Access control is one of the fundamental security mechanisms of IT systems. Most existing access control schemes rely on a centralized party to manage and enforce access control policies. As blockchain technologies, especially permissioned networks, find more applicability beyond cryptocurrencies in enterprise solutions, it is expected that the security requirements will increase. Therefore, it is necessary to develop an access control system that works in a decentralized environment without compromising the unique features of a blockchain. A straightforward method to support access control is to deploy a firewall in front of the enterprise blockchain application. However, this approach does not take advantage of the desirable features of blockchain. In order to address these concerns, we propose a novel blockchain‐based access control scheme, which keeps the decentralization feature for access control–related operations. The newly proposed system also provides the capability to protect user's privacy by leveraging ring signature. We implement a prototype of the scheme using Hyperledger Fabric and assess its performance to show that it is practical for real‐world applications.

中文翻译：

---

企业区块链应用程序的基于区块链的访问控制

访问控制是IT系统的基本安全机制之一。大多数现有的访问控制方案都依靠一个集中的方来管理和执行访问控制策略。随着区块链技术（尤其是获许可的网络）在企业解决方案中发现除加密货币以外的更多适用性，预计安全性要求将会提高。因此，有必要开发一种在分散环境中工作而又不影响区块链独特功能的访问控制系统。支持访问控制的一种简单方法是在企业区块链应用程序的前面部署防火墙。但是，这种方法没有利用区块链的理想功能。为了解决这些问题，我们提出了一种新颖的基于区块链的访问控制方案，保留了与访问控制相关的操作的分散功能。新提出的系统还提供了通过利用环签名来保护用户隐私的功能。我们使用Hyperledger Fabric实施该方案的原型，并评估其性能，以表明它对实际应用是可行的。