{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,25]],"date-time":"2026-08-25T05:19:13Z","timestamp":1787635153705,"version":"build-2736575974"},"reference-count":47,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T00:00:00Z","timestamp":1787443200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62472190"],"award-info":[{"award-number":["62472190"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"award":["62472190"],"award-info":[{"award-number":["62472190"]}],"id":[{"id":"https:\/\/ror.org\/01h0zpd94","id-type":"ROR","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Cross-domain data flows are commonplace in regulated inter-organizational environments, where durable audit evidence must be retained without publicly exposing sensitive flow metadata. This paper presents a privacy-preserving on-chain attestation framework for recorded cross-domain data transfers in a permissioned setting. Its core data structure, termed GBFPlus, extends the Garbled Bloom Filter (GBF) with explicit occupancy indicators, constrained payloads that encode a consistency prefix and an adjacent-domain identifier, and distinct pairing-derived positions. Each domain administrator records observed inbound and outbound transfers in directional GBFPlus instances and periodically commits signed filter attestations to an append-only ledger. An authorized regulator can reconstruct candidate transfer edges from available bilateral attestations, while light clients verify ledger inclusion through Merkle proofs. A traceable anonymous attestation signature conceals the uploader\u2019s cryptographic identity from ordinary ledger observers while retaining regulator-assisted accountability. The security analysis establishes integrity, conditional anonymity, traceability, and metadata-privacy properties for committed attestations under the stated trust assumptions, and the prototype evaluation reports the measured costs of GBFPlus and the signature operations.<\/jats:p>","DOI":"10.3390\/e28090947","type":"journal-article","created":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T14:49:34Z","timestamp":1787582974000},"page":"947","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Privacy-Preserving On-Chain Attestation for Cross-Domain Data Flows via GBFPlus"],"prefix":"10.3390","volume":"28","author":[{"given":"Sihang","family":"Qin","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weiqi","family":"Dai","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"},{"name":"Hubei Key Laboratory of Distributed System Security, Huazhong University of Science and Technology, Wuhan 430074, China"},{"name":"Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, Wuhan 430074, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yiming","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4390-3819","authenticated-orcid":false,"given":"Weizhong","family":"Qiang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"},{"name":"Hubei Key Laboratory of Distributed System Security, Huazhong University of Science and Technology, Wuhan 430074, China"},{"name":"Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, Wuhan 430074, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,8,23]]},"reference":[{"key":"#cr-split#-ref_1.1","unstructured":"European Parliament and Council of the European Union (2016). Regulation"},{"key":"#cr-split#-ref_1.2","unstructured":"(EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). Off. J. Eur. Union, L 119, 1-88."},{"key":"ref_2","unstructured":"(2022). Declaration on Government Access to Personal Data Held by Private Sector Entities (Standard No. OECD\/LEGAL\/0487)."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1007\/BF00196791","article-title":"How to Time-Stamp a Digital Document","volume":"3","author":"Haber","year":"1991","journal-title":"J. Cryptol."},{"key":"ref_4","first-page":"1","article-title":"Bitcoin: A Peer-to-Peer Electronic Cash System","volume":"21260","author":"Nakamoto","year":"2008","journal-title":"Decentralized Bus. Rev."},{"key":"ref_5","unstructured":"Karypis, G., and Zhang, J. (2017). An Overview of Blockchain Technology: Architecture, Consensus, and Future Trends. Proceedings of the 2017 IEEE International Congress on Big Data, BigData Congress 2017, Honolulu, HI, USA, 25\u201330 June 2017, IEEE."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1016\/j.tele.2018.11.006","article-title":"A systematic literature review of blockchain-based applications: Current status, classification and open issues","volume":"36","author":"Casino","year":"2019","journal-title":"Telemat. Inform."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1016\/j.diin.2019.01.002","article-title":"Forensic-chain: Blockchain based digital forensics chain of custody with PoC in Hyperledger Composer","volume":"28","author":"Lone","year":"2019","journal-title":"Digit. Investig."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Liang, X., Shetty, S., Tosh, D.K., Kamhoua, C.A., Kwiat, K.A., and Njilla, L. (2017, January 14\u201317). ProvChain: A Blockchain-based Data Provenance Architecture in Cloud Environment with Enhanced Privacy and Availability. Proceedings of the 17th IEEE\/ACM International Symposium on Cluster, Cloud and Grid Computing, CCGRID 2017, Madrid, Spain.","DOI":"10.1109\/CCGRID.2017.8"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1109\/MCOM.2018.1800137","article-title":"Block4Forensic: An Integrated Lightweight Blockchain Framework for Forensics Applications of Connected Vehicles","volume":"56","author":"Cebe","year":"2018","journal-title":"IEEE Commun. Mag."