Individual-Initiated Auditable Access Control for Privacy-Preserved IoT Data Sharing with Blockchain

With the rapid development of sensors and IoT technology, personal health data can be collected and stored by various wearable devices and utilized for healthcare. To share and use sensitive health data securely and efficiently, a variety of solutions based on blockchain have been proposed and developed. However, there are still many issues to be solved, such as how to let individuals control and manage their own data, and how to make all data accesses strictly auditable. In this paper, we present a new model of Individual-Initiated Auditable Access Control (IIAAC) enabled with blockchain, CP-ABE (Ciphertext-Policy Attribute-Based Encryption) and IPFS (InterPlanetary File System). After introducing scenarios for sharing and use of health data, we define the design requirements for a blockchain-based system and describe the basic system architecture. We discuss the detailed procedures in IIAAC, including CP-ABE key generation, data publication and data retrieval. We further compare this study with related work in terms of functions and features.