Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management

doi:10.1109/JIOT.2023.3285211

科研成果详情

题名	Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management
作者	Wang，Lipeng 1,2; Guan，Zhi 1; Chen，Zhong 1; Hu，Mingsheng 2
发表日期	2023-12-01
发表期刊	IEEE Internet of Things Journal
卷号	10 期号:23 页码:20955-20968
摘要	The general data protection regulation (GDPR) is a European Union (EU) data protection and privacy law. According to the GDPR, the data on a hosting platform must meet semantic consistency and data integrity requirements. Semantic consistency means that the data operation should comply with the GDPR, while data integrity is meant to ensure that the outsourcing data should be intact. The two terms are not interchangeable. For example, if a cloud service provider migrates data to foreign storage nodes without authorization of the data owner, the data integrity requirement of the GDPR is met but the semantic consistency requirement is not. How to ensure data integrity and compliance is the main challenge for a GDPR-compliant data supervision platform. To achieve this aim, we leverage a blockchain-based data management framework to check the data compliance, which can break the black box of the data hosting platform and demonstrate its logic to data owners, allowing for inspection. We propose a new provable data possession (PDP) scheme for the aforementioned framework that can check for semantic consistency and data integrity simultaneously. The verifier does not need to hold any audited data, which can reduce bandwidth usage. The verification result can be regarded as the proof for subsequent data recovery and accountability. Experimental results show higher efficiency of the PDP scheme.
关键词	Blockchain data compliance data integrity general data protection regulation (GDPR) provable data possession (PDP)
DOI	10.1109/JIOT.2023.3285211
URL	查看来源
语种	英语English
Scopus入藏号	2-s2.0-85162634929
引用统计
文献类型	期刊论文
条目标识符	https://repository.uic.edu.cn/handle/39GCC9TT/13456
专题	个人在本单位外知识产出
通讯作者	Wang，Lipeng
作者单位	1.Peking University,School of Computer Science,Beijing,100871,China 2.Zhengzhou Normal University,School of Information Science and Technology,Zhengzhou,450044,China
推荐引用方式 GB/T 7714	Wang，Lipeng,Guan，Zhi,Chen，Zhonget al. Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management[J]. IEEE Internet of Things Journal, 2023, 10(23): 20955-20968.
APA	Wang，Lipeng, Guan，Zhi, Chen，Zhong, & Hu，Mingsheng. (2023). Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management. IEEE Internet of Things Journal, 10(23), 20955-20968.
MLA	Wang，Lipeng,et al."Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management". IEEE Internet of Things Journal 10.23(2023): 20955-20968.