Bloccess: Towards Fine-Grained Access Control Using Blockchain in a Distributed Untrustworthy Environment

Ding, Yepeng; Satō, Hiroyuki

doi:10.1109/mobilecloud48802.2020.00011

Cited by 20 publications

(9 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the context of the Internet of Things, an identity authentication scheme [6] is proposed for multi-WSN based on a hybrid blockchain model consisting of a private blockchain and a public blockchain. Bloccess [7] is proposed as an authorization framework based on a consortium blockchain to provide strong access control for distributed systems.…”

Section: Related Workmentioning

confidence: 99%

Self-Sovereign Identity as a Service: Architecture in Practice

Ding¹,

Satō²

2022

Preprint

Self Cite

View full text Add to dashboard Cite

Self-sovereign identity (SSI) has gained a large amount of interest. It enables physical entities to retain ownership and control of their digital identities, which naturally forms a conceptual decentralized architecture. With the support of the distributed ledger technology (DLT), it is possible to implement this conceptual decentralized architecture in practice and further bring technical advantages such as privacy protection, security enhancement, high availability. However, developing such a relatively new identity model has high costs and risks with uncertainty. To facilitate the use of the DLTbased SSI in practice, we formulate Self-Sovereign Identity as a Service (SSIaaS), a concept that enables a system, especially a system cluster, to readily adopt SSI as its identity model for identification, authentication, and authorization. We propose a practical architecture by elaborating the service concept, SSI, and DLT to implement SSIaaS platforms and SSI services. Besides, we present an architecture for constructing and customizing SSI services with a set of architectural patterns and provide corresponding evaluations. Furthermore, we demonstrate the feasibility of our proposed architecture in practice with Selfid, an SSIaaS platform based on our proposed architecture.

show abstract

Section: Related Workmentioning

confidence: 99%

Self-Sovereign Identity as a Service: Architecture in Practice

Ding¹,

Satō²

2022

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…Nowadays, AC models are created in areas, such as blockchain [12,14,15,17,20], Internet of things [14], cloud computing [16,22,23] and distributed systems [11]. Fine-grained AC models [13,19] are introduced.…”

Section: Introductionmentioning

confidence: 99%

Hybrid Role and Attribute Based Access Control Applied in Information Systems

Penelova

2021

Cybernetics and Information Technologies

View full text Add to dashboard Cite

It this paper it is proposed a new access control model – Hybrid Role and Attribute Based Access Control (HRABAC). It is an extension of Role-Based Access Control (RBAC). HRABAC is designed for information systems and enterprise software and combines the advantages of RBAC and Attribute-Based Access Control (ABAC). HRABAC is easy configurable, fine-grained and supports role hierarchies. The proposed model HRABAC describes the access control scheme in Laravel package laravelroles/rolespermissions, which is developed by the author of the paper, as an answer to the requirements of practice of fine-grained and easy configurable access control solution. Laravel is chosen, because it is the most popular and the most widely used PHP framework. The package laravelroles/rolespermissions is developed on Laravel so that maximum number of programmers could use it. This package contains working and tested functionalities for managing users, roles and permissions, and it is applied in accounting information system.

show abstract

“…Particularly, with the advancement of the distributed ledger technology, the nested architectures become ubiquitous in decentralized systems [1] [7]. Besides, these systems collaborate with each other by complex protocols [8] [6] based on peer communications and cross-layer communications to satisfy the requirements. However, for such a complex distributed system, it is a challenge to ensure correctness and system properties.…”

Section: Introductionmentioning

confidence: 99%

Extending Concurrent Separation Logic to Enhance Modular Formalization

Ding,

Sato

2020

Preprint

Self Cite

View full text Add to dashboard Cite

Nowadays, numerous services based on large-scale distributed systems have been developed to boost the convenience of human life. On the other side, it becomes a significant challenge to ensure the correctness and properties of these systems due to the complex and nested architecture. Although concurrent separation logic (CSL) has partially tackled the problem by specifying systems and verifying the correctness of them, it faces modularity issues. In this paper, we propose an extended concurrent separation logic (ECSL) to address the modularity issues of CSL with the support of the temporal extension, communication extension, environment extension, and nest extension. ECSL is capable of formalizing systems at different abstraction levels from memory management to architecture and protocol design with great modularity. Furthermore, we stick to unitarity and compatibility principles while developing ECSL.

show abstract

Bloccess: Towards Fine-Grained Access Control Using Blockchain in a Distributed Untrustworthy Environment

Cited by 20 publications

References 15 publications

Self-Sovereign Identity as a Service: Architecture in Practice

Self-Sovereign Identity as a Service: Architecture in Practice

Hybrid Role and Attribute Based Access Control Applied in Information Systems

Extending Concurrent Separation Logic to Enhance Modular Formalization

Contact Info

Product

Resources

About