arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2007.02163cs.CRcs.CY
收藏

使用EOS区块链的可扩展的基于角色的访问控制

Scalable Role-based Access Control Using The EOS Blockchain

Mohsin Ur Rahman

摘要:

基于角色的访问控制(Role-based Access Control,RBAC)策略以角色的形式表示主体访问资源的权限。该研究提出了一个可扩展的,灵活的和可审计的RBAC系统,使用EOS区块链平台,以满足组织的安全需求。用于开发智能合约和去中心化应用程序(DAPP)的EOS区块链平台旨在解决现有区块链平台中存在的可扩展性问题。这个智能合约平台旨在消除交易费用,同时每秒进行数百万笔交易。在我们提出的方法中,EOS区块链透明地存储RBAC策略。管理角色根据组织执行操作的方式在更高级别上控制对资源的访问。组织创建角色、角色层次结构和约束来规范用户操作。因此,一旦建立了RBAC框架,管理用户(颁发者)只需要授予和撤销角色来支持组织结构的变化。我们提出的基于区块链的RBAC支持使用无气事务的委托功能,这使得它在大量应用场景中具有可采用性和吸引力。我们提出的解决方案与应用无关,非常适合各种用例。现有的最先进的安全框架由于难以扩展、成本较高和单点故障而不适合。因此,组织需要一个可扩展的,具有成本效益的和轻量级的访问控制解决方案,可以更好地保护他们的隐私。基于EOS区块链开发了概念验证实现。我们的实验结果和分析清楚地表明,我们基于EOS区块链的RBAC在成本、延迟、块生成时间、合约执行时间和吞吐量方面优于现有的区块链平台。

英文摘要:

Role-based access control (RBAC) policies represent the rights of subjects in terms of roles to access resources. This research proposes a scalable, flexible and auditable RBAC system using the EOS blockchain platform to meet the security requirements of organizations. The EOS blockchain platform for developing smart contract and decentralized applications (DAPPs) aims to address the scalability problem found in existing blockchain platforms. This smart contract platform aims to eliminate transaction fees while conducting millions of transactions per second. In our proposed approach, the EOS blockchain transparently stores RBAC policies. Administrative roles control access to resources at a higher level according to the way organisations perform operations. An organisation creates roles, role hierarchies and constraints to regulate user actions. Therefore, once an RBAC framework is established, the administrative user (issuer) only needs to grant and revoke roles to support changes in the organisational structure. Our proposed blockchain-based RBAC supports delegation capabilities using gaseless transactions which makes it adoptable and appealing in a large number of application scenarios. Our proposed solution is application-agnostic and well-suited for diverse use cases. Existing state-of-the art security frameworks are not suitable due to the difficulty of scale, higher cost and single point of failure. Consequently, organisations demand a scalable, cost-effective and lightweight access control solution which can better protect their privacy as well. A proof of concept implementation is developed based on the EOS blockchain. Our experimental results and analysis clearly show that our EOS blockchain-based RBAC outperforms existing blockchain platforms in terms of cost, latency, block generation time, contract execution time and throughput.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