Authors:
Maryline Laurent
;
Nesrine Kaaniche
;
Christian Le
and
Mathieu Vander Plaetse
Affiliation:
SAMOVAR, CNRS, Telecom SudParis, University Paris-Saclay, Paris and France
Keyword(s):
Access Control, Data Secrecy, Blockchain, Smart Contract, Ethereum.
Related
Ontology
Subjects/Areas/Topics:
Access Control
;
Data and Application Security and Privacy
;
Data Engineering
;
Data Integrity
;
Data Protection
;
Databases and Data Security
;
Information and Systems Security
;
Internet Technology
;
Security and Privacy Policies
;
Security Protocols
;
Web Information Systems and Technologies
Abstract:
Recent years have witnessed the trend of increasingly relying on remote and distributed infrastructures. This increased the number of reported incidents of security and privacy breaches, mainly due to the loss of data control. Towards these challenges, we propose a new access control scheme based on emerging blockchain infrastructures. Our approach relies on the use of smart auditable contracts deployed in blockchain infrastructures. Thus, it offers transparent and controlled access to outsourced data, such that malicious entities cannot process data without data owners’ authorization. In fact, the effectiveness of the authentication relies on the blockchain intrinsic properties. Moreover, an implementation of the proposed solution based on Ethereum Blockchain is presented to show the applicability of our scheme in real-world scenarios.