SC-RBAC: A smart contract based RBAC model for DApps

Yi Ding; Jun Jin; Jinglun Zhang; Zhongyi Wu; Kai Hu

doi:10.1007/978-3-030-37429-7_8

SC-RBAC: A smart contract based RBAC model for DApps

Yi Ding
, Jun Jin^*
, Jinglun Zhang
, Zhongyi Wu
, Kai Hu

^*Corresponding author for this work

School of Computer Science and Engineering

Beijing Wuzi University
Key Laboratory of Advanced Public Transportation Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

10 Scopus citations

Abstract

Blockchain technology with its non-centralized, transparent, trustful, traceable and tamper-resistant features draws more and more attention both in commercial and scientific area. Smart contracts and DApps (Decentralized Applications) are programs naturally running automatically on blockchain. Access control is a principle that regulates the access to critical resources. RBAC (Role based Access Control) is one of access control mechanisms and it involves three parts: user, role and permission, with their relations, corresponding to real business. However, traditional implementation of RBAC relies on centralized server which is in danger of being modified, invaded or a single point of failure. The paper proposes a decentralized and smart contract based RBAC model named SC-RBAC for DApps. It is developed by Ethereum’s Solidity and offers a strong compatibility with different DApps. The features of SC-RBAC associated with flexible interfaces, traceability and security enrich the community of DApps. The results of two experiments are discussed to evaluate the overheads of SC-RBAC model.

Original language	English
Title of host publication	Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers
Editors	Danijela Miloševic, Yong Tang, Qiaohong Zu
Publisher	Springer
Pages	75-85
Number of pages	11
ISBN (Print)	9783030374280
DOIs	https://doi.org/10.1007/978-3-030-37429-7_8
State	Published - 2019
Event	5th International Conference on Human Centered Computing, HCC 2019 - Čačak, Serbia Duration: 5 Aug 2019 → 7 Aug 2019

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11956 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	5th International Conference on Human Centered Computing, HCC 2019
Country/Territory	Serbia
City	Čačak
Period	5/08/19 → 7/08/19

Keywords

Access control
Blockchain
DApps
RBAC
Smart contract

Access to Document

10.1007/978-3-030-37429-7_8

Cite this

Ding, Y., Jin, J., Zhang, J., Wu, Z., & Hu, K. (2019). SC-RBAC: A smart contract based RBAC model for DApps. In D. Miloševic, Y. Tang, & Q. Zu (Eds.), Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers (pp. 75-85). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11956 LNCS). Springer. https://doi.org/10.1007/978-3-030-37429-7_8

Ding, Yi ; Jin, Jun ; Zhang, Jinglun et al. / SC-RBAC : A smart contract based RBAC model for DApps. Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers. editor / Danijela Miloševic ; Yong Tang ; Qiaohong Zu. Springer, 2019. pp. 75-85 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{6ab2df41dc2a4289ac16f75267536a6a,

title = "SC-RBAC: A smart contract based RBAC model for DApps",

abstract = "Blockchain technology with its non-centralized, transparent, trustful, traceable and tamper-resistant features draws more and more attention both in commercial and scientific area. Smart contracts and DApps (Decentralized Applications) are programs naturally running automatically on blockchain. Access control is a principle that regulates the access to critical resources. RBAC (Role based Access Control) is one of access control mechanisms and it involves three parts: user, role and permission, with their relations, corresponding to real business. However, traditional implementation of RBAC relies on centralized server which is in danger of being modified, invaded or a single point of failure. The paper proposes a decentralized and smart contract based RBAC model named SC-RBAC for DApps. It is developed by Ethereum{\textquoteright}s Solidity and offers a strong compatibility with different DApps. The features of SC-RBAC associated with flexible interfaces, traceability and security enrich the community of DApps. The results of two experiments are discussed to evaluate the overheads of SC-RBAC model.",

keywords = "Access control, Blockchain, DApps, RBAC, Smart contract",

author = "Yi Ding and Jun Jin and Jinglun Zhang and Zhongyi Wu and Kai Hu",

note = "Publisher Copyright: {\textcopyright} Springer Nature Switzerland AG 2019.; 5th International Conference on Human Centered Computing, HCC 2019 ; Conference date: 05-08-2019 Through 07-08-2019",

