sis 23(6):

Research Article

Smart - Contract Privacy Preservation Mechanism

Download176 downloads
  • @ARTICLE{10.4108/eetsis.3852,
        author={Muhammed Siraj and Mohd. Izuan Hafez Ninggal and Nur Izura Udzir and Muhammad Daniel Hafiz Abdullah and Aziah Asmawi},
        title={Smart - Contract Privacy Preservation Mechanism},
        journal={EAI Endorsed Transactions on Scalable Information Systems},
        keywords={blockchain, smart contract, authentication, transparent, decentralized, privacy-preservation, cloud, sensitive records, healthcare, encryption},
  • Muhammed Siraj
    Mohd. Izuan Hafez Ninggal
    Nur Izura Udzir
    Muhammad Daniel Hafiz Abdullah
    Aziah Asmawi
    Year: 2023
    Smart - Contract Privacy Preservation Mechanism
    DOI: 10.4108/eetsis.3852
Muhammed Siraj1,*, Mohd. Izuan Hafez Ninggal2, Nur Izura Udzir2, Muhammad Daniel Hafiz Abdullah2, Aziah Asmawi2
  • 1: Faculty of Computer Science & Information Technology
  • 2: Faculty of Computer Science & Information Technology, UPM, Serdang, Selangor, Malaysia
*Contact email:


Sensitive records stored in the cloud such as healthcare records, private conversation and credit card information are targets of hackers and privacy abuse. Current information and record management systems have difficulties achieving privacy protection of such sensitive records in a secure, transparent, decentralized and trustless environment. The Blockchain technology is a nascent and a promising technology that facilitates data sharing and access in a secure, decentralized and trustless environment. The technology enables the use of smart contracts that can be leveraged to complement existing traditional systems to achieve security objectives that were never possible before. In this paper, we propose a framework based on Blockchain technology to enable privacy-preservation in a secured, decentralized, transparent and trustless environment. We name our framework SmartCoAuth. It is based on Ethereum Smart Contract functions as the secure, decentralized, transparent authentication and authorization mechanism in the framework. It also enables tamper-proof auditing of access to the protected records. We analysed how SmartCoAuth could be integrated into a cloud application to provide reliable privacy-preservation among stakeholders of healthcare records stored in the cloud. The proposed framework provides a satisfactory level of data utility and privacy preservation.