Blockchain based Access Control for Personal Data Sharing on Embedded Devices

Abstract

Access control in large systems poses challenges in ensuring secure and flexible management of user privileges. Current approaches often rely on centralized servers, leading to concerns about data privacy and reliability. This study we study the benefits and overheads of integrating Blockchain technology and embedded devices for access control in large systems. We propose a Blockchain-based Non-Fungible Token (NFT) mechanism for access control of private data, leveraging the distributed and immutable nature of Blockchain to enhance security and scalability. This approach is versatile, applying to various access control scenarios. For instance, in Person-Device, where individuals are granted access to specific devices; Person-Data-Device, where individuals are given access to specific data on specific devices; and Person-Time-Device, where access is granted to individuals for specific periods to specific devices.In our study, we evaluated this approach using embedded devices such as ESP32 microcontrollers, Beaglebone Black boards, and Raspberry Pi. Our results show that a blockchain-based approach is suitable for resource-constrained devices, requiring minimal computational resources and introducing negligible delays. We find that our approach can be used to facilitate secure access to private data, ensuring confidentiality and integrity in a distributed setup without requiring any centralized control.