PDaaS: A Personal Data-as-a-Service Platform using Permissioned Blockchain and IPFS

Abstract

The proliferation of digital technologies has led to an exponential growth in personal data generation, raising significant privacy, security, and ownership control challenges. However, existing centralized identity and data management models present concerns leading to data breaches, unauthorized data sharing, and loss of user ownership control. To address these issues, this article proposes a novel Personal Data-as-a-Service (PDaaS) platform, which leverages the robustness of a permissioned blockchain to ensure data integrity and access control, while using IPFS for decentralized and resilient data storage. It enables a secure and decentralized user-centric framework for managing personal data while preserving user privacy and data sovereignty. Leveraging a suite of advanced technologies including decentralized identifiers, verifiable credentials, enhanced encryption techniques (i.e., quantum-resistant encryption), zero-knowledge proofs, and dynamic consent management, the PDaaS platform enables individuals to retain ownership and control over their data while facilitating secure and privacy-preserving data processing, sharing, exchange, and monetization. This paper presents the design considerations and framework architecture of the proposed platform, which was built using the Hyperledger Besu to assess its feasibility and performance. It also discusses the implications, use cases, and challenges of deploying the PDaaS platform.