BEAAS: Blockchain Enabled Attribute-Based Access Control as a Service

Abstract

We propose BEAAS, a cloud service for Attribute-Based Access Control (ABAC) with security guarantee provided through the use of blockchain, specifically Ethereum. It enables user organizations to verify whether its access control data as well as access mediation decisions made by the cloud service were indeed done in an authorized manner. All the changes to the various ABAC components and access history are added to the Ethereum blockchain using efficiently written smart contracts in Solidity. We have developed a prototype system on the Rinkeby Ethereum test network and verified its functionality.