TY - GEN
T1 - MARTSIA: Enabling Data Confidentiality for Blockchain-based Process Execution
AU - Marangone, Edoardo
AU - Di Ciccio, Claudio
AU - Friolo, Daniele
AU - Nemmi, Eugenio Nerio
AU - Venturi, Daniele
AU - Weber, Ingo
PY - 2023/10
Y1 - 2023/10
N2 - Multi-party business processes rely on the collaboration of various players in a decentralized setting. Blockchain technology can facilitate the automation of these processes, even in cases where trust among participants is limited. Transactions are stored in a ledger, a replica of which is retained by every node of the blockchain network. The operations saved thereby are thus publicly accessible. While this enhances transparency, reliability, and persistence, it hinders the utilization of public blockchains for process automation as it violates typical confidentiality requirements in corporate settings. In this paper, we propose MARTSIA: A Multi-Authority Approach to Transaction Systems for Interoperating Applications. MARTSIA enables precise control over process data at the level of message parts. Based on Multi-Authority Attribute-Based Encryption (MA-ABE), MARTSIA realizes a number of desirable properties, including confidentiality, transparency, and auditability. We implemented our approach in proof-of-concept prototypes, with which we conduct a case study in the area of supply chain management. Also, we show the integration of MARTSIA with a state-of-the-art blockchain-based process execution engine to secure the data flow.
AB - Multi-party business processes rely on the collaboration of various players in a decentralized setting. Blockchain technology can facilitate the automation of these processes, even in cases where trust among participants is limited. Transactions are stored in a ledger, a replica of which is retained by every node of the blockchain network. The operations saved thereby are thus publicly accessible. While this enhances transparency, reliability, and persistence, it hinders the utilization of public blockchains for process automation as it violates typical confidentiality requirements in corporate settings. In this paper, we propose MARTSIA: A Multi-Authority Approach to Transaction Systems for Interoperating Applications. MARTSIA enables precise control over process data at the level of message parts. Based on Multi-Authority Attribute-Based Encryption (MA-ABE), MARTSIA realizes a number of desirable properties, including confidentiality, transparency, and auditability. We implemented our approach in proof-of-concept prototypes, with which we conduct a case study in the area of supply chain management. Also, we show the integration of MARTSIA with a state-of-the-art blockchain-based process execution engine to secure the data flow.
KW - Multi-Authority Attribute Based Encryption
KW - Distributed Ledger Technology
KW - InterPlanetary File System
U2 - 10.1007/978-3-031-46587-1_4
DO - 10.1007/978-3-031-46587-1_4
M3 - Conference contribution
SN - 978-3-031-46586-4
VL - 14367
T3 - Lecture Notes in Computer Science
SP - 58
EP - 76
BT - Enterprise Design, Operations, and Computing - 27th International Conference, EDOC 2023, Groningen, The Netherlands, October 30 - November 3, 2023, Proceedings
A2 - Proper, Henderik A.
A2 - Pufahl, Luise
A2 - Karastoyanova, Dimka
A2 - van Sinderen, Marten
A2 - Moreira, João L. R.
PB - Springer
ER -