Michael P Andersen and John Kolb and Kaifei Chen and Gabriel Fierro and David E. Culler and Raluca Ada Popa

EECS Department, University of California, Berkeley

Technical Report No. UCB/EECS-2017-234

December 29, 2017

http://www2.eecs.berkeley.edu/Pubs/TechRpts/2017/EECS-2017-234.pdf

Authorization is a crucial security component of many distributed systems handling sensitive data or actions, including IoT systems. We present the design of a fully decentralized authorization system, WAVE, that operates at a global scale providing fine-grained permissions, non-interactive delegation and proofs of permission that can be efficiently verified, while still supporting revocation. Using smart contracts on a public blockchain, it allows rich and complex policies to be expressed and is resistant to DoS attacks without relying on any central trusted parties. We also present a novel mechanism for protecting the secrecy of resources on the public blockchain, without out-of-band channels or interaction between granters, provers or verifiers.

We implemented WAVE, which has now been running for over 500 days. We show that WAVE is efficient enough to support city-scale federation with millions of participants and permission policies.

---

BibTeX citation:

@techreport{Andersen:EECS-2017-234,
    Author= {Andersen, Michael P and Kolb, John and Chen, Kaifei and Fierro, Gabriel and Culler, David E. and Popa, Raluca Ada},
    Title= {WAVE: A Decentralized Authorization System for IoT via Blockchain Smart Contracts},
    Year= {2017},
    Month= {Dec},
    Url= {http://www2.eecs.berkeley.edu/Pubs/TechRpts/2017/EECS-2017-234.html},
    Number= {UCB/EECS-2017-234},
    Abstract= {Authorization is a crucial security component of many distributed systems handling sensitive data or actions, including IoT systems.
We present the design of a fully decentralized authorization system, WAVE, that operates at a global scale providing fine-grained permissions, non-interactive delegation and proofs of permission that can be efficiently verified, while still supporting revocation. Using smart contracts on a public blockchain, it allows rich and complex policies to be expressed and is resistant to DoS attacks without relying on any central trusted parties.  We also present a novel mechanism for protecting the secrecy of resources on the public blockchain, without out-of-band channels or interaction between granters, provers or verifiers.

We implemented WAVE, which has now been running for over 500 days. We show that WAVE is efficient enough to support city-scale federation with millions of participants and permission policies.},
}

EndNote citation:

%0 Report
%A Andersen, Michael P 
%A Kolb, John 
%A Chen, Kaifei 
%A Fierro, Gabriel 
%A Culler, David E. 
%A Popa, Raluca Ada 
%T WAVE: A Decentralized Authorization System for IoT via Blockchain Smart Contracts
%I EECS Department, University of California, Berkeley
%D 2017
%8 December 29
%@ UCB/EECS-2017-234
%U http://www2.eecs.berkeley.edu/Pubs/TechRpts/2017/EECS-2017-234.html
%F Andersen:EECS-2017-234