Blockchain-Based Privacy-Preserving Data Management

Authors

DOI:

https://doi.org/10.65879/3070-5789.2026.02.09

Keywords:

Privacy model, Privacy infrastructure, Blockchains, Privacy-preserving data management

Abstract

Privacy-preservation policies are guidelines formulated to protect data provider’s private data. Previous privacy-preservation methodologies have addressed privacy in which data are permanently stored in repositories and disconnected from changing data provider privacy preferences. This occurrence becomes evident as data moves to another data repository. Hence, the need for data providers to control and flexibly update their existing privacy preferences due to changing data usage continues to remain a problem. This paper proposes a blockchain-based methodology for preserving data provider’s private and sensitive data. The research proposes to tightly couple data provider’s private attribute data element to privacy preferences and data accessor data element into a privacy tuple. The implementation presents a framework of tightly-coupled relational database and blockchains. This delivers secure, tamper-resistant, and query-efficient platform for data management and query processing. The evaluation analysis from the implementation validates efficient query processing of privacy-aware queries on the privacy infrastructure. Moreover, a comparative analysis to other methodology approaches indicates that our approach offers efficient and better technique for data provider’s private data protection and identity preservation. 

References

[1] Mireku Kwakye, M. and Barker, K. (2024) ’Blockchain-based Privacy-Preservation Platform for Data Storage and Query Processing’, in Proceedings of the 3rd International Conference on Ubiquitous Security (UbiSec-2023)’, March 2024, Exeter, UK. Communications in Computer and Information Science, vol 2034. Springer, Singapore.

https://doi.org/10.1007/978-981-97-1274-8_25

[2] Zakerzadeh H., Aggarwal, C. C., Barker, K. (2015) ’Privacy-Preserving Big Data Publishing’, in Proceedings of the 27th International Conference on Scientific and Statistical Database Management (SSDBM 2015)’, pp. 1–11, La Jolla, CA, USA.

https://doi.org/10.1145/2791347.2791380

[3] Sweeney, L. (2002) ’k-Anonymity: A Model for Protecting Privacy’, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, Vol. 10, No. 5, pp.557–570

https://doi.org/10.1142/S0218488502001648

[4] Machanavajjhala, A., Gehrke, J., Kifer, D., Venkitasubramaniam, M. (2006) ’l-Diversity: Privacy Beyond k-Anonymity’, in Proceedings of the 22nd International Conference on Data Engineering, pp. 24, Atlanta, Georgia, USA

https://doi.org/10.1109/ICDE.2006.1

[5] Dwork, C. (2006) ’Differential Privacy’, in Proceedings of the 33rd International Colloquium on Automata, Languages and Programming, Part II (ICALP 2006), pp. 1–12, Venice, Italy

[6] Aggarwal, C. C. and Yu, P. S. (2004) ’A Condensation Approach to Privacy Preserving Data Mining’, in: Proceedings of the 9th International Conference on Extending Database Technology (EDBT 2004), March 2004, Heraklion, Greece, pp. 183-199.

https://doi.org/10.1007/978-3-540-24741-8_12

[7] Romano, D. and Schmid, G. (2017) ’Beyond Bitcoin - Part I: A Critical Look at Blockchain-Based Systems’, In: Journal of IACR Cryptology ePrint Archive, pp. 1164, vol. 2015, September 2017

[8] Aggarwal, C. C. and Yu, P. S. (2008) ’A General Survey of Privacy-Preserving Data Mining Models and Algorithms’, In: Privacy-Preserving Data Mining. Advances in Database Systems, pp. 11–52, vol. 34, Boston, Massachusett, USA

https://doi.org/10.1007/978-0-387-70992-5_2

[9] Agrawal, R. and Srikant, R. (2000) ’Privacy-Preserving Data Mining’, in: Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data (SIGMOD 2000), May 2000, Dallas, Texas, USA, pp. 439-450.

https://doi.org/10.1145/342009.335438

[10] Srikant, R. (2002) ’Privacy Preserving Data Mining: Challenges and Opportunities’, in: Proceedings of the 6th Pacific-Asia Conference on Advances in Knowledge Discovery and Data Mining (PAKDD 2002), May 2002, Taipei, Taiwan, pp. 13. Lecture Notes in Computer Science, vol. 2336, Springer.

