DAM transaction is determined by consensus of the various
computers or nodes in the network instead of having a central
trusted or officialrecord.Moreover,blockchain can be used
to verify the transferof ownership ofdigitalassets oreven
justthe rightto accessand use such assets.In summary,
digitalassetmanagementcould leverage security properties
of blockchains,which include:
• Impossibility of counterfeit,
• Immutability,
• Disintermediation and ease of transfer,and
• Transparency and ease of auditing.
Therefore,there is no denying in the fact that Blockchain has
immense potential to become an important component of any
DAM strategy.
Although blockchain provides some unique properties for
distributing and managing digital asset, it is still unable to meet
the requirements offlexibility,diversity,and dynamicity for
permission management. For example, if requesters want to get
access to a certain digital asset, they must have the permission
of whoever manages itand provide some declarations (or at
least hints about how to transact on the required digital asset).
More concretely, in the healthcare system the patient’s medical
records mustfollow strictaccess constraints to preventthe
leakage of sensitive information.Or,the distribution of copy-
righted media must be consistent with copyright requirements,
such as,some movies can only be played in a specific region
or a certain device.To overcome this problem,it is a direct
and effective method to introduce access controltechnology
into DAM.
In the last two years, several new researches have addressed
theproblem ofintegrating accesscontroland blockchain
technology.For example,Ouaddah etal. proposed a frame-
work,called FairAccess,for accesscontrolin Internet-of-
Things(IoT) on the blockchain [2].This framework used
organization-based access control (OrBAC) to enable users to
own and control their data. However, the granularity of OrBAC
is not enough to realize digital asset management considering
that its organization structure may remain relatively fixed over
time. Xu et al. also proposed a distributed ledger based access
control(DL-BAC) schemefor Web applications[3]. This
scheme adapt access control list (ACL) to realize a lightweight
decision-making and granting access.For the future work,
they plan to extend the privacy enhanced DL-BAC to support
morecomplex accesspoliciesincluding role-based access
control(RBAC) and so on.To addressthe same problem,
Azaria et al. used the blockchain to implement a decentralized
medicalrecord access and permission management[4]with
authentication,confidentiality and accountability.Xia et al.
also proposed a blockchain-based data sharing framework [5]
which allows access to only invited,and hence verified users.
As a result of this design, further accountability is guaranteed
asall usersare already known and a log oftheiractions
is keptby the blockchain.In general,these researches have
enlightening significance for our research.
To implement a flexible, diverse and dynamic access control
in DAM, in this paper we intentto introduce attribute-based
access control(ABAC) [6]into the blockchain.ABAC pro-
vides an efficient approach to accommodate a wide breadth of
access controlpolicies and simplify permission management.
Recently,severalpracticalframeworks,such asExtensible
Access ControlMarkup Language (XACML)[7]and Next
Generation Access Control(NGAC),have been proposed to
providea standardized way forexpressing and enforcing
vastly diverse access control policies on various types of data
services.These frameworks possess two major features:
• Diversification:theability to extractattributevalues
from multi-source,various places,differenttypes,e.g.,
GPS location,time,visitor traffic,or threat level;
• Dynamicity:the ability to provide runtime supportfor
acquiring thepolicy and attributesassociated with a
subject,object,action,or environmentin which access
requests occur.
In otherword,accesscontrollogic of ABAC engine can
determine who should have access to whatresources under
whatcircumstances and by taking whatactions.Hence,the
ABAC is particularly usefulfor an open environment,such
as blockchain.However,we should note thatthere existstill
several actual challenges that need to be solved.
One of the core challengesto be addressed ishow to
integrate access control mechanisms in ABAC into blockchain.
An effective solution for this problem is to constructvarious
blockchain’s transactions corresponding to the steps of access
control procedure, e.g., store, ingest, organize and retrieve, for
digitalassetmanaged by DAM.By means of this approach,
a registered useris allowed to publish his/herown digital
assets to all members in blockchain, and then the platform can
ensure the member’s access abided by common ABAC’s rules.
Furthermore,these transactionsrecorded in the blockchain
achievethegoalof ownership claiming,assetescrowing,
transparency and verification of all steps.
Our Contribution.In this paper we focus on a new genera-
tion of digitalassetmanagementplatform in a decentralized
organization oralliance.This platform can supportflexible
and diverse permission management, as well as verifiable and
transparentaccess process.Exactly,we notonly provide a
complete new access control framework and procedure, but al-
so conduct researches on concrete implementation techniques.
Our contributions are listed as follows:
• We presenta new digitalassetmanagementplatfor-
m, called DAM-Chain,with Transaction-based Access
Control(TBAC) which integrates the distribution ABAC
modeland the blockchain technology.In this platform,
the ABAC providesflexible and diverse authorization
mechanisms fordigitalassetescrowed into blockchain,
and the transactions in blockchain serve as verifiable and
traceable medium of access request procedure.
• We presentfourtypesof transactionsto describe the
TBAC accesscontrolprocedure,and providetheal-
gorithms ofthese transactions corresponding to subject
registration,objectescrowing and publication,access
requestand grant.Moreover,the Bitcoin-type crypto-
194

Services Computing Digital Asset Management PDF

Contribute Materials

Related Documents

+13062052269

info@desklib.com