DUCE: Distributed Usage Control Enforcement for Private Data Sharing in Internet of Things - Data and Applications Security and Privacy XXXV Access content directly
Conference Papers Year : 2021

DUCE: Distributed Usage Control Enforcement for Private Data Sharing in Internet of Things

Na Shi
  • Function : Author
  • PersonId : 1135166
Bo Tang
  • Function : Author
  • PersonId : 1135167
Ravi Sandhu
  • Function : Author
  • PersonId : 978076
Qi Li
  • Function : Author
  • PersonId : 1135168

Abstract

The emerging Cloud-Enabled Internet of Things (CEIoT) is becoming increasingly popular since it enables end users to remotely interact with the connected devices, which collect real-world data and share with diverse cloud services. The shared data will often be sensitive as well as private. According to the General Data Protection Regulation (GDPR), the privacy issue should be addressed by the cloud services and subsequent data custodians. In this paper, we propose DUCE, an enforcement model for distributed usage control for data sharing in CEIoT. DUCE leverages both blockchain and Trusted Execution Environment (TEE) technologies to achieve reliable and continuous life-cycle enforcement for cross-domain data sharing scenarios. The core components of DUCE are distributed Policy Decision Points (PDPs) and Policy Enforcement Points (PEPs) to enable reliable execution of usage control policies without a centralized trusted authority. Policy administration is also distributed and controlled by the data owner, who can modify the rules anywhere anytime. The policy rules expressed in eXtensible Access Control Markup Language (XACML) are parsed into smart contracts to be executed on the blockchain service. A detailed explanation of the enforcement process is given for an example “delete-after-use” rule. A prototype system is implemented with an open-source permissioned blockchain system and evaluated on an experimental deployment. The results show reasonable performance and scalability overhead in comparison to OAuth 2.0. We believe additional cross-domain data usage control issues can also be addressed by DUCE.
Fichier principal
Vignette du fichier
513274_1_En_16_Chapter.pdf (858.16 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03677043 , version 1 (24-05-2022)

Licence

Attribution

Identifiers

Cite

Na Shi, Bo Tang, Ravi Sandhu, Qi Li. DUCE: Distributed Usage Control Enforcement for Private Data Sharing in Internet of Things. 35th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2021, Calgary, AB, Canada. pp.278-290, ⟨10.1007/978-3-030-81242-3_16⟩. ⟨hal-03677043⟩
21 View
9 Download

Altmetric

Share

Gmail Facebook X LinkedIn More