IIT Home Page CNR Home Page

Exploiting Blockchain Technology for Attribute Management in Access Control Systems.

Access Control systems are a key resource in computer secu-rity to properly manage the access to digital resources. Blockchain tech-nology, instead, is a novel technology to decentralise the control and man-agement of a shared state, representing anything from a data repositoryto a distributed virtual machine. We propose to integrate traditionalAccess Control systems with blockchain technology to allow the com-bined system to inherit the desirable properties blockchain technologyprovides, mainly transparency and, consequently, auditability. Depend-ing on the application scenario considered, for some systems it may notbe desirable to employ a fully decentralised approach. As such, in thispaper we outline how our proposal can be adapted to allow for the mini-mal possible integration of blockchain technology in a traditional AccessControl system. In particular, we consider the scenario where AttributeManagers only may be managed on chain through smart contracts. Weprovide a proof of concept implementation based on Ethereum, and showits performance through experimental results.

16th International Conference on the Economics of Grids, Clouds, Systems, and Services (GECON2019), Leeds, UK, 2019

Autori esterni: Laura Ricci (Dipartimento di Informatica, Università di Pisa)
Autori IIT:

Alessio Lunardelli

Foto di Alessio Lunardelli

Damiano Di Francesco Maesa

Foto di Damiano Di Francesco Maesa

Tipo: Contributo in atti di convegno
Area di disciplina: Information Technology and Communication Systems

File: FrancescoMaesa2019_Chapter_ExploitingBlockchainTechnology.pdf

Attività: Sicurezza nel Cloud Computing