增强复杂供应链中的透明度和可追溯性:细粒度访问控制、准确性评估和安全存储

IF 3.8 2区 计算机科学 Q2 COMPUTER SCIENCE, INFORMATION SYSTEMS
Haihua Zhu , Yu Cheng , Xiuli Song , Yunlong Zhou , Fan Liu , Zigang Chen
{"title":"增强复杂供应链中的透明度和可追溯性:细粒度访问控制、准确性评估和安全存储","authors":"Haihua Zhu ,&nbsp;Yu Cheng ,&nbsp;Xiuli Song ,&nbsp;Yunlong Zhou ,&nbsp;Fan Liu ,&nbsp;Zigang Chen","doi":"10.1016/j.jisa.2025.104169","DOIUrl":null,"url":null,"abstract":"<div><div>With the growing public awareness of product safety, the demand for supply chain traceability and transparency has significantly increased. Ensuring product information traceability while enhancing transparency and fostering information sharing across all stages of the supply chain remains a critical challenge. To address this, we propose a transparency and traceability enhancement scheme for complex supply chains. To ensure data confidentiality, the scheme employs a hierarchical encryption mechanism for secure data sharing. A multi-party evaluation mechanism is introduced to assess the accuracy of uploaded information, preventing unreliable data from compromising overall trust. Additionally, to overcome issues such as decentralized data storage, difficult access, and low sharing efficiency, we integrate the InterPlanetary File System (IPFS) to improve data redundancy and mitigate single points of failure. A hybrid on-chain and off-chain storage approach is adopted for efficient data sharing. To further strengthen access control, we implement Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to enable fine-grained access control, ensuring that only authorized users can access the data. We validate our scheme on the Hyperledger Fabric platform and conduct performance evaluations using Hyperledger Caliper. Experimental results demonstrate that our scheme excels in traceability, privacy protection, and fine-grained access control, while maintaining high generalizability and scalability.</div></div>","PeriodicalId":48638,"journal":{"name":"Journal of Information Security and Applications","volume":"93 ","pages":"Article 104169"},"PeriodicalIF":3.8000,"publicationDate":"2025-07-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Enhancing transparency and traceability in complex supply chains: Fine-grained access control, accuracy evaluation, and secure storage\",\"authors\":\"Haihua Zhu ,&nbsp;Yu Cheng ,&nbsp;Xiuli Song ,&nbsp;Yunlong Zhou ,&nbsp;Fan Liu ,&nbsp;Zigang Chen\",\"doi\":\"10.1016/j.jisa.2025.104169\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><div>With the growing public awareness of product safety, the demand for supply chain traceability and transparency has significantly increased. Ensuring product information traceability while enhancing transparency and fostering information sharing across all stages of the supply chain remains a critical challenge. To address this, we propose a transparency and traceability enhancement scheme for complex supply chains. To ensure data confidentiality, the scheme employs a hierarchical encryption mechanism for secure data sharing. A multi-party evaluation mechanism is introduced to assess the accuracy of uploaded information, preventing unreliable data from compromising overall trust. Additionally, to overcome issues such as decentralized data storage, difficult access, and low sharing efficiency, we integrate the InterPlanetary File System (IPFS) to improve data redundancy and mitigate single points of failure. A hybrid on-chain and off-chain storage approach is adopted for efficient data sharing. To further strengthen access control, we implement Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to enable fine-grained access control, ensuring that only authorized users can access the data. We validate our scheme on the Hyperledger Fabric platform and conduct performance evaluations using Hyperledger Caliper. Experimental results demonstrate that our scheme excels in traceability, privacy protection, and fine-grained access control, while maintaining high generalizability and scalability.</div></div>\",\"PeriodicalId\":48638,\"journal\":{\"name\":\"Journal of Information Security and Applications\",\"volume\":\"93 \",\"pages\":\"Article 104169\"},\"PeriodicalIF\":3.8000,\"publicationDate\":\"2025-07-27\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of Information Security and Applications\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S2214212625002066\",\"RegionNum\":2,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Information Security and Applications","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S2214212625002066","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0

摘要

随着公众对产品安全意识的不断增强,对供应链可追溯性和透明度的需求显著增加。确保产品信息的可追溯性,同时提高透明度,促进供应链各个阶段的信息共享,仍然是一个关键的挑战。为了解决这个问题,我们提出了一个复杂供应链的透明度和可追溯性增强方案。为了确保数据的机密性,该方案采用了分层加密机制来安全共享数据。引入多方评估机制来评估上传信息的准确性,防止不可靠的数据损害整体信任。此外,为了克服数据存储分散、访问困难和共享效率低等问题,我们集成了星际文件系统(IPFS),以提高数据冗余并减轻单点故障。采用链上和链下混合存储方式实现高效的数据共享。为了进一步加强访问控制,我们实施了密文策略属性加密(cipher - policy Attribute-Based Encryption, CP-ABE)来实现细粒度的访问控制,确保只有授权用户才能访问数据。我们在Hyperledger Fabric平台上验证了我们的方案,并使用Hyperledger Caliper进行了性能评估。实验结果表明,该方案在可追溯性、隐私保护和细粒度访问控制方面表现优异,同时保持了较高的通用性和可扩展性。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Enhancing transparency and traceability in complex supply chains: Fine-grained access control, accuracy evaluation, and secure storage
With the growing public awareness of product safety, the demand for supply chain traceability and transparency has significantly increased. Ensuring product information traceability while enhancing transparency and fostering information sharing across all stages of the supply chain remains a critical challenge. To address this, we propose a transparency and traceability enhancement scheme for complex supply chains. To ensure data confidentiality, the scheme employs a hierarchical encryption mechanism for secure data sharing. A multi-party evaluation mechanism is introduced to assess the accuracy of uploaded information, preventing unreliable data from compromising overall trust. Additionally, to overcome issues such as decentralized data storage, difficult access, and low sharing efficiency, we integrate the InterPlanetary File System (IPFS) to improve data redundancy and mitigate single points of failure. A hybrid on-chain and off-chain storage approach is adopted for efficient data sharing. To further strengthen access control, we implement Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to enable fine-grained access control, ensuring that only authorized users can access the data. We validate our scheme on the Hyperledger Fabric platform and conduct performance evaluations using Hyperledger Caliper. Experimental results demonstrate that our scheme excels in traceability, privacy protection, and fine-grained access control, while maintaining high generalizability and scalability.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
Journal of Information Security and Applications
Journal of Information Security and Applications Computer Science-Computer Networks and Communications
CiteScore
10.90
自引率
5.40%
发文量
206
审稿时长
56 days
期刊介绍: Journal of Information Security and Applications (JISA) focuses on the original research and practice-driven applications with relevance to information security and applications. JISA provides a common linkage between a vibrant scientific and research community and industry professionals by offering a clear view on modern problems and challenges in information security, as well as identifying promising scientific and "best-practice" solutions. JISA issues offer a balance between original research work and innovative industrial approaches by internationally renowned information security experts and researchers.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信