BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme
Access control is a widely used technology for securing sensitive resources of information systems, ranging from personal data managed by cloud-based data stores to sensitive data stream collected by smart devices. Existing access control systems mainly adopt centralized architecture and static acce...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2023-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10353924/ |
| _version_ | 1827387007589941248 |
|---|---|
| author | Lianshan Sun Danni Zhou Diandong Liu Jingyan Tang Yang Li |
| author_facet | Lianshan Sun Danni Zhou Diandong Liu Jingyan Tang Yang Li |
| author_sort | Lianshan Sun |
| collection | DOAJ |
| description | Access control is a widely used technology for securing sensitive resources of information systems, ranging from personal data managed by cloud-based data stores to sensitive data stream collected by smart devices. Existing access control systems mainly adopt centralized architecture and static access control models, including Access Control List, Role-based Access Control and Attribute-based Access Control. However, these systems fail to meet the increasing requirements of behavior based dynamic access control or requirements of owner initiated autonomous access control without relying on trustworthy third parties and suffer inherent drawbacks of a single point of failure or dishonesty. To this end, a novel blockchain-based and provenance enabled dynamic access control scheme called BPDAC is proposed. Specifically, it collects and stores data provenance on blockchain to enable behavior-based dynamic access control; in particular, the quick lookup table (QLT) structure is designed to speed up access control evaluation based on provenance with increasing complexity. It also provides specifications for formulating access control policy based on provenance. It utilizes a set of smart contracts on blockchain to enable decentralized and reliable autonomous access control. A prototype system is implemented on the Hyperledger Fabric and experiments are conducted to show that the proposed scheme is practically feasible and scalable in terms of the performance metrics of throughput and latency. |
| first_indexed | 2024-03-08T15:54:44Z |
| format | Article |
| id | doaj.art-78d10b6f8fab4bf3a17993b145e0a14d |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-03-08T15:54:44Z |
| publishDate | 2023-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-78d10b6f8fab4bf3a17993b145e0a14d2024-01-09T00:04:23ZengIEEEIEEE Access2169-35362023-01-011114255214256810.1109/ACCESS.2023.334088710353924BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control SchemeLianshan Sun0https://orcid.org/0000-0002-5738-7862Danni Zhou1https://orcid.org/0009-0006-9484-0263Diandong Liu2Jingyan Tang3Yang Li4https://orcid.org/0000-0002-0702-8909College of Electronic Information and Artificial Intelligence, Shaanxi University of Science and Technology, Xi’an, ChinaCollege of Electronic Information and Artificial Intelligence, Shaanxi University of Science and Technology, Xi’an, ChinaCollege of Electronic Information and Artificial Intelligence, Shaanxi University of Science and Technology, Xi’an, ChinaCollege of Electronic Information and Artificial Intelligence, Shaanxi University of Science and Technology, Xi’an, ChinaCollege of Electronic Information and Artificial Intelligence, Shaanxi University of Science and Technology, Xi’an, ChinaAccess control is a widely used technology for securing sensitive resources of information systems, ranging from personal data managed by cloud-based data stores to sensitive data stream collected by smart devices. Existing access control systems mainly adopt centralized architecture and static access control models, including Access Control List, Role-based Access Control and Attribute-based Access Control. However, these systems fail to meet the increasing requirements of behavior based dynamic access control or requirements of owner initiated autonomous access control without relying on trustworthy third parties and suffer inherent drawbacks of a single point of failure or dishonesty. To this end, a novel blockchain-based and provenance enabled dynamic access control scheme called BPDAC is proposed. Specifically, it collects and stores data provenance on blockchain to enable behavior-based dynamic access control; in particular, the quick lookup table (QLT) structure is designed to speed up access control evaluation based on provenance with increasing complexity. It also provides specifications for formulating access control policy based on provenance. It utilizes a set of smart contracts on blockchain to enable decentralized and reliable autonomous access control. A prototype system is implemented on the Hyperledger Fabric and experiments are conducted to show that the proposed scheme is practically feasible and scalable in terms of the performance metrics of throughput and latency.https://ieeexplore.ieee.org/document/10353924/Dynamic access controlautonomous access controlprovenanceblockchain |
| spellingShingle | Lianshan Sun Danni Zhou Diandong Liu Jingyan Tang Yang Li BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme IEEE Access Dynamic access control autonomous access control provenance blockchain |
| title | BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme |
| title_full | BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme |
| title_fullStr | BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme |
| title_full_unstemmed | BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme |
| title_short | BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme |
| title_sort | bpdac a blockchain based and provenance enabled dynamic access control scheme |
| topic | Dynamic access control autonomous access control provenance blockchain |
| url | https://ieeexplore.ieee.org/document/10353924/ |
| work_keys_str_mv | AT lianshansun bpdacablockchainbasedandprovenanceenableddynamicaccesscontrolscheme AT dannizhou bpdacablockchainbasedandprovenanceenableddynamicaccesscontrolscheme AT diandongliu bpdacablockchainbasedandprovenanceenableddynamicaccesscontrolscheme AT jingyantang bpdacablockchainbasedandprovenanceenableddynamicaccesscontrolscheme AT yangli bpdacablockchainbasedandprovenanceenableddynamicaccesscontrolscheme |