No abstract

Background: Recent advances in the design of blockchain-based personal data sharing platforms bring the benefit of empowering users with more control and privacy-preserving measures in sharing data products. However, so far very little is known about users’ intentions to adopt such platforms for providing or consuming data products. Objective: This study aims to investigate users’ main expectations, preferences, and concerns regarding the adoption of blockchain-based personal data sharing platforms in the health and education domains. Methods: Fifteen participants were involved in a multidimensional evaluation of a prototyped release of the KRAKEN blockchain-based data sharing platform and asked to assess it in the health or education pilot domains. Data collected during online group interviews with participants were analyzed by applying the micro interlocutor technique to provide a descriptive overview of participant responses. Results: Participants showed a marginal acceptance of the prototype usability, asking for some improvements of the user experience and for a more transparent presentation of the platform security and privacy preserving capabilities. Participants expressed interest in using the platform as data providers and consumers as well as setting privacy policies for sharing data products with third parties, including the possibility of revoking access to data. Conclusions: Blockchain-based data sharing platforms are more likely to engage target users when technical design is informed by a deeper knowledge of their needs, expectations, and relevant concerns.

No abstract

We present TPL, a Trust Policy Language and Trust Management System. It is built around the qualities of modularity, declarativity, expressive power, formal precision, and accountability. The modularity means that TPL is built in a way that makes it easily adaptable to different types of transactions and signatures. From the aspect of declarativity and expressive power, the language is built such that policies are always formulated in a positive form and the language is Turing complete. The formal precision and accountability of the language eliminates ambiguity and allows us to achieve verified evaluations. The idea is that for any decision, the system can generate a proof that can then be checked by a prover that is formally verified, in Isabelle/HOL, to be sound with respect to a first-order logic semantics.

On today's Internet, combining the end-to-end security of TLS with Content Delivery Networks (CDNs) while ensuring the authenticity of connections results in a challenging delegation problem. When CDN servers provide content, they have to authenticate themselves as the origin server to establish a valid end-to-end TLS connection with the client. In standard TLS, the latter requires access to the secret key of the server. To curb this problem, multiple workarounds exist to realize a delegation of the authentication. In this paper, we present a solution that renders key sharing unnecessary and reduces the need for workarounds. By adapting identity-based signatures to this setting, our solution offers short-lived delegations. Additionally, by enabling forward-security, existing delegations remain valid even if the server's secret key leaks. We provide an implementation of the scheme and discuss integration into a TLS stack. In our evaluation, we show that an efficient implementation incurs less overhead than a typical network round trip. Thereby, we propose an alternative approach to current delegation practices on the web. CCS CONCEPTS • Security and privacy → Web protocol security; Key management.