{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T09:49:00Z","timestamp":1782812940805,"version":"3.54.5"},"reference-count":27,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2021,8,21]],"date-time":"2021-08-21T00:00:00Z","timestamp":1629504000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2018YFC1604000"],"award-info":[{"award-number":["2018YFC1604000"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2042017gf0035"],"award-info":[{"award-number":["2042017gf0035"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>After the General Data Protection Regulation (GDPR) was introduced, some organizations and big data companies shared data without conducting any privacy protection and compliance authentication, which endangered user data security, and were punished financially for this reason. This study proposes a blockchain-based GDPR compliance data sharing scheme, aiming to promote compliance with regulations and provide a tool for interaction between users and service providers to achieve data security sharing. The zero-knowledge Succinct Non-Interactive Arguments of Knowledge (zk-SNARK) algorithm is adopted for protecting data and ensure that the user\u2019s private data can satisfy the individual requirements of the service provider without exposing user data. The proposed scheme ensures mutual authentication through the Proof of Authority consensus based on the Committee Endorsement Mechanism (CEM-PoA), and prevents nodes from doing evil using the reputation incentive mechanism. Theoretical analysis and performance comparison indicate that the scheme meets the confidentiality, availability, and other indicators. It has superiority in efficiency and privacy protection compared with other schemes.<\/jats:p>","DOI":"10.3390\/fi13080217","type":"journal-article","created":{"date-parts":[[2021,8,22]],"date-time":"2021-08-22T21:47:52Z","timestamp":1629668872000},"page":"217","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":34,"title":["A Data Sharing Scheme for GDPR-Compliance Based on Consortium Blockchain"],"prefix":"10.3390","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5241-4211","authenticated-orcid":false,"given":"Yangheran","family":"Piao","sequence":"first","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan 430072, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8728-1719","authenticated-orcid":false,"given":"Kai","family":"Ye","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan 430072, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6079-009X","authenticated-orcid":false,"given":"Xiaohui","family":"Cui","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan 430072, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2021,8,21]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Lee, G.Y., Cha, K.J., and Kim, H.J. (2019, January 8\u201313). Designing the GDPR Compliant Consent Procedure for Personal Information Collection in the IoT Environment. Proceedings of the 2019 IEEE International Congress on Internet of Things (ICIOT), Milan, Italy.","DOI":"10.1109\/ICIOT.2019.00025"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Farshid, S., Reitz, A., and Ro\u00dfbach, P. (2019, January 8). Design of a Forgetting Blockchain: A Possible Way to Accomplish GDPR Compatibility. Proceedings of the 52nd Hawaii International Conference on System Sciences (HICSS), Hawaii, UK.","DOI":"10.24251\/HICSS.2019.850"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Martin, Y.-S., and Kung, A. (2018, January 24\u201326). Methods and Tools for GDPR Compliance Through Privacy and Data Protection Engineering. Proceedings of the 2018 IEEE European Symposium on Security and Privacy Workshops (Euro S&P), London, UK.","DOI":"10.1109\/EuroSPW.2018.00021"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Aridor, G., Che, Y.K., and Salz, T. (2020). The Economic Consequences of Data Privacy Regulation: Empirical Evidence from GDPR, National Bureau of Economic Research.","DOI":"10.2139\/ssrn.3522845"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"tyy001","DOI":"10.1093\/cybsec\/tyy001","article-title":"Forgetting personal data and revoking consent under the GDPR: Challenges and proposed solutions","volume":"4","author":"Politou","year":"2018","journal-title":"J. Cybersecur."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Furey, E., and Blue, J. (2019, January 18\u201320). Can I Trust Her? Intelligent Personal Assistants and GDPR. Proceedings of the 2019 International Sym-posium on Networks, Computers and Communications (ISNCC), Istanbul, Turkey.","DOI":"10.1109\/ISNCC.2019.8909098"},{"key":"ref_7","unstructured":"Pandit, H.J., O\u2019Sullivan, D., and Lewis, D. (2018, January 10). Exploring GDPR Compliance Over Provenance Graphs Using SHACL. Proceedings of the 14th International Conference on Semantic Systems (SEMANTiCS), Vienna, Austria."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"23601","DOI":"10.1109\/ACCESS.2020.2968741","article-title":"Smart City IoT Platform Respecting GDPR Privacy and Security Aspects","volume":"8","author":"Badii","year":"2020","journal-title":"IEEE Access"},{"key":"ref_9","unstructured":"Nakamoto, S. (2021, May 20). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https:\/\/bitcoin.org\/bitcoin.pdf."