumption is low and can meet the biological risk privacy protection needs of the agricultural supply chain. The BBPR-AC method proposed in this study provides ideas for achieving refined traceability management in the agricultural supply chain and promoting digital transformation in the agricultural industry.

A blockchain architecture with smart contracts for an additive symbiotic network - a case study

AbstractAdopting innovative technologies such as blockchain and additive manufacturing can help organisations promote the development of additive symbiotic networks, thus pursuing higher sustainable goals and implementing circular economy strategies. These symbiotic networks correspond to industrial symbiosis networks in which wastes and by-products from other industries are incorporated into additive manufacturing processes. The adoption of blockchain technology in such a context is still in a nascent stage. Using the case study method, this research demonstrates the adoption of blockchain technology in an additive symbiotic network of a real-life context. The requirements to use a blockchain network are identified, and an architecture based on smart contracts is proposed as an enabler of the additive symbiotic network under study. The proposed solution uses the Hyperledger Fabric Attribute-Based Access Control as the distributed ledger technology. Even though this solution is still in the proof-of-concept stage, the results show that adopting it would allow the elimination of intermediary entities, keep available tracking records of the resources exchanged, and improve trust among the symbiotic stakeholders (that do not have any trust or cooperation mechanisms established before the symbiotic relationship). This study highlights that the complexity associated with introducing a novel technology and the technology’s immaturity compared to other data storage technologies are some of the main challenges related to using blockchain technology in additive symbiotic networks.

A revocable attribute-based access control with non-monotonic access structure

A revocable attribute-based access control with non-monotonic access structure

Efficiently Supporting Attribute-Based Access Control in Linux

Efficiently Supporting Attribute-Based Access Control in Linux

Attribute-Based Access Control Scheme for Secure Identity Resolution in Prognostics and Health Management

Attribute-Based Access Control Scheme for Secure Identity Resolution in Prognostics and Health Management

Privacy-Preserving Attribute-Based Access Control Scheme With Intrusion Detection and Policy Hiding for Data Sharing in VANET

Privacy-Preserving Attribute-Based Access Control Scheme With Intrusion Detection and Policy Hiding for Data Sharing in VANET

Policy-Based Contextual Access Control Mechanism for Smart IoT Devices

Access control remained an important aspect of computer security, and it has been the focus of extensive research over the past several decades. Access control mechanisms generally composed of two fundamental components: authentication and authorization. Authentication refers to verifying the identity of an entity, and authorization guarantees that only authenticated entity or devices can access the permitted devices or other resources. Various traditional access control schemes, such as Access Control Lists (ACLs), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) exist, but these have certain limitations that hinder their direct implementation in the Internet of Things (IoT). For instance, ACLs maintain user-specific access privilege lists, which are feasible for environments with limited users and devices, but impractical for large scale systems like IoT. RBAC assigns devices access through roles associated with permissions, however role management in dynamic IoT environments poses significant challenges. ABAC grants access based on user and devices attributes that requires certain attribute criteria for authorization. We advocate that IoT environments are dynamic in nature and consist of very large volumes of smart IoT devices (such as smart sensors, smart phones and gadgets) that which introduce unique access control challenges. One significant challenge is providing dynamic access to smart IoT devices, as opposed to relying on static rules, roles, or attributes. Considering these challenges, this research advocates for a novel access control scheme tailored for accessing smart IoT devices in internet of things environments. The prototype implementation of the proposed approach is carried out along with conducting the usability study to evaluate the performance and suitability of the proposed system for real world internet of things (IoT) scenarios.

Implementation of Attribute-Base Control in Personal Data Protection

This research addresses the growing concern of cybersecurity and access control in Python applications, providing actionable recommendations for improving Attribute-Based Access Control (ABAC) systems to better protect personal data. The study aims to evaluate ABAC's efficacy in managing access control within Python applications, particularly focusing on its ability to provide precise and fine-grained control over personal data access. By analyzing three key attributes—user roles, data classification, and access times—within Python applications, the research methodically assesses ABAC's performance and challenges in implementation. The findings, with a significant proportion of 70%, underscore ABAC's advantages over traditional models like Discretionary Access Control (DAC) and Role-Based Access Control (RBAC), emphasizing its capability to provide precise and fine-grained control over personal data access. Additionally, the research identifies and addresses three main challenges in ABAC implementation: attribute management complexity 15%, the necessity for standardization 10%, and interoperability issues 5%. This research has far-reaching implications, highlighting the importance of meticulous planning and modeling for successful ABAC deployment. By enriching our understanding of ABAC in Python-based environments, the study offers insights for enhancing cybersecurity measures and access control strategies in personal data protection.

