Collaborative Research: OAC Core: Zero-trust and Traceable Data Infrastructure for Health IoT Data Storage and Sharing

个人数据，如健康物联网数据，如今由服务提供商的中央数据中心拥有，个人对他们产生的数据没有最终控制权。由于这种用户生成数据的敏感性，这是一个日益令人担忧的问题。提出的基于Web 3.0的数据基础设施是当前集中式数据生态系统的演进，旨在解决其一些限制和挑战。该项目旨在建立一个零信任和可追溯的数据共享生态系统Web3DB，将数据的所有权和控制权交还给生成数据的个人。在Web3DB中，数据所有者将能够定义数据访问和共享策略，这些策略将以零信任的方式执行，即不依赖于中央协调器或基础设施。在这种访问控制期间，用户的身份和凭证将始终保持加密，以保护其隐私。查阅及使用个人资料将会被安全记录，以便只有资料拥有人可以监察查阅及使用个人资料。此外，这项研究将支持博士、本科生和高中生的多元化发展。所提出的工作的基础是用于可跟踪数据共享的新型零信任基础设施。该项目将需要开展研究活动，以：(1)以零信任的方式使用这种去中心化身份进行新颖的去中心化/自我主权身份管理和访问控制，(2)负责任数据共享领域的新理论和新能力，以及安全和保护隐私的数据审计。(3)优化分布式存储网络的新理论和对非加密货币区块链中第2层区块链扩展容量的新理解。研究成果将被实现并集成到该团队正在构建的Web 3.0数据库的原型系统中。将进行逼真的模拟和真实世界的模拟。项目成果包括(1)Web3DB的开源项目，一个零信任可追溯的数据共享基础设施；(2)一个与多个机构积极维护和发展的基于Web 3.0的零信任数据共享生态系统；(3)面向本科生和高中生的Web3DB教与学研究组件的教育材料。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Personal data, such as health IoT data, nowadays is possessed by service providers’ central data centers, and individuals do not have ultimate control over the data they produce. This is a growing concern due to the sensitive nature of such user-generated data. The proposed Web 3.0-based data infrastructure is an evolution of the current centralized data ecosystem, aiming to address some of its limitations and challenges. This project aims to build a zero-trust and traceable data-sharing ecosystem Web3DB, where data ownership and control are returned to the individuals who generate the data. In Web3DB, the data owners will be able to define the data access and sharing policy that will be enforced in a zero-trust manner, i.e., without relying on central coordinators or infrastructure. During such access control, users’ identities and credentials will always remain encrypted for their privacy. Access and usage of individuals’ data will be logged securely such that only the data owners can monitor the access and usage of their data. Furthermore, this research will support the development of a diverse cohort of Ph.D., undergraduate, and high school students.Underlying the proposed work is a novel zero-trust infrastructure for traceable data sharing. The project will entail research activities that result in (1) novel decentralized/self-sovereign identity management and access control with such decentralized identities in a zero-trust manner, (2) new theories and capabilities in the field of accountable data sharing as well as secure and privacy-preserving data auditing, and (3) new theories for optimizing distributed storage network and new understandings of the capacity of layer 2 blockchain extensions in the non-cryptocurrency blockchain. The research outcomes will be implemented and integrated into the prototype system of the Web 3.0 database the team has been building. Realistic simulations and real-world emulations will be conducted. The project outcomes include (1) open-source projects of Web3DB, a zero-trust traceable data sharing infrastructure, (2) an actively maintained and growing Web 3.0-based zero-trust data sharing ecosystem with multiple institutions, and (3) education materials for teaching and learning research components of Web3DB among undergraduate and high school students.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.