Trustless blockchain-based access control in dynamic collaboration

AC (Access Control) is the process of ensuring that an authenticated user accesses only what he or she is authorized to do with respect to certain models and security policies. In business collaboration systems, services are designed to conduct actions requested by a customer, using service provider’s infrastructure. In such context, the agreement on a conventional access management system is difficult because it will depend on different infrastructures and security policies implemented by each involved party. In this paper, we investigate the authorization process that manages permissions and rights of access to shared services in a federation of enterprises and we propose a solution based on the Ethereum Blockchain platform and the Attribute Based Access Control Model (ABAC) to define this authorization process.