Collaborative Research: OAC Core: Zero-trust and Traceable Data Infrastructure for Health IoT Data Storage and Sharing

如今，个人数据（如健康物联网（IoT）数据）由服务提供商的中央数据中心拥有，个人对他们产生的数据没有最终控制权。由于这种用户生成的数据的敏感性，这是一个日益严重的问题。拟议的基于Web 3.0的数据基础设施是当前集中式数据生态系统的发展，旨在解决其一些局限性和挑战。该项目旨在构建一个零信任和可追溯的数据共享生态系统Web 3DB，其中数据所有权和控制权返回给生成数据的个人。在Web 3DB中，数据所有者将能够定义将以零信任方式实施的数据访问和共享策略，即，而不依赖于中央协调器或基础设施。在这种访问控制期间，用户的身份和凭证将始终保持加密以保护其隐私。个人资料的存取及使用将被安全地记录，只有资料拥有人可监察其资料的存取及使用。此外，这项研究将支持发展一个多样化的博士队列，大学生和高中生。所提出的工作的基础是一种新颖的零信任基础设施，用于可追踪的数据共享。该项目将需要开展研究活动，以实现（1）新型分散/自我主权身份管理和零信任方式的分散身份访问控制，（2）在负责任的数据共享以及安全和隐私保护数据审计领域的新理论和能力，（3）优化分布式存储网络的新理论和对非加密货币区块链中二层区块链扩展容量的新认识。研究成果将被实施并集成到该团队正在构建的Web 3.0数据库的原型系统中。将进行现实模拟和真实世界的仿真。项目成果包括：（1）Web 3DB开源项目，一个零信任可追溯的数据共享基础设施，（2）一个积极维护和不断增长的基于Web 3.0的多机构零信任数据共享生态系统，以及（3）教育材料的教学和学习研究组成部分的Web 3DB在本科生和高中生。这个奖项反映了NSF的法定使命，并已被认为是值得的通过使用基金会的知识价值和更广泛的影响审查标准进行评估，

Personal data, such as health Internet of Things (IoT) data, nowadays is possessed by service providers’ central data centers, and individuals do not have ultimate control over the data they produce. This is a growing concern due to the sensitive nature of such user-generated data. The proposed Web 3.0-based data infrastructure is an evolution of the current centralized data ecosystem, aiming to address some of its limitations and challenges. This project aims to build a zero-trust and traceable data-sharing ecosystem Web3DB, where data ownership and control are returned to the individuals who generate the data. In Web3DB, the data owners will be able to define the data access and sharing policy that will be enforced in a zero-trust manner, i.e., without relying on central coordinators or infrastructure. During such access control, users’ identities and credentials will always remain encrypted for their privacy. Access and usage of individuals’ data will be logged securely such that only the data owners can monitor the access and usage of their data. Furthermore, this research will support the development of a diverse cohort of Ph.D., undergraduate, and high school students.Underlying the proposed work is a novel zero-trust infrastructure for traceable data sharing. The project will entail research activities that result in (1) novel decentralized/self-sovereign identity management and access control with such decentralized identities in a zero-trust manner, (2) new theories and capabilities in the field of accountable data sharing as well as secure and privacy-preserving data auditing, and (3) new theories for optimizing distributed storage network and new understandings of the capacity of layer 2 blockchain extensions in the non-cryptocurrency blockchain. The research outcomes will be implemented and integrated into the prototype system of the Web 3.0 database the team has been building. Realistic simulations and real-world emulations will be conducted. The project outcomes include (1) open-source projects of Web3DB, a zero-trust traceable data sharing infrastructure, (2) an actively maintained and growing Web 3.0-based zero-trust data sharing ecosystem with multiple institutions, and (3) education materials for teaching and learning research components of Web3DB among undergraduate and high school students.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.