Blockchain technology enforces the security, robustness, and traceability of operations of Process-Aware Information Systems (PAISs). In particular, transparency ensures that all data is publicly available, fostering trust among participants in the system. Although this is a crucial property to enable notarization and auditing, it hinders the adoption of blockchain in scenarios where confidentiality is required, as sensitive data is handled. Current solutions rely on cryptographic techniques or consortium blockchains, hindering the enforcement capabilities of smart contracts and the public verifiability of transactions. This work presents the CONFETTY open-source web application, a platform for public-blockchain based process execution that preserves data confidentiality and operational transparency. We use smart contracts to enact, enforce, and store public interactions, while we adopt attribute-based encryption techniques for fine-grained access to confidential information. This approach effectively balances the transparency inherent in public blockchains with the enforcement of the business logic.

翻译：区块链技术为流程感知信息系统（PAIS）的操作提供了安全性、鲁棒性和可追溯性保障。特别是其透明性确保了所有数据公开可用，从而增强了系统参与者之间的信任。尽管这一特性对于实现公证与审计至关重要，但在涉及处理敏感数据、需要保密性的场景中，却阻碍了区块链技术的应用。现有解决方案依赖于密码学技术或联盟链，这限制了智能合约的执行能力与交易的可公开验证性。本文介绍了开源Web应用程序CONFETTY，这是一个基于公有区块链的流程执行平台，能够在保持操作透明性的同时确保数据机密性。我们利用智能合约来制定、执行并存储公开交互，同时采用基于属性的加密技术实现对机密信息的细粒度访问控制。该方法有效平衡了公有区块链固有的透明性与业务逻辑的执行需求。