An Intelligent Privacy-Preserving Access Control Framework for Cloud-Based Smart Contracts
Abstract
Cloud computing has become the preferred platform for deploying blockchain-enabled smart contracts because of its scalability and flexibility. However, existing access control mechanisms such as Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and conventional blockchain authentication expose sensitive user information during authentication, rely on static authorization policies, and lack intelligent mechanisms for detecting evolving cyber threats. This study proposes an Intelligent Privacy-Preserving Access Control Framework for Cloud-Based Smart Contracts that integrates Modified Groth16 Zero-Knowledge Proofs (ZKP), Secure Multi-Party Computation (SMPC), Trusted Execution Environments (TEE), Federated Learning, Differential Privacy, GraphSAGE Graph Neural Networks, Autoencoder-based anomaly detection, Proximal Policy Optimization (PPO), and Blockchain Smart Contracts. The framework enables credential-free authentication, confidential collaborative computation, adaptive authorization, intelligent threat detection, and immutable blockchain auditing without compromising user privacy. The proposed framework was implemented and evaluated using the CICIDS2017 cybersecurity dataset. Experimental results achieved 96.4% privacy preservation, 94.1% security strength, 99.0% execution integrity, 98.7% auditability, 90.3% scalability, 88.6% computational performance, 86.9% cost efficiency, 98.91% validation accuracy, 99.62% ROC-AUC, 94.90% Macro F1-Score, and an overall system fitness of 94.23%. Comparative evaluation against Hawk, Zether, Ekiden, and a Federated Learning-only IDS demonstrated superior performance across all evaluation metrics. The proposed framework therefore provides an intelligent, scalable, and privacy-preserving access control solution suitable for next-generation cloud-based smart contract systems.
Downloads
References
Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., & Zhang, L. (2016). Deep learning with differential privacy. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 308–318.
Ben-Sasson, E., Chiesa, A., Genkin, D., Tromer, E., & Virza, M. (2014). SNARKs for C: Verifying program executions succinctly and in zero knowledge. Advances in Cryptology – CRYPTO 2013, 90–108.
Boneh, D., Bünz, B., & Fisch, B. (2018). A survey of two verifiable delay functions. IACR Cryptology ePrint Archive, 2018, 601.
Costan, V., & Devadas, S. (2016). Intel SGX Explained. IACR Cryptology ePrint Archive, Report 2016/086.
Dwork, C. (2006). Differential privacy. Proceedings of the 33rd International Colloquium on Automata, Languages and Programming (ICALP 2006), 1–12.
Ferraiolo, D. F., Kuhn, D. R., & Chandramouli, R. (2001). Role-Based Access Control. Artech House.
Goldreich, O. (2004). Foundations of Cryptography: Volume 2 – Basic Applications. Cambridge University Press.
Goldwasser, S., Micali, S., & Rackoff, C. (1985). The knowledge complexity of interactive proof systems. SIAM Journal on Computing, 18(1), 186–208.
Goodfellow, I., Bengio, Y., & Courville, A. (2016). Deep Learning. MIT Press.
Groth, J. (2016). On the size of pairing-based non-interactive arguments. Advances in Cryptology – EUROCRYPT 2016, Lecture Notes in Computer Science, 9666, 305–326.
Gusmeroli, S., Piccione, S., & Rotondi, D. (2013). A capability-based security approach to manage access control in the Internet of Things. Mathematical and Computer Modelling, 58(5–6), 1189–1205.
Hamilton, W. L., Ying, Z., & Leskovec, J. (2017). Inductive representation learning on large graphs. Advances in Neural Information Processing Systems, 30, 1024–1034.
Hu, V. C., Ferraiolo, D., Kuhn, R., Schnitzer, A., Sandlin, K., Miller, R., & Scarfone, K. (2015). Guide to Attribute Based Access Control (ABAC) Definition and Considerations (NIST Special Publication 800-162). National Institute of Standards and Technology.
Kairouz, P., McMahan, H. B., Avent, B., et al. (2021). Advances and open problems in federated learning. Foundations and Trends in Machine Learning, 14(1–2), 1–210.
Lindell, Y., & Pinkas, B. (2009). Secure multiparty computation for privacy-preserving data mining. Journal of Privacy and Confidentiality, 1(1), 59–98.
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2017). Communication-efficient learning of deep networks from decentralized data. Proceedings of the 20th International Conference on Artificial Intelligence and Statistics (AISTATS), 1273–1282.
Menezes, A. J., van Oorschot, P. C., & Vanstone, S. A. (1996). Handbook of Applied Cryptography. CRC Press.
Russell, S., & Norvig, P. (2021). Artificial Intelligence: A Modern Approach (4th ed.). Pearson.
Sabt, M., Achemlal, M., & Bouabdallah, A. (2015). Trusted execution environment: What it is, and what it is not. In 2015 IEEE Trustcom/BigDataSE/ISPA (Vol. 1, pp. 57–64). IEEE.
Sandhu, R. S., Coyne, E. J., Feinstein, H. L., & Youman, C. E. (1996). Role-based access control models. IEEE Computer, 29(2), 38–47. https://doi.org/10.1109/2.485845
Schulman, J., Wolski, F., Dhariwal, P., Radford, A., & Klimov, O. (2017). Proximal policy optimization algorithms. arXiv preprint arXiv:1707.06347.
Sharafaldin, I., Lashkari, A. H., & Ghorbani, A. A. (2018). Toward generating a new intrusion detection dataset and intrusion traffic characterization. Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP 2018), 108–116.
Stallings, W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson.
Wu, Z., Pan, S., Chen, F., Long, G., Zhang, C., & Yu, P. S. (2021). A comprehensive survey on graph neural networks. IEEE Transactions on Neural Networks and Learning Systems, 32(1), 4–24.
Yao, A. C. (1982). Protocols for secure computations. In Proceedings of the 23rd Annual Symposium on Foundations of Computer Science (pp. 160–164). IEEE.
Zcash Foundation. (2023). Zcash protocol specification.
The authors and co-authors warrant that the article is their original work, does not infringe any copyright, and has not been published elsewhere. By submitting the article to GPH-International Journal of Computer Science and Engineering (GPH-IJCSE), the authors agree that the journal has the right to retract or remove the article in case of proven ethical misconduct.
