A Preliminary Approach for Translating ODRL to Smart Policies

Stefano Bistarelli, Chiara Luchini, Francesco Santini

Abstract: Protecting and managing sensitive data is a significant challenge, especially in sectors such as healthcare and industry, which are frequent targets of cyberattacks. In 2023, the healthcare sector saw a substantial increase in ransomware incidents, leading to operational disruptions and the unauthorized exposure of patient data. Similarly, industries such as manufacturing and technology are increasingly facing threats like intellectual property theft and unauthorized data leaks. Integrating Self-Sovereign Identity (SSI) systems and Attribute-Based Access Control (ABAC) models offers a promising solution to address these issues. This paper presents ABAC policies based on the Open Digital Rights Language (ODRL) standard, which will be integrated into the VCs of the SSI system. The policy will integrate terms of use defined by the issuer or the holder. A potential translation into a Smart Policy (SP), expressed in a smart contract, is also proposed.