TY - GEN
T1 - Blockchain as an Audit-Able Communication Channel
AU - Suzuki, Shigeya
AU - Murai, Jun
N1 - Publisher Copyright:
© 2017 IEEE.
PY - 2017/9/7
Y1 - 2017/9/7
N2 - Applications requiring strict access control, such as medical record query, often require auditing of the query. The current typical design relies on server side logging. However, logging on server-side do not provide strict means of auditing, since the server can be tampered with attackers, and also anybody who has permission to write can modify the log. We propose a scheme using blockchain technology, as a request-response channel for a client-server system, to record both client request and server reply in an audi-table manner. We have implemented a proof-of-concept system on top of a publicly available blockchain testbed. By using a blockchain as a client-server request-response channel, the request-response sequence can be verified by anybody who has access to the blockchain, providing a way to implement audit log for strictly controlled resources.
AB - Applications requiring strict access control, such as medical record query, often require auditing of the query. The current typical design relies on server side logging. However, logging on server-side do not provide strict means of auditing, since the server can be tampered with attackers, and also anybody who has permission to write can modify the log. We propose a scheme using blockchain technology, as a request-response channel for a client-server system, to record both client request and server reply in an audi-table manner. We have implemented a proof-of-concept system on top of a publicly available blockchain testbed. By using a blockchain as a client-server request-response channel, the request-response sequence can be verified by anybody who has access to the blockchain, providing a way to implement audit log for strictly controlled resources.
KW - audit
KW - blockchain
KW - secure logging
UR - http://www.scopus.com/inward/record.url?scp=85032867530&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85032867530&partnerID=8YFLogxK
U2 - 10.1109/COMPSAC.2017.72
DO - 10.1109/COMPSAC.2017.72
M3 - Conference contribution
AN - SCOPUS:85032867530
T3 - Proceedings - International Computer Software and Applications Conference
SP - 516
EP - 522
BT - Proceedings - 2017 IEEE 41st Annual Computer Software and Applications Conference Workshops, COMPSAC 2017
A2 - Demartini, Claudio
A2 - Yang, Ji-Jiang
A2 - Ahamed, Sheikh Iqbal
A2 - Conte, Thomas
A2 - Akiyama, Toyokazu
A2 - Reisman, Sorel
A2 - Takakura, Hiroki
A2 - Hasan, Kamrul
A2 - Claycomb, William
A2 - Nakamura, Motonori
A2 - Tovar, Edmundo
A2 - Zhang, Zhiyong
A2 - Liu, Ling
A2 - Lung, Chung-Horng
A2 - Cimato, Stelvio
PB - IEEE Computer Society
T2 - 41st IEEE Annual Computer Software and Applications Conference Workshops, COMPSAC 2017
Y2 - 4 July 2017 through 8 July 2017
ER -