Although the development of centralized web-based platforms have brought about economic and societal benefits, such platforms have also resulted in the concentration of power in a small number of web stakeholders. Decentralization initiatives, such as Solid and ActivityPub, aim to give data owners more control over their data and to level the playing field by enabling small companies and individuals to gain access to data thus stimulating innovation. However, these initiatives typically employ access control mechanisms that cannot verify compliance with usage conditions after access has been granted to others. Thus, in this paper, we extend the state of the art by proposing a resource governance conceptual framework, entitled ReGov, that facilitates usage control in decentralized web environments. We subsequently demonstrate how our framework can be instantiated by combining blockchain and trusted execution environments. Additionally, we evaluate its effectiveness through a detailed analysis of requirements derived from a data market motivating scenario, as well as an assessment of the security, privacy, and affordability aspects of our proposal.
翻译:尽管集中式网络平台的发展带来了经济和社会效益,但此类平台也导致了权力集中在少数网络利益相关者手中。去中心化倡议(如Solid和ActivityPub)旨在赋予数据所有者对其数据的更多控制权,并通过使小型企业和个人能够访问数据来创造公平的竞争环境,从而激发创新。然而,这些倡议通常采用访问控制机制,无法在数据访问权授予他人后验证其是否遵守使用条件。因此,在本文中,我们通过提出一个名为ReGov的资源治理概念框架来扩展现有技术,该框架有助于在去中心化网络环境中实现使用控制。随后,我们展示了如何通过结合区块链和可信执行环境来实例化该框架。此外,我们通过对源自数据市场激励场景的需求进行详细分析,以及评估提案的安全性、隐私性和经济性,来验证该框架的有效性。