Smart Contract-based Decentralized Privacy System for Securing Data Ownership Management

Yunmin He ； Yu-Chi Chen ； Zhong-Yi Guo ； Raylin Tso ； Shaozhen Ye

《資訊安全通訊》 25卷3期 (2019/08) Pp. 1-21

摘要

Recently, Zyskind et al. proposed a decentralized personal data management system which keeps privacy through blockchain and off-blockchain storage, so-called the decentralized privacy (DP) system. This system helps users ensure data ownership and fine-grained access control for third-party service providers. However, in this DP system, the permission power is delegated to blockchain and the users' data are stored in the off-blockchain distributed hashtable. Therefore, this induces extra communication overhead to connect these two distinct functionalities. In this paper, we present a conceptually simple solution directly from smart contracts with cryptographic primitives. This system is called the smart contract-based decentralized privacy (SCDP) system to overcome the above-mentioned efficiency issues. We propose the basic SCDP system as a warm-up to introduce the design principle based on symmetric encryption. Moreover, the strong SCDP system is provided by using ciphertext-policy attribute-based encryption to support more flexible scenarios of access control and also eliminate some limitations of the basic system. Finally, we discuss some analyses in the aspects of security, access control, and data segmentation.

關鍵字

Decentralized privacy ； Smart contracts ； Encryption ； Ownership ； Access control

參考文獻

A. Sahai and B. Waters, “Fuzzy identity-based encryption,” in Annual International Conference on the Theory and Applications of Cryptographic Technique. Springer, 2005, pp. 457–473.

G. Wood, “Ethereum: A secure decentralised generalised transaction ledger,” Ethereum project yellow paper, vol. 151, pp. 1–32, 2014.

G. Zyskind and O. Nathan, “Decentralizing privacy: Using blockchain to pro- tect personal data,” inSecurity and Privacy Workshops (SPW), 2015 IEEE. IEEE, 2015, pp. 180–184.

J. Bethencourt, A. Sahai, and B. Waters, “Ciphertext-policy attribute-based encryption,” in Security and Privacy, 2007. SP’07. IEEE Symposium on. IEEE, 2007, pp. 321–334.

J. Kehrli, “Blockchain 2.0-from bitcoin transactions to smart contract applications,” Niceideas, November. Available at: https://www. niceideas. ch/roller2/badtrash/entry/blockchain-2-0-frombitcoin (Accessed:5 January 2018), 2016.