PrivySharing: A blockchain-based framework for privacy-preserving and secure data sharing in smart cities

Makhdoom, I; Zhou, I; Abolhasan, M; Lipman, J; Ni, W

PrivySharing: A blockchain-based framework for privacy-preserving and secure data sharing in smart cities

Makhdoom, I

Zhou, I

Abolhasan, M

Lipman, J

Ni, W

Permalink

Publisher:: Elsevier
Publication Type:: Journal Article
Citation:: Computers and Security, 2020, 88
Issue Date:: 2020-01-01

Open Access

Copyright Clearance Process

Recently Added
In Progress
Open Access

This item is open access.

Adobe PDF

Download Acceptable ManuscriptAdobe PDF (4.91 MB)

View on publisher's site

View statistics

Full metadata record

Field	Value	Language
dc.contributor.author	Makhdoom, I https://orcid.org/0000-0002-6205-5897
dc.contributor.author	Zhou, I https://orcid.org/0000-0002-7154-4561
dc.contributor.author	Abolhasan, M https://orcid.org/0000-0002-4282-6666
dc.contributor.author	Lipman, J https://orcid.org/0000-0003-2877-1168
dc.contributor.author	Ni, W https://orcid.org/0000-0002-4933-594X
dc.date.accessioned	2021-03-28T22:27:15Z
dc.date.available	2021-03-28T22:27:15Z
dc.date.issued	2020-01-01
dc.identifier.citation	Computers and Security, 2020, 88
dc.identifier.issn	0167-4048
dc.identifier.issn	1872-6208
dc.identifier.uri	http://hdl.handle.net/10453/147586
dc.description.abstract	© 2019 Elsevier Ltd The ubiquitous use of Internet of Things (IoT) ranges from industrial control systems to e-Health, e-commerce, smart cities, agriculture, supply chain management, smart cars, cyber-physical systems and a lot more. However, the data collected and processed by IoT systems especially the ones with centralized control are vulnerable to availability, integrity, and privacy threats. Hence, we present “PrivySharing,” a blockchain-based innovative framework for privacy-preserving and secure IoT data sharing in a smart city environment. The proposed scheme is distinct from existing strategies on many aspects. The data privacy is preserved by dividing the blockchain network into various channels, where every channel comprises a finite number of authorized organizations and processes a specific type of data such as health, smart car, smart energy or financial details. Moreover, access to users’ data within a channel is controlled by embedding access control rules in the smart contracts. In addition, data within a channel is further isolated and secured by using private data collection and encryption respectively. Likewise, the REST API that enables clients to interact with the blockchain network has dual security in the form of an API Key and OAuth 2.0. The proposed solution conforms to some of the significant requirements outlined in the European Union General Data Protection Regulation. We also present a system of reward in the form of a digital token named “PrivyCoin” for users sharing their data with stakeholders/third parties. Lastly, the experimental outcomes advocate that a multi-channel blockchain scales well as compared to a single-channel blockchain system.
dc.language	English
dc.publisher	Elsevier
dc.relation.ispartof	Computers and Security
dc.relation.isbasedon	10.1016/j.cose.2019.101653
dc.rights	info:eu-repo/semantics/openAccess
dc.subject	08 Information and Computing Sciences
dc.subject.classification	Strategic, Defence & Security Studies
dc.title	PrivySharing: A blockchain-based framework for privacy-preserving and secure data sharing in smart cities
dc.type	Journal Article
utslib.citation.volume	88
utslib.for	08 Information and Computing Sciences
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
pubs.organisational-group	/University of Technology Sydney/Strength - CRIN - Realtime Information Networks
pubs.organisational-group	/University of Technology Sydney/Strength - GBDTC - Global Big Data Technologies
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology/School of Electrical and Data Engineering
utslib.copyright.status	open_access	*
pubs.consider-herdc	true
dc.date.updated	2021-03-28T22:27:12Z
pubs.publication-status	Published
pubs.volume	88

Abstract:

© 2019 Elsevier Ltd The ubiquitous use of Internet of Things (IoT) ranges from industrial control systems to e-Health, e-commerce, smart cities, agriculture, supply chain management, smart cars, cyber-physical systems and a lot more. However, the data collected and processed by IoT systems especially the ones with centralized control are vulnerable to availability, integrity, and privacy threats. Hence, we present “PrivySharing,” a blockchain-based innovative framework for privacy-preserving and secure IoT data sharing in a smart city environment. The proposed scheme is distinct from existing strategies on many aspects. The data privacy is preserved by dividing the blockchain network into various channels, where every channel comprises a finite number of authorized organizations and processes a specific type of data such as health, smart car, smart energy or financial details. Moreover, access to users’ data within a channel is controlled by embedding access control rules in the smart contracts. In addition, data within a channel is further isolated and secured by using private data collection and encryption respectively. Likewise, the REST API that enables clients to interact with the blockchain network has dual security in the form of an API Key and OAuth 2.0. The proposed solution conforms to some of the significant requirements outlined in the European Union General Data Protection Regulation. We also present a system of reward in the form of a digital token named “PrivyCoin” for users sharing their data with stakeholders/third parties. Lastly, the experimental outcomes advocate that a multi-channel blockchain scales well as compared to a single-channel blockchain system.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/147586