PrivySharing: A blockchain-based framework for privacy-preserving and secure data sharing in smart cities. Issue 88 (January 2020)

• Record Type: Journal Article
• Authors: Makhdoom, Imran; Zhou, Ian; Abolhasan, Mehran; Lipman, Justin; Ni, Wei
• Is Part Of: Computers & security. Issue 88(2020)
• Publication Date: 2020-01
• Subjects: Internet of Things -- Smart city -- Security and privacy -- Blockchain -- EU GDPR Compliance; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.101653
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: The ubiquitous use of Internet of Things (IoT) ranges from industrial control systems to e-Health, e-commerce, smart cities, agriculture, supply chain management, smart cars, cyber-physical systems and a lot more. However, the data collected and processed by IoT systems especially the ones with centralized control are vulnerable to availability, integrity, and privacy threats. Hence, we present "PrivySharing, " a blockchain-based innovative framework for privacy-preserving and secure IoT data sharing in a smart city environment. The proposed scheme is distinct from existing strategies on many aspects. The data privacy is preserved by dividing the blockchain network into various channels, where every channel comprises a finite number of authorized organizations and processes a specific type of data such as health, smart car, smart energy or financial details. Moreover, access to users' data within a channel is controlled by embedding access control rules in the smart contracts. In addition, data within a channel is further isolated and secured by using private data collection and encryption respectively. Likewise, the REST API that enables clients to interact with the blockchain network has dual security in the form of an API Key and OAuth 2.0. The proposed solution conforms to some of the significant requirements outlined in the European Union General Data Protection Regulation. We also present a system of reward in the form of a digital token named "PrivyCoin" for users sharing their data with stakeholders/third parties. Lastly, the experimental outcomes advocate that a multi-channel blockchain scales well as compared to a single-channel blockchain system.