Blockchain technology enforces the security, robustness, and traceability of operations of Process-Aware Information Systems (PAISs). In particular, transparency ensures that all data is publicly available, fostering trust among participants in the system. Although this is a crucial property to enable notarization and auditing, it hinders the adoption of blockchain in scenarios where confidentiality is required, as sensitive data is handled. Current solutions rely on cryptographic techniques or consortium blockchains, hindering the enforcement capabilities of smart contracts and the public verifiability of transactions. This work presents the CONFETTY open-source web application, a platform for public-blockchain based process execution that preserves data confidentiality and operational transparency. We use smart contracts to enact, enforce, and store public interactions, while we adopt attribute-based encryption techniques for fine-grained access to confidential information. This approach effectively balances the transparency inherent in public blockchains with the enforcement of the business logic.

翻译：区块链技术强化了流程感知信息系统（PAIS）操作的安全性、鲁棒性和可追溯性。其中，透明性确保所有数据公开可用，从而促进系统参与者之间的信任。尽管这一特性对实现公证和审计至关重要，但在处理敏感数据且需要保密性的场景中，它阻碍了区块链的应用。当前解决方案依赖密码学技术或联盟链，这削弱了智能合约的强制能力与交易的公开可验证性。本文提出CONFETTY开源Web应用——一个基于公有链的流程执行平台，在保持数据保密性的同时实现操作透明性。我们利用智能合约进行公共交互的制定、强制与存储，同时采用属性基加密技术实现对机密信息的细粒度访问。该方法有效平衡了公有链固有的透明性与业务逻辑的强制执行。