Multi-party business processes rely on the collaboration of various players in a decentralized setting. Blockchain technology can facilitate the automation of these processes, even in cases where trust among participants is limited. Transactions are stored in a ledger, a replica of which is retained by every node of the blockchain network. The operations saved thereby are thus publicly accessible. While this enhances transparency, reliability, and persistence, it hinders the utilization of public blockchains for process automation as it violates typical confidentiality requirements in corporate settings. In this paper, we propose MARTSIA: A Multi-Authority Approach to Transaction Systems for Interoperating Applications. MARTSIA enables precise control over process data at the level of message parts. Based on Multi-Authority Attribute-Based Encryption (MA-ABE), MARTSIA realizes a number of desirable properties, including confidentiality, transparency, and auditability. We implemented our approach in proof-of-concept prototypes, with which we conduct a case study in the area of supply chain management. Also, we show the integration of MARTSIA with a state-of-the-art blockchain-based process execution engine to secure the data flow.
翻译:多方业务流程依赖于各参与方在去中心化环境中的协作。区块链技术能够促进这些流程的自动化,即使在参与者之间信任有限的情况下也是如此。交易记录存储在账本中,区块链网络的每个节点都保留一份副本,由此保存的操作可被公开访问。虽然这增强了透明度、可靠性和持久性,但它阻碍了公有区块链在流程自动化中的应用,因为这种做法违背了企业环境中典型的保密性要求。在本文中,我们提出MARTSIA:一种面向互操作应用的多权威交易系统方法。MARTSIA能够在消息部分层面实现对流程数据的精确控制。基于多权威属性基加密(MA-ABE),MARTSIA实现了多项理想特性,包括保密性、透明性和可审计性。我们通过概念验证原型实现了该方法,并以此在供应链管理领域进行了案例研究。此外,我们还展示了MARTSIA与一款先进的基于区块链流程执行引擎的集成,以确保数据流的安全。