ABAC-PA2: Attribute-Based Access Control Model with Privacy aware Anonymous Access

Cloud computing offers an excellent platform for sharing information and services among departments, partners, customers, and other parties. To ensure the effectiveness of a cloud deployment, it is imperative that resources and data are available in a secure and efficient manner. The protection of personally identifiable information (PII) is a critical requirement for many organizations in order to prevent unauthorized disclosure of that information. In spite of the fact that private information may not be stored within an authorized organization, it can still be protected. It has been shown in recent literature that anonymity can be used to preserve PII privacy. The current methodology for anonymous access is based on certificates rather than subject identity or attribute-based encryption. Identity-based access control is inflexible and violates privacy laws. Access to a certificate can be linked using a certificate that poses a risk of re-identification. The types of objects that can be encrypted by attributes are limited.To preserve the privacy of attributes set of subject and object, we extend the attribute-based access control (ABAC) model by expressing privacy requirements with anonymous access. It inherits several characteristics from ABAC, including fine-grained authorizations, unlimited object types, policy flexibility, and object privacy. ABAC-PA2 uses homomorphic attribute-based signature (HABS), a secure anonymous access framework that enhances ABAC's identity-less and incorporates privacy-preserving principles by assigning privacy levels to resources.

Blockchain Enforced Attribute based Access Control with ZKP for Healthcare Service

The relationship between doctors and patients is reinforced through the expanded communication channels provided by remote healthcare services, resulting in heightened patient satisfaction and loyalty. Nonetheless, the growth of these services is hampered by security and privacy challenges they confront. Additionally, patient electronic health records (EHR) information is dispersed across multiple hospitals in different formats, undermining data sovereignty. It allows any service to assert authority over their EHR, effectively controlling its usage. This paper proposes a blockchain enforced attribute-based access control in healthcare service. To enhance the privacy and data-sovereignty, the proposed system employs attribute-based access control, zero-knowledge proof (ZKP) and blockchain. The role of data within our system is pivotal in defining attributes. These attributes, in turn, form the fundamental basis for access control criteria. Blockchain is used to keep hospital information in public chain but EHR related data in private chain. Furthermore, EHR provides access control by using the attributed based cryptosystem before they are stored in the blockchain. Analysis shows that the proposed system provides data sovereignty with privacy provision based on the attributed based access control.

A cross-chain access control mechanism based on blockchain and the threshold Paillier cryptosystem

With the continuous maturation of blockchain technology and the increasing demands for various industry applications, data sharing and interoperability among different blockchain networks face significant challenges. Research on cross-chain interoperability mechanisms has facilitated data collaboration across organizations and industries, enhancing the value and utility of data. When engaging in cross-chain data interactions, access control ensures the security and privacy of data while promoting collaboration and information exchange among multiple chains. Attribute-based access control can provide fine-grained authorization support, matching complex business scenarios. However, publicly disclosed policies and attributes in a transparent blockchain network may pose privacy and security issues. To address these issues, this paper proposes a cross-heterogeneous multichain data access control scheme based on attributes and threshold homomorphic encryption, achieving fine-grained and secure cross-domain access control in cross-chain networks. This scheme uses the threshold Paillier cryptosystem to encrypt and conceal user attributes and access policies. Through smart contracts, homomorphic differential computation is performed on the ciphertext of policies and attributes, to protect data privacy. This solution leverages private key decryption shares from multiple relay nodes in the cross-chain network to jointly decrypt the computation results, providing secure access control in complex cross-chain scenarios. Security analysis and experimental results demonstrate that the proposed scheme ensures security with reasonable computational overhead, to meet the access control requirements in cross-chain networks.

