When dealing with cloud services, there are important security requirements that are highly recommended to be achieved, notably, access control. Cloud services have provided several mechanisms based on traditional solutions for access management. All have ultimately failed as forgery-proof methods. Reality is a word replete with unauthorized access breaches. Therefore, the need for new grounds for robust access management in cloud services is still urgently needed. In this paper, we stand on the blockchain technology to introduce the BC-ABAC as a reliable, flexible, transparent, and fine-grained access control that preserves user identity privacy and ensures accountability. To show the feasibility of the solution, we developed a prototype on a permissioned blockchain and we conducted some experiments to measure the scalability of the solution. Finally, we give a threat model analysis.

在处理云服务时，强烈建议实现一些重要的安全要求，特别是访问控制。云服务提供了多种基于传统访问管理解决方案的机制。所有这些最终都无法作为防伪方法。现实是一个充满未经授权访问漏洞的词。因此，仍然迫切需要为云服务中的稳健访问管理开辟新的基础。在本文中，我们站在区块链技术上，介绍 BC-ABAC 作为一种可靠、灵活、透明和细粒度的访问控制，可以保护用户身份隐私并确保问责制。为了展示解决方案的可行性，我们在许可区块链上开发了一个原型，并进行了一些实验来衡量解决方案的可扩展性。