Privacy-Preserving Data Management using Blockchains

Michael Mireku Kwakye

2024-08-21

Abstract:Privacy-preservation policies are guidelines formulated to protect data providers private data. Previous privacy-preservation methodologies have addressed privacy in which data are permanently stored in repositories and disconnected from changing data provider privacy preferences. This occurrence becomes evident as data moves to another data repository. Hence, the need for data providers to control and flexibly update their existing privacy preferences due to changing data usage continues to remain a problem. This paper proposes a blockchain-based methodology for preserving data providers private and sensitive data. The research proposes to tightly couple data providers private attribute data element to privacy preferences and data accessor data element into a privacy tuple. The implementation presents a framework of tightly-coupled relational database and blockchains. This delivers secure, tamper-resistant, and query-efficient platform for data management and query processing. The evaluation analysis from the implementation validates efficient query processing of privacy-aware queries on the privacy infrastructure.

Cryptography and Security,Databases

What problem does this paper attempt to address?

The main problem that this paper attempts to solve is the control and flexible update of data providers' privacy preferences during data storage and query processing. Specifically, the paper focuses on how to ensure the continuous protection and update of data providers' privacy preferences when data is transferred from one data warehouse to another or accessed by third - party users. Traditional methods usually only protect the privacy of statically stored data (i.e., "data at rest"), ignoring the dynamic change requirements of data providers' privacy preferences.

### Core Problems of the Paper
1. **Continuous Protection of Data Providers' Privacy Preferences**: When data is transferred from one warehouse to another or accessed by third parties, how to ensure that data providers' privacy preferences remain valid.
2. **Flexible Update of Privacy Preferences**: How to enable data providers to flexibly update their privacy preferences when needed to adapt to different data usage scenarios.
3. **Data Integrity and Privacy Protection**: How to ensure the integrity and privacy of data during transmission and storage, and prevent unauthorized access and tampering.

### Solutions
To solve the above problems, the paper proposes a blockchain - based privacy protection method. This method tightly couples the data provider's private attribute data, privacy preferences, and data visitor information into a privacy tuple and stores it on the blockchain platform, thereby achieving continuous protection and flexible update of privacy preferences. Specific contributions include:

- **Privacy Framework**: A privacy framework is introduced, enabling data providers to fully control their privacy preferences, and each change request needs to be verified by the data provider and the data collector.
- **Efficient Coupling Mechanism**: An efficient mechanism is proposed to tightly couple attribute data, data providers' privacy preferences, and data visitor information into a privacy tuple, and transmit and store it on an immutable data platform (such as blockchain) through an encrypted channel.
- **Combination of Relational Databases and Blockchain**: Efficient coupling between the relational database management system and the private blockchain platform is achieved, forming an encrypted secure data processing platform.
- **Dynamic Context - based Privacy Ontology**: A privacy ontology model based on dynamic context is introduced to describe privacy - related factors such as data providers' privacy preferences, user roles, and context specifications.

Through these innovations, the paper aims to provide a secure, tamper - proof, and query - efficient platform for managing and processing data providers' private and sensitive data.