{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T15:27:30Z","timestamp":1784820450699,"version":"3.55.0"},"reference-count":32,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2023,8,21]],"date-time":"2023-08-21T00:00:00Z","timestamp":1692576000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2021YFB2701300"],"award-info":[{"award-number":["2021YFB2701300"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61972034"],"award-info":[{"award-number":["61972034"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Natural Science Foundation of Beijing Municipality","award":["4202068"],"award-info":[{"award-number":["4202068"]}]},{"DOI":"10.13039\/501100007129","name":"Natural Science Foundation of Shandong Province","doi-asserted-by":"crossref","award":["ZR2019ZD10, ZR2020ZD01"],"award-info":[{"award-number":["ZR2019ZD10, ZR2020ZD01"]}],"id":[{"id":"10.13039\/501100007129","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Defense Industrial Technology Development Program","award":["JCKY2020206C058"],"award-info":[{"award-number":["JCKY2020206C058"]}]},{"name":"Industrial Technology Basic Public Service Platform Project\u2013Information Encoding Algorithm\u00a0Application Public Service Platform","award":["2019-00904-1-1"],"award-info":[{"award-number":["2019-00904-1-1"]}]},{"name":"Cloud Technology Endowed Professorship"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2023,8,31]]},"abstract":"<jats:p>\n            Multi-organization data sharing is becoming increasingly prevalent due to the interconnectivity of systems and the need for collaboration across organizations (e.g., exchange of data in a supply chain involving multiple upstream and downstream vendors). There are, however, data security concerns due to lack of trust between organizations that may be located in jurisdictions with varying security and privacy legislation and culture (also referred to as a zero trust environment). Hence, in such a zero trust setting, one should introduce strengthened, yet efficient, access control mechanisms to facilitate cross-organizational data access and exchange requests. Contemporary access control schemes generally focus on protecting a single objective rather than multiple parties, due to higher security costs. In this article, we propose a blockchain-based access control scheme, designed to facilitate lightweight data sharing among different organizations. Specifically, our approach utilizes the consortium blockchain to establish a trustworthy environment, in which a\n            <jats:italic>Role-Based Access Control<\/jats:italic>\n            (RBAC) model is then deployed using our proposed multi-signature protocol and smart contract methods. Evaluation of our proposed approach is performed on the HyperLedger Fabric consortium blockchain platform using both\n            <jats:italic>Caliper<\/jats:italic>\n            and\n            <jats:italic>BFT-SMaRT<\/jats:italic>\n            benchmarks, and the findings demonstrate the utility of our approach.\n          <\/jats:p>","DOI":"10.1145\/3511899","type":"journal-article","created":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T12:21:28Z","timestamp":1658146888000},"page":"1-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":92,"title":["A Blockchain-Based Access Control Scheme for Zero Trust Cross-Organizational Data Sharing"],"prefix":"10.1145","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6784-0221","authenticated-orcid":false,"given":"Keke","family":"Gai","sequence":"first","affiliation":[{"name":"Beijing Institute of Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6723-5221","authenticated-orcid":false,"given":"Yufeng","family":"She","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3277-3887","authenticated-orcid":false,"given":"Liehuang","family":"Zhu","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9208-5336","authenticated-orcid":false,"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[{"name":"University of Texas at San Antonio, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1319-1224","authenticated-orcid":false,"given":"Zhiguo","family":"Wan","sequence":"additional","affiliation":[{"name":"Zhejiang Lab, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,8,21]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190538"},{"issue":"99","key":"e_1_3_1_3_2","first-page":"1","article-title":"A security awareness and protection system for 5G smart healthcare based on zero-trust architecture","author":"Chen B.","year":"2020","unstructured":"B. Chen, S. Qiao, J. Zhao, D. Liu, X. Shi, M. Lyu, H. Chen, H. Lu, and Y. Zhai. 2020. A security awareness and protection system for 5G smart healthcare based on zero-trust architecture. IEEE Internet of Things Journal PP, 99 (2020), 1.