Surveying Authentication and Authorization Mechanisms in Today's Web Technology Landscape

This paper presents a comprehensive survey of authentication and authorization mechanisms in contemporary web technology. It examines the diverse approaches and frameworks employed to secure web systems and protect user data. Beginning with an overview of fundamental concepts such as authentication methods and access control models, the paper explores the landscape of authentication and authorization in depth. It evaluates the effectiveness and limitations of various authentication methods, including passwords, biometrics, and multifactor authentication (MFA). Additionally, the paper scrutinizes authorization mechanisms such as role-based access control (RBAC), attribute-based access control (ABAC), and policy-based access control (PBAC). Through a systematic review of integration frameworks like OAuth and OpenID Connect, it assesses their role in facilitating secure authentication and authorization processes. Furthermore, the paper analyzes emerging trends and innovations in authentication and authorization practices, providing insights into the future direction of web security. By synthesizing existing research and identifying key challenges and opportunities, this survey paper aims to inform researchers, practitioners, and policymakers about the state-of-the-art in authentication and authorization mechanisms and guide future developments in web security.

A Secure Storage For Medical Information Scheme Using Blockchain

Nowadays, many companies, organizations, hospitals and individuals have adopted centralized data storage systems to store and share data. However, these systems create a single point of failure and involve a centralized entity or third party, which can cause concern for users. Decentralized storage systems are therefore needed to overcome the drawbacks of the traditional approach. However, in the face of centralization issues, this paper proposes a combination of Hyperledger Fabric, InterPlanetary File System (IPFS), Attribute-Based Access Control (ABAC), and proxy re-encryption to enhance the security and transparency features of decentralized storage systems. Thus, the proposed scheme provides a secure decentralized system storage of medical information using a consortium blockchain

Trusted Data Access Control Based on Logistics Business Collaboration Semantics

Trusted Data Access Control Based on Logistics Business Collaboration Semantics

Compare and Analysis of Different Access Controlling Mechanisms in OAuth 2.0

This article analyses the basic concepts associated with authorization methods and how existing solutions face the common problems in the modern world. Different possible methods are introduced to solve such kind of problems. This paper proposes a model for attribute-based access control for cross-domain sources using APIs. The model includes basic architectural decisions and principles of ABAC (attribute based access control), RBAC (role based access control) and OAuth. Within the capabilities of OAuth 2.0 and ABAC will allow you to implement an end-to-end security model that can protect the privacy of customers and employees, the most important transactions for the financial sectors, business, and in general the most sensitive data over the API gateway. It is also possible to filter the response message, which is very important for customers.

Zero-Trust Cryptographic Protocols and Differential Privacy Techniques for Scalable Secure Multi-Party Computation in Big Data Analytics

This research explores the integration of zero-trust cryptographic protocols and differential privacy techniques to establish scalable secure multi-party computation in the context of big data analytics. The study delves into the challenges of collaborative data processing and presents a comprehensive framework that addresses the intricate balance between security, scalability, and privacy. The framework focuses on zero-trust cryptographic protocols, advocating for a fundamental shift in trust assumptions within distributed systems. Differential privacy techniques are then seamlessly integrated to preserve individual privacy during collaborative data analytics. This model employs a layered approach and distributed architecture and leverages serverless and edge computing fusion to enhance scalability and responsiveness in dynamic big data environments. This also explores the optimization of computational resources and real-time processing capabilities through serverless and edge computing fusion. A distributed architecture facilitates efficient collaboration across multiple parties, allowing for seamless data integration, preprocessing, analytics, and visualization. Privacy preservation takes centre stage in the big data privacy component of the framework. Context-aware attribute analysis, distributed federated learning nodes, and Attribute-Based Access Control (ABAC) with cryptographic enforcement are introduced to ensure fine-grained access control, contextual understanding of attributes, and collaborative model training without compromising sensitive information. Smart Multi-Party Computation Protocols (SMPCP) further enhance security, enabling joint computation of functions over private inputs while ensuring the integrity and immutability of data transactions. In essence, the achieved results manifest a paradigm shift where the layered approach, distributed architecture, and advanced privacy techniques converge to heighten data security, drive efficient computation, and robustly preserve privacy in the expansive landscape of big data analytics. Fault tolerance and resource utilization exhibit significant advancements, with fault tolerance experiencing a 10% boost and resource utilization optimizing by 12%. These enhancements underscore the robustness and efficiency of the system's design, ensuring resilience and optimized resource allocation.