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Akbarfam, A.J., Heidaripour, M., Maleki, H., Dorai, G., and Agrawal, G. (2023, January 1\u20134). ForensiBlock: A Provenance-Driven Blockchain Framework for Data Forensics and Auditability. Proceedings of the 5th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications, TPS-ISA 2023, Atlanta, GA, USA.","DOI":"10.1109\/TPS-ISA58951.2023.00025"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1874","DOI":"10.1109\/TKDE.2023.3321712","article-title":"Anonymous, Secure, Traceable, and Efficient Decentralized Digital Forensics","volume":"36","author":"Li","year":"2024","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_12","unstructured":"Akbarfam, A.J., and Maleki, H. (2024, January 26\u201330). SOK: Blockchain for Provenance. Proceedings of the Workshops at the 50th International Conference on Very Large Data Bases, VLDB 2024, Guangzhou, China."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"26778","DOI":"10.1109\/JIOT.2023.3329577","article-title":"Blockchain-Assisted Cross-Domain Data Sharing in Industrial IoT","volume":"11","author":"Zeng","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"3892","DOI":"10.1109\/TIFS.2024.3372806","article-title":"Blockchain-Based Secure Cross-Domain Data Sharing for Edge-Assisted Industrial Internet of Things","volume":"19","author":"Wang","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"2489","DOI":"10.1109\/TSC.2025.3603155","article-title":"A Blockchain-Based Cross-Domain Data Transmission Scheme for Industrial Internet of Things with Edge-Cloud Computing","volume":"18","author":"Chen","year":"2025","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Jiang, J., Pei, T., Chen, J., and Hou, Z. (2025). CDAS: A Secure Cross-Domain Data Sharing Scheme Based on Blockchain. Information, 16.","DOI":"10.3390\/info16050394"},{"key":"ref_17","first-page":"104128","article-title":"PECD-DSIIoT: Privacy-enhanced cross-domain data sharing scheme for IIoT","volume":"93","author":"Yang","year":"2025","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"111652","DOI":"10.1016\/j.comnet.2025.111652","article-title":"Blockchain-based cross-domain IoT data sharing: A lightweight, secure edge-assisted approach","volume":"272","author":"Liu","year":"2025","journal-title":"Comput. Netw."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"100126","DOI":"10.1016\/j.bcra.2023.100126","article-title":"Blockchain-based cross-domain authorization system for user-centric resource sharing","volume":"4","author":"Ezawa","year":"2023","journal-title":"Blockchain Res. Appl."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"101878","DOI":"10.1016\/j.pmcj.2024.101878","article-title":"Blockchain-based access control architecture for multi-domain environments","volume":"98","author":"Du","year":"2024","journal-title":"Pervasive Mob. Comput."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"47481","DOI":"10.1109\/JIOT.2025.3601211","article-title":"BCPA: A Blockchain-Based Cross-Domain Privacy-Preserving Authentication Scheme in Internet of Things Environments","volume":"12","author":"Wang","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"ref_22","first-page":"2531","article-title":"Cross-Domain Data Traceability Mechanism Based on Blockchain","volume":"76","author":"Zhao","year":"2023","journal-title":"Comput. Mater. Contin."},{"key":"ref_23","first-page":"257","article-title":"Group Signatures","volume":"Volume 547","author":"Chaum","year":"1991","journal-title":"Advances in Cryptology\u2014EUROCRYPT \u201991, Workshop on the Theory and Application of Cryptographic Techniques, Proceedings, Brighton, UK, 8\u201311 April 1991"},{"key":"ref_24","first-page":"41","article-title":"Short Group Signatures","volume":"Volume 3152","author":"Boneh","year":"2004","journal-title":"Proceedings of the Advances in Cryptology\u2014CRYPTO 2004, 24th Annual International CryptologyConference, Santa Barbara, CA, USA, 15\u201319 August 2004, Proceedings"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"10821","DOI":"10.1109\/TII.2023.3241618","article-title":"BE-TRDSS: Blockchain-Enabled Secure and Efficient Traceable-Revocable Data-Sharing Scheme in Industrial Internet of Things","volume":"19","author":"Ma","year":"2023","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"111117","DOI":"10.1016\/j.comnet.2025.111117","article-title":"Efficient and secure cross-domain data sharing scheme with traceability for Industrial Internet","volume":"260","author":"Luo","year":"2025","journal-title":"Comput. Netw."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"636","DOI":"10.1109\/TIFS.2024.3515797","article-title":"Privacy Passport: Privacy-Preserving Cross-Domain Data Sharing","volume":"20","author":"Chen","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"2440","DOI":"10.1109\/TC.2023.3251846","article-title":"Blockchain-Based Fair and Fine-Grained Data Trading with Privacy Preservation","volume":"72","author":"Xue","year":"2023","journal-title":"IEEE Trans. Comput."