year = "2019",

doi = "10.1007/978-3-030-37429-7\_8",

language = "英语",

isbn = "9783030374280",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "75--85",

editor = "Danijela Milo{\v s}evic and Yong Tang and Qiaohong Zu",

booktitle = "Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers",

address = "德国",

}

Ding, Y, Jin, J, Zhang, J, Wu, Z & Hu, K 2019, SC-RBAC: A smart contract based RBAC model for DApps. in D Miloševic, Y Tang & Q Zu (eds), Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11956 LNCS, Springer, pp. 75-85, 5th International Conference on Human Centered Computing, HCC 2019, Čačak, Serbia, 5/08/19. https://doi.org/10.1007/978-3-030-37429-7_8

SC-RBAC: A smart contract based RBAC model for DApps. / Ding, Yi; Jin, Jun; Zhang, Jinglun et al.
Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers. ed. / Danijela Miloševic; Yong Tang; Qiaohong Zu. Springer, 2019. p. 75-85 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11956 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - SC-RBAC

T2 - 5th International Conference on Human Centered Computing, HCC 2019

AU - Ding, Yi

AU - Jin, Jun

AU - Zhang, Jinglun

AU - Wu, Zhongyi

AU - Hu, Kai

N1 - Publisher Copyright: © Springer Nature Switzerland AG 2019.

PY - 2019

Y1 - 2019

N2 - Blockchain technology with its non-centralized, transparent, trustful, traceable and tamper-resistant features draws more and more attention both in commercial and scientific area. Smart contracts and DApps (Decentralized Applications) are programs naturally running automatically on blockchain. Access control is a principle that regulates the access to critical resources. RBAC (Role based Access Control) is one of access control mechanisms and it involves three parts: user, role and permission, with their relations, corresponding to real business. However, traditional implementation of RBAC relies on centralized server which is in danger of being modified, invaded or a single point of failure. The paper proposes a decentralized and smart contract based RBAC model named SC-RBAC for DApps. It is developed by Ethereum’s Solidity and offers a strong compatibility with different DApps. The features of SC-RBAC associated with flexible interfaces, traceability and security enrich the community of DApps. The results of two experiments are discussed to evaluate the overheads of SC-RBAC model.

AB - Blockchain technology with its non-centralized, transparent, trustful, traceable and tamper-resistant features draws more and more attention both in commercial and scientific area. Smart contracts and DApps (Decentralized Applications) are programs naturally running automatically on blockchain. Access control is a principle that regulates the access to critical resources. RBAC (Role based Access Control) is one of access control mechanisms and it involves three parts: user, role and permission, with their relations, corresponding to real business. However, traditional implementation of RBAC relies on centralized server which is in danger of being modified, invaded or a single point of failure. The paper proposes a decentralized and smart contract based RBAC model named SC-RBAC for DApps. It is developed by Ethereum’s Solidity and offers a strong compatibility with different DApps. The features of SC-RBAC associated with flexible interfaces, traceability and security enrich the community of DApps. The results of two experiments are discussed to evaluate the overheads of SC-RBAC model.

KW - Access control

KW - Blockchain

KW - DApps

KW - RBAC

KW - Smart contract

UR - https://www.scopus.com/pages/publications/85081898070

U2 - 10.1007/978-3-030-37429-7_8

DO - 10.1007/978-3-030-37429-7_8

M3 - 会议稿件

AN - SCOPUS:85081898070

SN - 9783030374280

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 75

EP - 85

BT - Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers

A2 - Miloševic, Danijela

A2 - Tang, Yong

A2 - Zu, Qiaohong

PB - Springer

Y2 - 5 August 2019 through 7 August 2019

ER -

Ding Y, Jin J, Zhang J, Wu Z, Hu K. SC-RBAC: A smart contract based RBAC model for DApps. In Miloševic D, Tang Y, Zu Q, editors, Human Centered Computing - 5th International Conference, HCC 2019, Revised Selected Papers. Springer. 2019. p. 75-85. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-37429-7_8

SC-RBAC: A smart contract based RBAC model for DApps

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this