Blockchain-based Access Control Research Articles

Privacy aware decentralized access control system

Abstract IoT security and privacy have proven to be a significant challenge. The traditional access control protocols are not suitable for IoT mainly due to a massive scale, ubiquitous connectivity and distributed nature. Blockchain based access control approaches provide decentralized security but they involve scalability problem, high transaction fees, a significant delay, and computational overhead that is not acceptable for resource-constrained IoT devices. Moreover, data published on the blockchain are public which is not ideal for many scenarios. In this paper, we proposed a new decentralized access control system based on the Tangle which empowers the users to dictate the access to their resource. In our proposed decentralized access control model the policies and access rights are published on the Tangle which guarantees distributed auditability and prevents the user from fraudulently denying the granted access rights. The main contribution of the paper is to provide privacy of the policy by leveraging Masked Authenticated Messaging (MAM) data communication protocol. The proposed work is validated by implementation and is tested with AVISPA tool which confirms security in the presence of the intruder.

Blockchain-Based Access Control Model to Preserve Privacy for Personal Health Record Systems

Personal health record system (PHR system) stores health-related information of an individual. PHR system allows the data owner to manage and share his/her data with selected individuals. The originality or tamper resistance feature is crucial for PHR system because of the irreversible consequence of incorrect information. Blockchain technology becomes a potential solution due to its immutability and irreversibility properties. Unfortunately, some technical impediments such as limited storage, privacy concern, consent irrevocability, inefficient performance, and energy consumption exist. This work aims to handle these blockchain drawbacks and propose a blockchain-based PHR model. The proposed model is built using the blockchain technology to support a tamper resistance feature. Proxy reencryption and other cryptographic techniques are employed to preserve privacy. Features of the proposed model include fine-grained and flexible access control, revocability of consent, auditability, and tamper resistance. A detailed security analysis shows that the proposed model is provably secure for privacy and tamper resistance. The performance analysis shows that the proposed model achieves a better overall performance compared with the existing approach in the literature. Thus the proposed model is more suitable for the PHR system usage.

A Survey on Blockchain Based Access Control for IoT

IoT and Iot data is exponentially increasing with respect to time. Security and maintenance are the most required features while handling this. Because of the jumbled decentralization and heterogeneous condition present in IoT, the security and assurance of the data becomes a troublesome action for the planners. To regulate access to essential resources access control structures are used. Block chain has proved to be, audit-able enlisting is possible using a decentralized arrangement of many blocks joined by an open Record. Here we are trying to explore the possibility of collaborating block chain into the access control issues in IoT to enhance security.

Control Channel Networks: A Fast Blockchain-Based Access Control in Peer-to-Peer Networks

In the past, most medical data were created and managed by hospitals. These days, however, patientscan generate these data by themselves without visiting hospitals. Unlike previous data, the latter isgenerated by patients themselves. To efficiently manage these data without need of the third party,a blockchain-based access control was proposed. If the patient wants to delegate the right of theaccess to his data, he creates a token for the requester and stores it on the blockchain as a form of thetransaction. Moreover, patients can make it invalid and impossible to re-use at any time. However,if the number of the transactions in the blockchain network is exceeded the maximum throughput ofthe system, the system cannot provide a reliable service. Moreover, due to the feature of the publicblockchain, anyone can see the history of the specific data by tracing the transaction stored on theblockchain. In this paper, to solve the scalability problem on the public blockchain based accesscontrol system and its invasion of privacy, we propose a token based personal data management systembased on . When the requester sending a request message, the resource owner creates a tokentransaction for the intermediary’s address and then asks the delivery of the transaction between hisprimary chain and the requester’s sub chain via multiple sub chain. Finally, the relayed transactionfor the access control is stored on the requester’s blockchain. The linkability of transactions on thedifferent blockchain is hidden from the third party user and our system is able to process it veryquickly regardless of the blockchain’s throughput.