Poster: Zero Trust Driven Architecture for Blockchain-Based Access Control Delegation

Granting access and controlling access rights for online services is challenging in a highly dynamic and large-scale systems. In particular, the secure propagation of access right delegation is a major issue. Many proposals present access control issues for large-scale systems, however, little attention has been given to flexible and secure delegation in such dynamic systems. This article presents an approach to address such a delegation issue for large-scale systems using blockchain technology. We propose a blockchain-based delegation model that employs, i) self-sovereign identity (SSI) for user/device authentication, and ii) a restricted yet flexibly propagatable delegation process using the sanitizable signature scheme without the need for a centralized system. The goal of our primitive is to propose a Zero Trust architecture for access control delegation. To demonstrate the feasibility of our proposed architecture, we evaluate the system execution time using a sanitizable signature within a hyperledger fabric network. This work is in progress to further evaluate the system's efficiency in delegating access rights.