Blockchain-based Access Control Mechanism of Federated Data Sharing System

Abstract

Sharing data assets has emerged among organizations with variable interest, especially in the manner of federation. Blockchain has been used in data sharing systems to provide the audit and access control on data because of its tamper-proof characteristics. However, the user's authority is difficult to accurately describe because of the complexity of users' multidimensional roles in the federation. And when developing the decentralized access control mechanism with the support of blockchain techniques, how to improve the efficiency of the decision for access control is the problem that is necessary to be solved. In this paper, we propose a blockchain-based multidimensional user authorization and role-based access control mechanism in the federated data sharing system. The colored coin is defined to identify the user's authority in multidimension, and decentralized access control decision is achieved through the automatic execution of smart contracts, thereby effectively enhancing the mechanism robustness and improving the security decision performance. The system is implemented on the basis of HyperLedger Fabric. Experimental results show that the proposed scheme is feasible and efficient. The decision efficiency is remained stable with the increasing of policy rules.