• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE International Conference on Distributed Computing Systems >Blockchain Based Auditable Access Control for Distributed Business Processes
【24h】

Blockchain Based Auditable Access Control for Distributed Business Processes

机译：基于区块链接的商业流程的可审计访问控制

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The use of blockchain technology has been proposed to provide auditable access control for individual resources. However, when all resources are owned by a single organization, such expensive solutions may not be needed. In this work we focus on distributed applications such as business processes and distributed workflows. These applications are often composed of multiple resources/services that are subject to the security and access control policies of different organizational domains. Here, blockchains can provide an attractive decentralized solution to provide auditability. However, the underlying access control policies may be overlapping in terms of the component conditions/rules, and simply using existing solutions would result in repeated evaluation of user’s authorization separately for each resource, leading to significant overhead in terms of cost and computation time over the blockchain. To address this challenge, we propose an approach that formulates a constraint optimization problem to generate an optimal composite access control policy. This policy is in compliance with all the local access control policies and minimizes the policy evaluation cost over the blockchain. The developed smart contract(s) can then be deployed to the blockchain, and used for access control enforcement. We also discuss how the access control enforcement can be audited using a game-theoretic approach to minimize cost. We have implemented the initial prototype of our approach using Ethereum as the underlying blockchain and experimentally validated the effectiveness and efficiency of our approach.
机译：已经提出了使用区块链技术为个别资源提供可审计访问控制。但是，当所有资源都由单个组织拥有时，可能不需要这种昂贵的解决方案。在这项工作中，我们专注于分布式应用程序，如业务流程和分布式工作流程。这些应用程序通常由多个资源/服务组成，这些资源/服务受到不同组织域的安全性和访问控制策略。在这里，Blockchains可以提供有吸引力的分散解决方案来提供令人互动性。然而，基础访问控制策略可能在组件条件/规则方面重叠，并且简单地使用现有解决方案将导致对每个资源分别对用户授权进行重复评估，从而在成本和计算时间方面具有重要的开销区块形。为了解决这一挑战，我们提出了一种方法，其制定了一个约束优化问题，以产生最佳的复合访问控制策略。此策略符合所有本地访问控制策略，并最大限度地减少区块链中的策略评估成本。然后可以将开发的智能合同部署到区块链，并用于访问控制执行。我们还讨论如何使用游戏理论方法进行审核，以最小化成本。我们已经实施了我们的方法的初始原型，以外地为潜在的区块链，通过实验验证了我们方法的效力和效率。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号