Abstract: Nowadays, cloud-based data sharing becomes a notably fascinating service provided by the cloud platform due to its convenience and economy. Ciphertext-policy attribute-based encryption (CP-ABE) system is one of the best candidates for cloud-data sharing solutions because it can provide data encryption and fine-grained access control means for cloud storage systems. However, existing centralized schemes inevitably suffer from the limitations of a single point of failure, low reliability, and poor scalability. In addition, the management and maintenance of attributes in CP-ABE solutions often require higher costs. In this paper, we propose a reliable and controllable data sharing scheme based on blockchain, mapping the attributes in the CP-ABE scheme to attribute tokens. Users with the corresponding attribute token are granted access and decryption rights for encrypted data after paying the attribute token. The scheme is implemented based on the permissioned blockchain architecture Hyperledger Fabric, and a multi-channel Fabric deployment architecture and smart contracts are designed for data management and access control. By combining CP-ABE with blockchain, a common solution for data sharing that supports fine-grained data access control is realized, which is suitable for access control management of data sharing in a distributed environment. We further implemented a smart contract prototype on Fabric, and the experimental results show that our scheme is feasible.
Loading