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-018-1085-0"},{"key":"e_1_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2812844"},{"key":"e_1_3_1_6_2","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1109\/SmartCloud.2016.22","volume-title":"2016 IEEE International Conference on Smart Cloud","author":"DeCusatis C.","year":"2016","unstructured":"C. DeCusatis, P. Liengtiraphan, A. Sager, and M. Pinelli. 2016. Implementing zero trust cloud networks with transport access control and first packet authentication. In 2016 IEEE International Conference on Smart Cloud. IEEE, New York, NY, 5\u201310."},{"key":"e_1_3_1_7_2","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1109\/SmartCloud.2016.22","volume-title":"2016 IEEE International Conference on Smart Cloud (SmartCloud)","author":"DeCusatis C.","year":"2016","unstructured":"C. DeCusatis, P. Liengtiraphan, A. Sager, and M. Pinelli. 2016. Implementing zero trust cloud networks with transport access control and first packet authentication. In 2016 IEEE International Conference on Smart Cloud (SmartCloud). IEEE, New York, 5\u201310."},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.1145\/3180457.3180458"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/3286978.3286981"},{"key":"e_1_3_1_10_2","first-page":"95","volume-title":"Annual Asian Computing Science Conference","author":"Jafari M.","year":"2007","unstructured":"M. Jafari and M. Fathian. 2007. Management advantages of object classification in role-based access control (RBAC). In Annual Asian Computing Science Conference. Springer, Doha, Qatar, 95\u2013110."},{"key":"e_1_3_1_11_2","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1109\/ICEBE.2017.35","volume-title":"2017 IEEE 14th International Conference on e-Business Engineering (ICEBE\u201917)","author":"Jemel M.","year":"2017","unstructured":"M. Jemel and A. Serhrouchni. 2017. Decentralized access control mechanism with temporal dimension based on blockchain. In 2017 IEEE 14th International Conference on e-Business Engineering (ICEBE\u201917). IEEE, Shanghai, China, 177\u2013182."},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-4030-6.ch012"},{"key":"e_1_3_1_13_2","first-page":"1","volume-title":"Proceedings of the 50th Hawaii International Conference on System Sciences","author":"Korpela K.","year":"2017","unstructured":"K. Korpela, J. Hallikas, and T. Dahlberg. 2017. Digital supply chain transformation toward blockchain integration. In Proceedings of the 50th Hawaii International Conference on System Sciences. IEEE, Hawaii, 1\u201310."},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.05.005"},{"key":"e_1_3_1_15_2","first-page":"206","volume-title":"IFIP International Conference on Distributed Applications and Interoperable Systems","author":"Maesa D.","year":"2017","unstructured":"D. Maesa, P. Mori, and L. Ricci. 2017. Blockchain based access control. In IFIP International Conference on Distributed Applications and Interoperable Systems. Springer, Neuch\u00e2tel, Switzerland, 206\u2013220."},{"key":"e_1_3_1_16_2","first-page":"1379","volume-title":"2018 IEEE International Conference on Internet of Things (iThings\u201918), IEEE Green Computing and Communications (GreenCom\u201918), IEEE Cyber, Physical and Social Computing (CPSCom\u201918), and IEEE Smart Data (SmartData\u201918)","author":"Maesa D.","year":"2018","unstructured":"D. Maesa, P. Mori, and L. Ricci. 2018. Blockchain based access control services. In 2018 IEEE International Conference on Internet of Things (iThings\u201918), IEEE Green Computing and Communications (GreenCom\u201918), IEEE Cyber, Physical and Social Computing (CPSCom\u201918), and IEEE Smart Data (SmartData\u201918). IEEE, Halifax, Canada, 1379\u20131386."},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10623-019-00608-x"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2812239"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1748"},{"key":"e_1_3_1_20_2","first-page":"1","volume-title":"ICC 2019-2019 IEEE International Conference on Communications (ICC\u201919)","author":"Paillisse J.","year":"2019","unstructured":"J. Paillisse, J. Subira, A. Lopez, A. Rodriguez-Natal, V. Ermagan, F. Maino, and A. Cabellos. 2019. Distributed access control with blockchain. In ICC 2019-2019 IEEE International Conference on Communications (ICC\u201919). IEEE, Shanghai, China, 1\u20136."},{"key":"e_1_3_1_21_2","unstructured":"J. Park. 2017. Role-based access control to computing resources in an inter-organizational community. (2017). US Patent 9 769 177. Filed 11 June 2008 Issued 19 Sept. 2017."