Multi-Committee ABE Based Decentralized Access Control With Sharding Blockchain for Web 3.0
In Web 3.0’s pursuit of a decentralized and user-autonomous network, traditional access control methods, such as central servers and weak decentralized algorithms, are insufficient regarding security, fault tolerance ability, and scalability. To solve this, we first design a decentralized multi-committee attribute-based encryption, X-ABE, to address the weak decentralization and low fault tolerance in Multi-Authority Attribute-Based Encryption (MA-ABE). X-ABE replaces MA-ABE’s fragile attribute authorities with robust attribute committees, each composed of multiple nodes. By developing dual-wrapped shares techniques, we address the increased dimensionality challenge of secret sharing while maintaining only 1 distributed key generation instance. Also, a formal security definition and proof under the partial adaptive model are given using dual system encryption. Second, X-LOCK, an X-ABE based decentralized access control utilizing consensus plus sharding, is proposed for Web 3.0, to achieve full decentralization, consistency, fault tolerance, user autonomy, and scalability. Third, X-ABE-R is proposed for attribute revocation and is demonstrated in X-LOCK-R with sharding blockchain as an immutable revocation ledger. Fourth, a formal definition and comparative analysis of X-ABE’s fault tolerance abilities are demonstrated, covering aspects of liveness and safety, along with the complexity analysis. Fifth, practical evaluations are conducted, demonstrating that while improving fault tolerance, the overhead remains acceptable.
Authors
- Yizhong Liu (ORCID: https://orcid.org/0000-0002-6129-3260)
- Qianhong Wu (ORCID: https://orcid.org/0000-0002-6407-4194)
- Willy Susilo (ORCID: https://orcid.org/0000-0002-1562-5105)
- Dongyu Li (ORCID: https://orcid.org/0000-0001-8338-0536)
- Xinxin Xing (ORCID: https://orcid.org/0000-0003-3271-5847)
- Yuan Lu (ORCID: https://orcid.org/0000-0002-2765-1140)
- Zhenyu Guan (ORCID: https://orcid.org/0000-0002-3959-338X)
- Dawei Li (ORCID: https://orcid.org/0000-0003-1548-2666)
Institutions
- Chinese Academy of Sciences (CN)
- University of Wollongong (AU)
- Institute of Software (CN)
- Beihang University (CN)
Publication Details
- Journal
- IEEE Transactions on Dependable and Secure Computing
- Published
- 2024-12-19
- DOI
- https://doi.org/10.1109/tdsc.2024.3520121
- Citations
- 1
- Primary Topic
- Access Control and Trust
- Type
- article
- Field-Weighted Citation Impact
- 1.13
Funders
- National Natural Science Foundation of China