https://doi.org/10.1007/3-540-47887-6_2

[11] Fienberg, S. E., McIntyre, J. (2004) ’Data Swapping: Variations on a Theme by Dalenius and Reiss’, in International Workshop on Privacy in Statistical Databases (PSD 2004), pp. 14–29, Barcelona, Spain

https://doi.org/10.1007/978-3-540-25955-8_2

[12] Bawany, N. Z., Shaikh, Z. A. (2017) ’Data Privacy Ontology for Ubiquitous Computing’, International Journal of Advanced Computer Science and Applications, Vol. 8, No. 1

https://doi.org/10.1007/978-3-540-25955-8_2

[13] arth, A., Datta, A., Mitchell, J. C., Nissenbaum, H. (2006) ’Privacy and Contextual Integrity: Framework and Applications’, In: IEEE Symposium on Security and Privacy (S&P 2006), pp. 184–198, Berkeley, California, USA

https://doi.org/10.1109/SP.2006.32

[14] Nissenbaum, H. (2010) ’Privacy in Context - Technology, Policy, and the Integrity of Social Life’, Stanford University Press, ISBN: 978-0-8047-5237-4, pp. I-XIV, 1-288

[15] Jafari, M., Safavi-Naini, R., and Sheppard, N. P. (2009) ’Enforcing Purpose of Use via Workflows’, in: Proceedings of the 8th ACM Workshop on Privacy in the Electronic Society (WPES 2009), November 2009, Chicago, Illinois, USA, pp. 113–116

https://doi.org/10.1145/1655188.1655206

[16] Zyskind, G., Nathan, O., and Pentland, A. (2015) ’Decentralizing Privacy: Using Blockchain to Protect Personal Data’, in: Proceedings of the 2015 IEEE Symposium on Security and Privacy Workshops (SPW 2015), May 2015, San Jose, CA, USA, pp. 180–184

https://doi.org/10.1109/SPW.2015.27

[17] Halpin, H. and Piekarska, M. (2017) ’Introduction to Security and Privacy on the Blockchain’, in: Proceedings of the 2017 IEEE European Symposium on Security and Privacy Workshops (EuroS&P Workshops 2017), April 2017, Paris, France, pp. 1–3

https://doi.org/10.1109/EuroSPW.2017.43

[18] Narendra Kumar, N. V. and Shyamasundar, R. K. (2014) ’Realizing Purpose-Based Privacy Policies Succinctly via Information-Flow Labels’, in: Proceedings of the 2014 IEEE Fourth International Conference on Big Data and Cloud Computing (BDCloud 2014), December 2014, Sydney, NSW, Australia, pp. 753–760

https://doi.org/10.1109/BDCloud.2014.89

[19] Tian, Y., Song, B., and Huh, E-N. (2009) ’A Purpose-Based Privacy-Aware System using Privacy Data Graph’, in: Proceedings of the 7th International Conference on Advances in Mobile Computing and Multimedia (MoMM 2009), December 2009, Kuala Lumpur, Malaysia, pp. 412–416

https://doi.org/10.1145/1821748.1821827

[20] van Staden, W. and Olivier, M. S. (2007) ’Using Purpose Lattices to Facilitate Customisation of Privacy Agreements’, in: Proceedings of the 4th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2007), September 2007, Regensburg, Germany, pp. 201–209

https://doi.org/10.1007/978-3-540-74409-2_22

[21] Jafari, M., Safavi-Naini, R., Fong, P. W. L., Barker, K. (2014) ’A Framework for Expressing and Enforcing Purpose-Based Privacy Policies’, ACM Transactions on Information Systems Security, Vol. 17, No. 1,3, pp.1–31

https://doi.org/10.1145/2629689

[22] Agrawal, R., Kiernan, J., Srikant, R., Xu, Y. (2002) ’Hippocratic Databases’, in: Proceedings of the 28th

International Conference on Very Large Data Bases (VLDB 2002), pp. 143–154, Hong Kong, China

https://doi.org/10.1016/B978-155860869-6/50021-4

[23] Barker, K., Askari, M., Banerjee, M., Ghazinour, K., Mackas, B., Majedi, M., Pun, S., Williams, A. (2009) ’A Data Privacy Taxonomy’, in: Proceedings of the 26th British National Conference on Databases (BNCOD 2009), pp.42–54, Birmingham, UK

https://doi.org/10.1007/978-3-642-02843-4_7

[24] Barker, K. (2015) ’Privacy Protection or Data Value: Can We Have Both?’ in: Proceedings of the 4th International Conference on Big Data Analytics, pp.3–20, Hyderabad, India

https://doi.org/10.1007/978-3-319-27057-9_1

[25] Baskaran, H., Yussof, S., Rahim, F. A. (2019) ’A Survey on Privacy Concerns in Blockchain Applications and Current Blockchain Solutions to Preserve Data Privacy’, in First International Conference on Advances in Cyber Security (ACeS 2019), pp. 3–17, Penang, Malaysia

https://doi.org/10.1007/978-981-15-2693-0_1

[26] McConaghy, T., Marques, R., Muller, A., De Jonghe, D., McConaghy, T. T., McMullen, G., Henderson, R., Bellemare, S., Granzotto, A. (2006) ’BigchainDB: A Scalable Blockchain Database’, White paper. ascribe GmbH, Berlin, Germany

