Design and Optimization of Smart Contracts for Cross-Domain Sharing of Sensitive Data

Abstract

While studying the scenarios of sensitive data cross-domain sharing, we found there was no security assessment of smart contracts within existing data sharing schemes, which might lead to data leakage or unauthorized data access. To address this issue, we proposed a comprehensive security assessment of the smart contracts involved in existing data sharing solutions. In which, we extended the current smart contract tools to include detection capabilities for 7 additional types of vulnerabilities and implemented automatic repair functions for smart contracts. We also designed 3 types of smart contracts for the Hyperledger Fabric platform to facilitate sensitive data cross-domain sharing, specifically for data upload, data access, and data management functions to make sure that complex vulnerabilities could be automatically repaired. In our designation, the smart contracts for data upload and data access utilize the CP-ABE method and the data management smart contract includes various functions for secure management and tracing of data on the blockchain, which collectively ensure the security and comprehensive functionality of sensitive data cross-domain sharing scheme.