Verifiable Decentralized Access Control for Distributed Databases

摘要

Ahstract- The traditional centralized database management mode brings security and privacy issues to user data. In this paper, we propose a verifiable distributed database access control (VDAC) scheme based on the ciphertext policy attribute-based encryption (CP-ABE) and decentralized ledger technology (DLT). In the VDAC scheme, CP-ABE is used to achieve fine-grained access authorization control on user data, and DLT is employed to publish authorization parameters and guarantee their immutability. Particularly, the decentralized authorization mechanism for distributed database is realized by using Hyperledger fabric platform. Comparison analysis shows that the VDAC scheme not only provides verifiable database access control, but also protects user privacy and system security. Experimental results demonstrate the efficiency and practicality of the VDAC scheme.