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Fan, H., Liu, Y., and Zeng, Z. (2020). Decentralized Privacy-Preserving Data Aggregation Scheme for Smart Grid Based on Blockchain. Sensors, 20.","DOI":"10.3390\/s20185282"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.accinf.2018.06.001","article-title":"Designing confidentiality-preserving Blockchain-based transaction processing systems","volume":"30","author":"Wang","year":"2018","journal-title":"Int. J. Acc. Inf. Syst."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Ben Sasson, E., Chiesa, A., Garman, C., Green, M., Miers, I., Tromer, E., and Virza, M. (2014, January 18\u201321). Zerocash: Decentralized Anonymous Payments from Bitcoin. Proceedings of the 2014 IEEE Symposium on Security and Privacy, Berkeley, CA, USA.","DOI":"10.1109\/SP.2014.36"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Zyskind, G., Nathan, O., and Pentland, A. (2015, January 21\u201322). Decentralizing Privacy: Using Blockchain to Protect Personal Data. Proceedings of the 2015 IEEE Security and Privacy Workshops, San Jose, CA, USA.","DOI":"10.1109\/SPW.2015.27"},{"key":"ref_14","unstructured":"Wirth, C., and Kolain, M. (2018, January 8\u20139). Privacy by blockchain design: A blockchain-enabled GDPR-compliant approach for handling personal data. Proceedings of the 1st ERCIM Blockchain Workshop, Amsterdam, The Netherlands."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1746","DOI":"10.1109\/TIFS.2019.2948287","article-title":"GDPR-Compliant Personal Data Management: A Blockchain-Based Solution","volume":"15","author":"Truong","year":"2019","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_16","unstructured":"Camilo, J. (2019, January 28\u201329). Blockchain-based consent manager for GDPR compliance. Proceedings of the Open Identity Summit, Garmisch-Partenkirchen, Germany."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Rantos, K., Drosatos, G., Demertzis, K., Ilioudis, C., Papanikolaou, A., and Kritsas, A. (2018, January 8\u20139). ADvoCATE: A Consent Management Platform for Personal Data Processing in the IoT Using Blockchain Technology. Proceedings of the International Conference on Security for Information Technology and Communications, Bucharest, Romania.","DOI":"10.1007\/978-3-030-12942-2_23"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Ahmed, J., Yildirim, S., Nowostaki, M., Ramachandra, R., Elezaj, O., and Abomohara, M. (2020, January 9). GDPR Compliant Consent Driven Data Protection in Online Social Networks: A Blockchain-Based Approach. Proceedings of the 2020 3rd International Conference on Information and Computer Technologies (ICICT), San Jose, CA, USA.","DOI":"10.1109\/ICICT50521.2020.00054"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Hasselgren, A., Wan, P.K., Horn, M., Kralevska, K., and Gligoroski, D. (2020). GDPR Compliance for Blockchain Applications in Healthcare. arXiv, Available online: https:\/\/arxiv.org\/abs\/2009.12913.","DOI":"10.5121\/csit.2020.101303"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Al-Zaben, N., Onik, M.H., Yang, J., Lee, N.-Y., and Kim, C.-S. (2018, January 16). General Data Protection Regulation Complied Blockchain Architecture for Personally Identifiable Information Management. Proceedings of the 2018 International Conference on Computing, Electronics & Communications Engineering (iCCECE), Southend, UK.","DOI":"10.1109\/iCCECOME.2018.8658586"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"7669","DOI":"10.1109\/TII.2021.3049141","article-title":"Blockchain-Enhanced Data Sharing With Traceable and Direct Revocation in IIoT","volume":"17","author":"Yu","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"101653","DOI":"10.1016\/j.cose.2019.101653","article-title":"PrivySharing: A blockchain-based framework for privacy-preserving and secure data sharing in smart cities","volume":"88","author":"Makhdoom","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_23","unstructured":"Ramachandran, A., and Kantarcioglu, D. (2017). Using blockchain and smart contracts for secure data provenance management. arXiv, Available online: https:\/\/arxiv.org\/abs\/1709.10000."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1016\/j.csbj.2018.06.004","article-title":"Authenticating Health Activity Data Using Distributed Ledger Technologies","volume":"16","author":"Brogan","year":"2018","journal-title":"Comput. Struct. Biotechnol. J."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1147\/JRD.2019.2913621","article-title":"Supporting private data on Hyperledger Fabric with secure multiparty computation","volume":"63","author":"Benhamouda","year":"2019","journal-title":"IBM J. Res. Dev."},{"key":"ref_26","unstructured":"Dwork, C. (2008, January 25\u201329). Differential Privacy: A Survey of Results. Proceedings of the International Conference on Theory and Applications of Models of Computation, Xi\u2019an, China."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Zhou, L., Wang, L., Ai, T., and Sun, Y. (2018). BeeKeeper 2.0: Confidential Blockchain-Enabled IoT System with Fully Homomorphic Computation. Sensors, 18.","DOI":"10.3390\/s18113785"}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/13\/8\/217\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T06:48:49Z","timestamp":1760165329000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/13\/8\/217"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,21]]},"references-count":27,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2021,8]]}},"alternative-id":["fi13080217"],"URL":"https:\/\/doi.org\/10.3390\/fi13080217","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,8,21]]}}}