[27] Daidone, F., Carminati, B., Ferrari, E. (2022) ’Blockchain-based Privacy Enforcement in the IoT domain’, IEEE Transactions on Dependable and Secure Computing, Vol. 19, No. 6, pp.1–1

https://doi.org/10.1109/TDSC.2021.3110181

[28] Fernandez, M., Jaimunk, J., Thuraisingham, B. (2019) ’Privacy-Preserving Architecture for Cloud-IoT Platforms’, in: IEEE International Conference on Web Services (ICWS 2019), pp.11–19, Milan, Italy

https://doi.org/10.1109/ICWS.2019.00015

[29] Griggs, K. N., Ossipova, O., Kohlios, C. P., Baccarini, A. N., Howson, E. A., Hayajneh, T. (2018) ’Healthcare Blockchain System Using Smart Contracts for Secure Automated Remote Patient Monitoring’, Journal of Medical Systems, Vol. 42, No. 7, pp.130

https://doi.org/10.1007/s10916-018-0982-x

[30] Stanford Center for Biomedical Informatics Research. Protégé Semantic Web Ontology, https://protege.stanford.edu

[31] Ghosh, S. S., Parmar, H., Shah, P., Samdani, K. (2018) ’A Comprehensive Analysis Between Popular Symmetric Encryption Algorithms’, in: Proceedings of the 1st International Conference on Data Science & Analytics (IEEE Punecon 2018), pp.1–7, Pune, India

https://doi.org/10.1109/PUNECON.2018.8745324

[32] Shabani, M. (2019) ’Blockchain-Based Platforms for Genomic Data Sharing: A De-centralized Approach in Response to the Governance Problems?’, Journal of the American Medical Informatics Association, Vol. 26, Iss. 1, pp. 76–80

https://doi.org/10.1093/jamia/ocy149

[33] Ajam, N., Cuppens-Boulahia, N., and Cuppens, F. (2009) ’Contextual Privacy Management in Extended Role Based Access Control Model’, in: Proceedings of the 4th International Workshop on Data Privacy Management and Autonomous Spontaneous Security and Second International Workshop (DPM/SETOP 2009), September 2009, St. Malo, France, pp. 121-135. Lecture Notes in Computer Science, vol. 5939. Springer, Berlin, Heidelberg

[34] Sridhar, N. and Zhao, W. (2014) ’An Ontology for Enforcing Security and Privacy Policies on Mobile Devices’, in: Proceedings of the 6th International Conference on Knowledge Engineering and Ontology Development (KEOD-2014), October 2014, Rome, Italy, pp. 288-295. vol. 2, no. 37. ISBN: 978-989-758-049-9.

[35] Zhang, N. and Todd, C. (2006) ’A Privacy Agent in Context-Aware Ubiquitous Computing Environments’, in: Proceedings of the 10th IFIP TC-6 TC-11 International Conference on Communications and Multimedia Security (CMS 2006), October 2006, Heraklion, Greece, pp.196–205. In: Leitold H., Markatos E.P. (Eds) Communications and Multimedia Security. Lecture Notes in Computer Science, vol. 4237. Springer, Berlin, Heidelberg.

https://doi.org/10.1007/11909033_18

[36] Hu, Y-J, Guo, H-Y, and Lin, G-D (2008) ’Semantic Enforcement of Privacy Protection Policies via the Combination of Ontologies and Rules’, in: Proceedings of the IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing (SUTC 2008), June 2008, Taichung, Taiwan, pp.400–407.

https://doi.org/10.1109/SUTC.2008.59

[37] Denker, G. and Martin, D. L. (2005) ’Using Rules to Define the Semantics of Privacy Policies’, W3C Workshop on Rule Languages for Interoperability (W3C 2005), April 2005, Washinton DC, USA

[38] Zhang, N. and Todd, C. (2009) ’Developing a Privacy Ontology for Privacy Control in Context-Aware Systems’, CiteSeerX -Penn State University

[39] MultiChain Blockchain Platform, https://www.multichain.com

[40] Chandra, S., Paira, S., Alam, Sk S., and Sanyal, G. (2014) ’A Comparative Survey of Symmetric and Asymmetric Key Cryptography’, in: Proceedings of the 2014 International Conference on Electronics, Communication and Computational Engineering (ICECCE 2014), 17-18 November 2014, Hosur, India, pp.83–93

https://doi.org/10.1109/ICECCE.2014.7086640

[41] Libsodium Documentation, https://libsodium.gitbook.io/doc/

[42] PHP Encryption with Libsodium, https://www.zend.com/blog/libsodium-and-php-encrypt

[43] Sagirlar G., Carminati, B., and Ferrari, E. (2018), ’Decentralizing privacy enforcement for Internet of Things smart objects’, Computer Networks, Vol. 143, pp.112–125

https://doi.org/10.1016/j.comnet.2018.07.019

Downloads

Published

2026-10-30

Issue

Section

Articles