Blockchain‐based access control for enterprise blockchain applications. Issue 5 (23rd December 2019)

• Record Type: Journal Article
• Authors: Xu, Lei; Markus, Isaac; I, Subhod; Nayab, Nikhil
• Other Names: Ju Hongtaek guestEditor.; Boutaba Raouf guestEditor.; Kim Myungsup guestEditor.; Stiller Burkhard guestEditor.
• Is Part Of: International journal of network management. Volume 30:Issue 5(2020)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2019-12-23
• Subjects: Computer networks -- Management -- Periodicals; 004.6
• DOI: 10.1002/nem.2089
• Languages: English
• ISSNs: 1055-7148

Abstract

Summary: Access control is one of the fundamental security mechanisms of IT systems. Most existing access control schemes rely on a centralized party to manage and enforce access control policies. As blockchain technologies, especially permissioned networks, find more applicability beyond cryptocurrencies in enterprise solutions, it is expected that the security requirements will increase. Therefore, it is necessary to develop an access control system that works in a decentralized environment without compromising the unique features of a blockchain. A straightforward method to support access control is to deploy a firewall in front of the enterprise blockchain application. However, this approach does not take advantage of the desirable features of blockchain. In order to address these concerns, we propose a novel blockchain‐based access control scheme, which keeps the decentralization feature for access control–related operations. The newly proposed system also provides the capability to protect user's privacy by leveraging ring signature. We implement a prototype of the scheme using Hyperledger Fabric and assess its performance to show that it is practical for real‐world applications. Abstract : We propose a novel blockchain‐based access control scheme, which keeps the decentralization feature for access control–related operations. The newly proposed system also provides the capability to protect user's privacy by leveraging ring signature.