},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2969326"},{"key":"e_1_3_1_23_2","first-page":"228","volume-title":"Annual International Conference on the Theory and Applications of Cryptographic Techniques","author":"Ristenpart T.","year":"2007","unstructured":"T. Ristenpart and S. Yilek. 2007. The power of proofs-of-possession: Securing multiparty signatures against rogue-key attacks. In Annual International Conference on the Theory and Applications of Cryptographic Techniques. Springer, Barcelona, Spain, 228\u2013245."},{"key":"e_1_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2905846"},{"key":"e_1_3_1_25_2","first-page":"88","volume-title":"2018 IEEE International Congress on Internet of Things (ICIOT\u201918)","year":"2018","unstructured":"Samaniego, Mayra, and R. Deters. 2018. Zero-trust hierarchical management in IoT. In 2018 IEEE International Congress on Internet of Things (ICIOT\u201918). IEEE, San Francisco, 88\u201395."},{"key":"e_1_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/2.485845"},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2963794"},{"key":"e_1_3_1_28_2","unstructured":"F. Tycksen and C. Jennings. 2001. Digital Certificate. (2001). US Patent 6 189 097. Filed March 24 1997 Issued February 13 2001."},{"key":"e_1_3_1_29_2","first-page":"1","volume-title":"2018 29th Irish Signals and Systems Conference (ISSC\u201918)","author":"Vanickis Romans","year":"2018","unstructured":"Romans Vanickis, Paul Jacob, Sohelia Dehghanzadeh, and Brian Lee. 2018. Access control policy enforcement for zero-trust-networking. In 2018 29th Irish Signals and Systems Conference (ISSC\u201918). IEEE, Belfast, UK, 1\u20136."},{"key":"e_1_3_1_30_2","first-page":"1027","volume-title":"2018 IEEE International Conference on Internet of Things (iThings\u201918), IEEE Green Computing and Communications (GreenCom\u201918), IEEE Cyber, Physical and Social Computing (CPSCom\u201918), and IEEE Smart Data (SmartData\u201918)","author":"Xu R.","year":"2018","unstructured":"R. Xu, Y. Chen, E. Blasch, and G. Chen. 2018. Blendcac: A blockchain-enabled decentralized capability-based access control for IoTs. In 2018 IEEE International Conference on Internet of Things (iThings\u201918), IEEE Green Computing and Communications (GreenCom\u201918), IEEE Cyber, Physical and Social Computing (CPSCom\u201918), and IEEE Smart Data (SmartData\u201918). IEEE, Halifax, Canada, 1027\u20131034."},{"issue":"99","key":"e_1_3_1_31_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1155\/2018\/2783658","article-title":"BaDS: Blockchain-based architecture for data sharing with ABS and CP-ABE in IoT","author":"Zhang Y.","year":"2018","unstructured":"Y. Zhang, D. He, and K. K. R. Choo. 2018. BaDS: Blockchain-based architecture for data sharing with ABS and CP-ABE in IoT. Wireless Communications and Mobile Computing PP, 99 (2018), 1.","journal-title":"Wireless Communications and Mobile Computing"},{"key":"e_1_3_1_32_2","doi-asserted-by":"crossref","first-page":"991","DOI":"10.1109\/INFOCOMWKSHPS50562.2020.9162759","volume-title":"IEEE INFOCOM 2020-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS\u201920)","author":"Zheng S.","year":"2020","unstructured":"S. Zheng, L. Pan, D. Hu, M. Li, and Y. Fan. 2020. A blockchain-based trading platform for big data. In IEEE INFOCOM 2020-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS\u201920). IEEE, Toronto, Canada, 991\u2013996."},{"key":"e_1_3_1_33_2","first-page":"535","volume-title":"2018 IEEE 42nd Annual Computer Software and Applications Conference (COMPSAC\u201918)","volume":"1","author":"Zhu Y.","year":"2018","unstructured":"Y. Zhu, Y. Qin, G. Gan, Y. Shuai, and W. Chu. 2018. TBAC: Transaction-based access control on blockchain for resource sharing with cryptographically decentralized authorization. In 2018 IEEE 42nd Annual Computer Software and Applications Conference (COMPSAC\u201918), Vol. 1. IEEE, Tokyo, Japan, 535\u2013544."}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3511899","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3511899","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:50Z","timestamp":1750182530000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3511899"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,21]]},"references-count":32,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,8,31]]}},"alternative-id":["10.1145\/3511899"],"URL":"https:\/\/doi.org\/10.1145\/3511899","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"value":"1533-5399","type":"print"},{"value":"1557-6051","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,8,21]]},"assertion":[{"value":"2021-01-09","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-01-17","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-08-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}