A blockchain-based access control scheme

Maryline Laurent (1, 2) , Nesrine Kaaniche (3) , Christian Le (4) , Mathieu Vander Plaetse (4)

1 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité
2 CNRS - Centre National de la Recherche Scientifique
3 TSP - RST - Département Réseaux et Services de Télécommunications
4 TSP - Télécom SudParis

Personal data are often collected and processed in a decentralized fashion, within different contexts. For instance, with the emergence of distributed applications, several providers are used to correlate their records, to provide personalized services to their clients. As such, to protect users' privacy, different pseudonyms are generally used for different contexts. These pseudonyms have to be unlinkable to prevent identifying records to be associated to the same user. Although unlinkable, these pseudonyms have to be processed and exchanged according to their owners' consent and in a privacy-preserving fashion. In this paper, we propose BDUA, a new Blockchain-based Data Usage Auditing system, that ensures a controlled yet privacy preserving exchange of distributed data, such that a set of authorized auditing entities are able to conduct an accurate auditing relying on registered blockchains' transactions

Mots clés: Pseudonymous schemes; Homomorphic encryption; Blockchain; Privacy; Auditing

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Maryline Laurent, Nesrine Kaaniche, Christian Le, Mathieu Vander Plaetse. A blockchain-based access control scheme. SECRYPT 2018: 15th International Conference on Security and Cryptography, Jul 2018, Porto, Portugal. pp.168 - 176, ⟨10.5220/0006855601680176⟩. ⟨hal-01864317⟩