Blockchain-based cross-domain authorization system for user-centric resource sharing
Blockchain-based cross-domain authorization system for user-centric resource sharing
复制标题
DOI：
10.1016/j.bcra.2023.100126
复制
发表时间：
2023-01
期刊：
影响因子：
--
通讯作者：
Yuki Ezawa;S. Kakei;Yoshiaki Shiraishi;M. Mohri;M. Morii
中科院分区：
文献类型：
--
作者：
Yuki Ezawa;S. Kakei;Yoshiaki Shiraishi;M. Mohri;M. Morii
以用户为中心的数据共享对于鼓励公民积极参与数字经济至关重要。智慧城市是数字经济的一种形式，其关键之一是促进公民数据的公共使用。然而，在未经公民同意的情况下使用数据并不容易。在这项研究中，我们对这些问题采取了技术方法。用户管理访问（UMA）是一个众所周知的框架，用于将资源访问权限委托给Internet上的其他人。在UMA中，授权机制被设计为集中式的，以便资源所有者可以集中管理存储在不同域中的各种资源的访问权限。然而，授权机制缺乏透明度是其在智慧城市等大型系统中实施的障碍。在这项研究中，我们开发了一个基于区块链的跨域授权架构，该架构可以实现资源共享生态系统，希望利用数据的组织可以自由地相互交易。该架构通过在区块链技术上设计授权机制，解决了传统授权系统存在的透明性问题。我们将所提出的架构实现为智能合约，并评估了其处理性能。因此，委派访问权限和访问资源所需的时间不到500毫秒。此外，我们发现处理时间开销的波动很小。基于这些结果，我们得出结论，所提出的架构的性能下降是轻微的。
User-centric data sharing is essential to encourage citizens' active participation in the digital economy. One key to smart cities, a form of the digital economy, is the promotion of public use of citizen data. Nevertheless, it is not easy to utilize data without citizens’ consent. In this study, we took a technological approach to these issues. User-managed access (UMA) is a well-known framework for delegating resource access rights to others on the Internet. In UMA, authorization mechanisms are designed to be centralized so that resource owners can centrally manage access rights for various resources stored in different domains. However, the lack of transparency in the authorization mechanism is a barrier to its implementation in large-scale systems such as smart cities. In this study, we developed a blockchain-based cross-domain authorization architecture that enables a resource-sharing ecosystem in which organizations that wish to utilize data can freely trade with each other. The proposed architecture solves the transparency problem that conventional authorization systems have had by designing the authorization mechanism on blockchain technology. We implemented the proposed architecture as smart contracts and evaluated its processing performance. The resultant time required for delegating access rights and accessing resources was less than 500 ms. Furthermore, we found that the fluctuation in the processing time overhead was small. Based on these results, we concluded that performance degradation with the proposed architecture is minor.