Abstract:Access control management is an integral part of maintaining the security of an application. Although there has been significant work in the field of cloud access control mechanisms, however, with the advent of Distributed Ledger Technology (DLT), on-chain access control management frameworks hardly exist. Existing access control management mechanisms are tightly coupled with the business logic, resulting in governance issues, non-coherent with existing Identity Management Solutions, low security, and compromised usability. We propose a novel framework to implement dynamic role-based access control for decentralized applications (dApps). The framework allows for managing access control on a dApp, which is completely decoupled from the business application and integrates seamlessly with any dApps. The smart contract architecture allows for the independent management of business logic and execution of access control policies. It also facilitates secure, low cost, and a high degree of flexibility of access control management. The proposed framework promotes decentralized governance of access control policies and efficient smart contract upgrades. We also provide quantitative and qualitative metrics for the efficacy and efficiency of the framework. Any Turing complete smart contract programming language is an excellent fit to implement the framework. We expect this framework to benefit enterprise and non-enterprise dApps and provide greater access control flexibility and effective integration with traditional and state of the art identity management solutions.

Dynamic Purpose-Based Access Control

A Task-Role Based Access Control Model with Multi-Constraints

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

Privacy-Aware Data Purpose Based Access Control for Relational Database

Kind of user behaviour trust and role based dynamic access control model

An Architecture Approach To Dynamic Policy In Rbac

A Privacy-Preserving Attribute-Based Access Control Scheme.

BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme

Relation-Based Access Control: an Access Control Model for Context-Aware Computing Environment

Dynamic Role-based Access Control for Web Services Using Context and Trust

Process-based Access Control Model

Multilevel Multi-policy Access Control Model for Collaborative Application

Context-Aware Risk Attribute Access Control

Reputation and Attribute Based Dynamic Access Control Framework in Cloud Computing Environment for Privacy Protection

A cloud-user behavior assessment based dynamic access control model

A Team-role-based Document Access Control Model

An efficient privacy‐enhanced attribute‐based access control mechanism

Dynamic Role-Based Access Control for Decentralized Applications

Extended Access Control Model Based on RBAC

A state-transfer-based dynamic policy approach for constraints in RBAC

Realization Method about Access Control of System Based on Web