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1186\/s13677-023-00530-7","article-title":"Blockchain-cloud privacy-enhanced distributed industrial data trading based on verifiable credentials","volume":"13","author":"Fang","year":"2024","journal-title":"J. Cloud Comput."},{"key":"ref_30","first-page":"103866","article-title":"Towards accountable and privacy-preserving blockchain-based access control for data sharing","volume":"85","author":"Hu","year":"2024","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_31","unstructured":"Marchioro, N.G., Velegrakis, Y., Anantharaj, V., Foster, I.T., and Fiore, S. (2025). Trustworthy Provenance for Big Data Science: A Modular Architecture Leveraging Blockchain in Federated Settings. arXiv."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Goyal, V., Pandey, O., Sahai, A., and Waters, B. (November, January 30). Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the 13th ACM Conference on Computer and Communications Security, CCS 2006, Alexandria, VA, USA.","DOI":"10.1145\/1180405.1180418"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Bethencourt, J., Sahai, A., and Waters, B. (2007, January 20\u201323). Ciphertext-Policy Attribute-Based Encryption. Proceedings of the 2007 IEEE Symposium on Security and Privacy (S&P 2007), Oakland, CA, USA.","DOI":"10.1109\/SP.2007.11"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1109\/TDSC.2021.3130583","article-title":"Eunomia: Anonymous and Secure Vehicular Digital Forensics Based on Blockchain","volume":"20","author":"Li","year":"2023","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"531","DOI":"10.1016\/j.comnet.2014.08.023","article-title":"Distributing privacy policies over multimedia content across multiple online social networks","volume":"75","author":"Patsakis","year":"2014","journal-title":"Comput. Netw."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"3572","DOI":"10.1109\/TDSC.2022.3208934","article-title":"Go-Sharing: A Blockchain-Based Privacy-Preserving Framework for Cross-Social Network Photo Sharing","volume":"20","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"422","DOI":"10.1145\/362686.362692","article-title":"Space\/Time Trade-offs in Hash Coding with Allowable Errors","volume":"13","author":"Bloom","year":"1970","journal-title":"Commun. ACM"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Dong, C., Chen, L., and Wen, Z. (2013, January 4\u20138). When private set intersection meets big data: An efficient and scalable protocol. Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS\u201913, Berlin, Germany.","DOI":"10.1145\/2508859.2516701"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1109\/SURV.2011.031611.00024","article-title":"Theory and Practice of Bloom Filters for Distributed Systems","volume":"14","author":"Tarkoma","year":"2012","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Groth, J. (2016, January 8\u201312). On the Size of Pairing-Based Non-interactive Arguments. Proceedings of the Advances in Cryptology\u2014EUROCRYPT 2016\u201435th Annual International Conference on the Theory and Applications of Cryptographic Techniques Proceedings, Part II, Vienna, Austria.","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"ref_41","first-page":"46","article-title":"Scalable, transparent, and post-quantum secure computational integrity","volume":"2018","author":"Bentov","year":"2018","journal-title":"IACR Cryptol. EPrint Arch."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"3113","DOI":"10.1016\/j.dam.2007.12.010","article-title":"Pairings for cryptographers","volume":"156","author":"Galbraith","year":"2008","journal-title":"Discret. Appl. Math."},{"key":"ref_43","unstructured":"Paillier, P. (1999, January 2\u20136). Public-Key Cryptosystems Based on Composite Degree Residuosity Classes. Proceedings of the Advances in Cryptology\u2014EUROCRYPT \u201999, International Conference on the Theory and Application of Cryptographic Techniques, Prague, Czech Republic."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1007\/s00145-004-0314-9","article-title":"Short Signatures from the Weil Pairing","volume":"17","author":"Boneh","year":"2004","journal-title":"J. Cryptol."},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/BF00196725","article-title":"Efficient Signature Generation by Smart Cards","volume":"4","author":"Schnorr","year":"1991","journal-title":"J. Cryptol."},{"key":"ref_46","unstructured":"Fiat, A., and Shamir, A. (1986, January 11\u201315). How to Prove Yourself: Practical Solutions to Identification and Signature Problems. Proceedings of the Advances in Cryptology\u2014CRYPTO \u201986, Santa Barbara, CA, USA."}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/28\/9\/947\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,25]],"date-time":"2026-08-25T04:32:35Z","timestamp":1787632355000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/28\/9\/947"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,23]]},"references-count":47,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["e28090947"],"URL":"https:\/\/doi.org\/10.3390\/e28090947","relation":{},"ISSN":["1099-4300"],"issn-type":[{"value":"1099-4300","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,23]]}}}