Privacy-preserving authentication and authorization in networks using blockchain

Sanap, Asha; Malwade, Sulakshana; Bhosale, Rohini; Karandikar, Aarti; Bakare, Anuradha A.; Langote, Vaishali

doi:10.47974/JDMSC-1965

Open Access Research Article

Privacy-preserving authentication and authorization in networks using blockchain

^*Asha SanapCorresponding authorasha.sanap@mitwpu.edu.inDepartment of Electronics and Communication EngineeringSchool of PolytechnicDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, IndiaView full profile → , Sulakshana Malwadesulakshana.malwade@mitwpu.edu.inDepartment of Computer EngineeringDr. Vishwanath Karad MIT World Peace UniversityDepartment of Polytechnic and Skill DevelopmentPune, Maharashtra, IndiaView full profile → , Rohini Bhosalerohinijadhavphd@gmail.comDepartment of Computer EngineeringPillai HoC College of Engineering and TechnologyUniversity of MumbaiMaharashtra, IndiaView full profile → , Aarti Karandikarkarandikara@rknec.eduDepartment of Computer Science and Engineering (Data Science)Shri Ramdeobaba College of Engineering and ManagementNagpur, Maharashtra, IndiaView full profile → , Anuradha A. Bakareanuradha.bakare@mitwpu.edu.inDepartment of Electronics and Communication EngineeringSchool of PolytechnicDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, IndiaView full profile → , Vaishali Langotevaishali.langote@mitwpu.edu.inDepartment of Computer ScienceSchool of PolytechnicDr. Vishwanath Karad MIT World Peace UniversityPune, Maharashtra, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 903–914Vol. 27Issue 2-BMarch 2024DOI: 10.47974/JDMSC-1965 Crossmark XML

Published Online:: 12 Apr 2024
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-1965
Pages:: 903–914

Abstract

Blockchain-based solutions offer a promising avenue for privacy-preserving authentication and authorization mechanisms. Through the immutable and decentralized nature of blockchain, individuals can maintain control over their personal data while still engaging in secure transactions and interactions. These solutions leverage cryptographic techniques to ensure privacy, such as zero-knowledge proofs, which allow one party to prove possession of certain information without revealing the information itself.By storing authentication and authorization data on the blockchain, users can access services without having to repeatedly provide sensitive information. Smart contracts can automate authorization processes, ensuring that only authorized parties can access certain resources or perform specific actions. Additionally, blockchain-based identity systems offer a self-sovereign approach, where individuals have full control over their digital identities, reducing the reliance on centralized authorities. Moreover, blockchain networks provide transparency and auditability, allowing users to track how their data is being used and ensuring compliance with privacy regulations. However, challenges such as scalability, interoperability, and user adoption remain to be addressed for widespread implementation. Overall, blockchain-based solutions hold great potential in providing privacy-preserving authentication and authorization while empowering individuals with greater control over their data.Blockchain-based solutions offer a promising avenue for privacy-preserving authentication and authorization mechanisms. Through the immutable and decentralized nature of blockchain, individuals can maintain control over their personal data while still engaging in secure transactions and interactions. These solutions leverage cryptographic techniques to ensure privacy, such as zero-knowledge proofs, which allow one party to prove possession of certain information without revealing the information itself.

Keywords

Blockchain Privacy-preserving Authentication Authorization Self-sovereign identity

Subject Classifications

68M25

References

[1] AlAhmad, A.S.; Kahtan, H.; Alzoubi, Y.I.; Ali, O.; Jaradat, A. Mobile cloud computing models security issues: A systematic review. J. Netw. Comput. Appl., 190, 103152 (2021).
[2] Li, Z.; Wang, D.; Morais, E. Quantum-Safe Round-Optimal Password Authentication for Mobile Devices. IEEE Trans. Dependable Secur. Comput., 19, 1885–1899 (2022).
[3] He, D.; Zeadally, S.; Kumar, N.; Wu, W. Efficient and Anonymous Mobile User Authentication Protocol Using Self-Certified Public Key Cryptography for Multi-Server Architectures. IEEE Trans. Inf. Forensics Secur., 11, 2052–2064 (2016).
[4] He, D.; Kumar, N.; Khan, M.K.; Wang, L.; Shen, J. Efficient Privacy-Aware Authentication Scheme for Mobile Cloud Computing Services. IEEE Syst. J., 12, 1621–1631 (2018).
[5] Roy, S.; Das, A.K.; Chatterjee, S.; Kumar, N.; Chattopadhyay, S.; Rodrigues, J.J.P.C. Provably Secure Fine-Grained Data Access Control Over Multiple Cloud Servers in Mobile Cloud Computing Based Healthcare Applications. IEEE Trans. Ind. Inform., 15, 457–468 (2019).
[6] M. Kuperberg, “Blockchain-Based Identity Management: A Survey From the Enterprise and Ecosystem Perspective,” in IEEE Transactions on Engineering Management, vol. 67, no. 4, pp. 1008-1027, Nov. 2020, doi: 10.1109/TEM.2019.2926471.
[7] B. Yousra, S. Yassine, M. Yassine, S. Said, T. Lo’ai and K. Salah, “A Novel Secure and Privacy-Preserving Model for OpenID Connect Based on Blockchain,” in IEEE Access, vol. 11, pp. 67660-67678 (2023), doi: 10.1109/ACCESS.2023.3292143.
[8] A. Lahbib, K. Toumi, A. Laouiti and S. Martin, “Blockchain based Privacy Aware Distributed Access Management Framework for Industry 4.0,” 2021 IEEE 30th International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), Bayonne, France, pp. 51-56 (2021), doi: 10.1109/WETICE53228.2021.00021.
[9] Limkar, Suresh, Ashok, Wankhede Vishal, Singh, Sanjeev, Singh, Amrik, Wagh, Sharmila K. & Ajani, Samir N. A mechanism to ensure identity-based anonymity and authentication for IoT infrastructure using cryptography, Journal of Discrete Mathematical Sciences and Cryptography, 26:5, 1597–1611 (2023).
[10] S. Paavolainen and C. Carr, “Security properties of light clients on the Ethereum blockchain”, IEEE Access, vol. 8, pp. 124339-124358 (2020).

Views: 435Downloads: 125Citations: 0