Multi-party business processes rely on the collaboration of various players in a decentralized setting. Blockchain technology can facilitate the automation of these processes, even in cases where trust among participants is limited. Transactions are stored in a ledger, a replica of which is retained by every node of the blockchain network. The operations saved thereby are thus publicly accessible. While this enhances transparency, reliability, and persistence, it hinders the utilization of public blockchains for process automation as it violates typical confidentiality requirements in corporate settings. In this paper, we propose MARTSIA: A Multi-Authority Approach to Transaction Systems for Interoperating Applications. MARTSIA enables precise control over process data at the level of message parts. Based on Multi-Authority Attribute-Based Encryption (MA-ABE), MARTSIA realizes a number of desirable properties, including confidentiality, transparency, and auditability. We implemented our approach in proof-of-concept prototypes, with which we conduct a case study in the area of supply chain management. Also, we show the integration of MARTSIA with a state-of-the-art blockchain-based process execution engine to secure the data flow.
翻译:多方业务流程依赖于各参与方在去中心化环境中的协作。即使参与者之间信任有限,区块链技术也能促进这些流程的自动化。交易存储在分类账中,区块链网络的每个节点均保留其副本。由此保存的操作因此可被公开访问。虽然这增强了透明性、可靠性和持久性,但它阻碍了公有区块链在流程自动化中的应用,因为这违反了企业环境中典型的机密性要求。在本文中,我们提出MARTSIA:一种用于互操作应用的多权威交易系统方法。MARTSIA能够在消息部分级别上对流程数据进行精确控制。基于多权威属性基加密(MA-ABE),MARTSIA实现了多种理想特性,包括机密性、透明性和可审计性。我们在概念验证原型中实现了该方法,并以此在供应链管理领域进行了案例研究。此外,我们展示了MARTSIA与最新基于区块链的流程执行引擎的集成,以保障数据流的安全。