Journal
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS
Volume 147, Issue -, Pages -Publisher
ACADEMIC PRESS LTD- ELSEVIER SCIENCE LTD
DOI: 10.1016/j.jnca.2019.102440
Keywords
Access control; Formal verification; Blockchain; Resource management and allocation; Model checking
Categories
Funding
- Higher Education Commission (HEC) Pakistan under National Center for Cyber Security initiative
Ask authors/readers for more resources
In today's on-demand computing and virtual coalition environment, cross-domain services are acquired and provided. These business domains may belong to either the same or different conflict of interest system. Transitive access can cause leakage of information between competitors through some other conflict of interest system's member. Therefore, a secure access control mechanism is required to detect and deny transitive access efficiently with minimal trust in externalist. Existing access control mechanisms focused on either single or multiple conflict of interest domains but with no transitive access. In addition, these existing mechanisms are centralized with inherited unfair access control and are a single point of failure. Blockchain (BC) is a shared digital ledger encompassing a list of connected blocks stored on a decentralized distributed network that is secured through cryptography. We propose a BC based access control for conflict of interest domains. We have integrated a BC in our architecture to make access control fair, verifiable and decentralized. Users access histories and transitive accesses are stored on BC ledger. We propose a novel mechanism called Transitive Access Checking and Enforcement (TACE) i.e., Algorithm.1. It makes an authorization decision based on BC endorsement that transitive access will not occur. Algorithm.2 verifies and updates users access histories stored at BC before each request approval. Similarly, Algorithm.3 detects possible future transitive accesses and updates Transitive Access Set (TAS) stored at BC after each request approval. The Simple Promela Interpreter (SPIN) model checker is used to verify the proposed mechanisms for transitive access detection and prevention. We have identified four conflicting sequences of execution that can cause transitive access. Results show that the proposed mechanism is safe against transitive access by checking all the four possible conflicting sequences of execution.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available