Abstract—In information security, access control is the selective restriction of access to an online resource or service. One of the most used access control models is Attribute-based Access Control, in which access rights are granted to users by evaluating suitable attributes (user attributes, resource attributes, and environment conditions). An important aspect of access control is to guarantee that the identity of the user accessing a service is preserved. In this paper, we deal with this problem and propose a new solution based on a blockchain to ensure that only authorized users can access a service, yet preserving anonymity and unlinkability of their accesses. Moreover, the cooperation among several trusted parties allows the identification of the user accessing a service in case of need.

Index Terms—identity provider, service provider, un-linkability, authentication, Bitcoin, Ethereum

 

Cite: Gianluca Lax and Antonia Russo, "Blockchain-Based Access Control Supporting Anonymity and Accountability," Journal of Advances in Information Technology, Vol. 11, No. 4, pp. 186-191, November 2020. doi: 10.12720/jait.11.4.186-191