RBAC-SC: Role-Based Access Control Using Smart Contract

By Jason Paul Cruz, Yuichi Kaji, Naoto Yanai. IEEE Access, 2018

297 citations recorded by the source corpus.

The role-based access control (RBAC) framework is a mechanism that describes the access control principle. As a common interaction, an organization provides a service to a user who owns a certain role that was issued by a different organization. Such trans-organizational RBAC is common in face-to-face communication but not in a computer network, because it is difficult to establish both the security that prohibits the malicious impersonation of roles and the flexibility that allows small organizations to participate and users to fully control their own roles. In this paper, we present an RBAC using smart contract (RBAC-SC), a platform that makes use of Ethereum’s smart contract technology to realize a trans-organizational utilization of roles. Ethereum is an open blockchain platform that is designed to be secure, adaptable, and flexible. It pioneered smart contracts, which are decentralized applications that serve as “autonomous agents” running exactly as programmed and are deployed on a blockchain. The RBAC-SC uses smart contracts and blockchain technology as versatile infrastructures to represent the trust and endorsement relationship that are essential in the RBAC and to realize a challenge-response authentication protocol that verifies a user’s ownership of roles. We describe the RBAC-SC framework, which is composed of two main parts, namely, the smart contract and the challenge-response protocol, and present a performance analysis. A prototype of the smart contract is created and deployed on Ethereum’s Testnet blockchain, and the source code is publicly available.

Subfields: Artificial Intelligence, Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/d0a903ac0b8c3a2df36aa0b2bd46984eb88b1b1f

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

Citations in the corpus

Survey on blockchain for Internet of Things (2019, methodology): “Blockchainbased intrusion detection [2,5,9–11, 20, 35, 67, 68, 79, 97, 103] [68] elaborated the possibility of combing blockchain technology and IDS; [79] and [11] focused on the trust computing and vulnerability scanning of blockchain-based IDS, respectively Blockchain-based access control [16,19,2”
An Overview of Smart Contract and Use Cases in Blockchain Technology (2018, background): “The authors in [12] and [13] explain about the smart contracts execution process and some security issue.”
Blockchain 3.0 applications survey (2020, background): “A Role Based Access Control system which uses smart contracts and blockchain technology as infrastructures to represent the trust and endorsement relationship essential to realize a challenge-response authentication protocol that veriﬁes users ownership of roles has been proposed in [101].”