Blockchain based Resource Governance for Decentralized Web Environments

TL;DR

This paper proposes ReGov, a resource governance framework for decentralized web environments that uses blockchain and trusted execution environments to enforce data usage policies and ensure compliance.

Contribution

It introduces a novel resource governance framework combining blockchain and trusted execution environments for usage control in decentralized web platforms.

Findings

Framework effectively records and enforces usage policies.

Analysis shows strong security and privacy properties.

Assessment indicates affordability and practical feasibility.

Abstract

Decentralization initiatives such as Solid and ActivityPub aim to give data owners more control over their data and to level the playing field by enabling small companies and individuals to gain access to data, thus stimulating innovation. However, these initiatives typically employ access control mechanisms that cannot verify compliance with usage conditions after access has been granted to others. In this paper, we extend the state of the art by proposing a resource governance conceptual framework, entitled ReGov, that facilitates usage control in decentralized web environments. We subsequently demonstrate how our framework can be instantiated by combining blockchain and trusted execution environments. Through blockchain technologies, we record policies expressing the usage conditions associated with resources and monitor their compliance. Our instantiation employs trusted execution environments to enforce said policies, inside data consumers' devices.} We evaluate the framework instantiation through a detailed analysis of requirements derived from a data market motivating scenario, as well as an assessment of the security, privacy, and affordability aspects of our proposal.