Privacy-Preserving On-Chain Attestation for Cross-Domain Data Flows via GBFPlus

Le résumé fourni par la source

Cross-domain data flows are commonplace in regulated inter-organizational environments, where durable audit evidence must be retained without publicly exposing sensitive flow metadata. This paper presents a privacy-preserving on-chain attestation framework for recorded cross-domain data transfers in a permissioned setting. Its core data structure, termed GBFPlus, extends the Garbled Bloom Filter (GBF) with explicit occupancy indicators, constrained payloads that encode a consistency prefix and an adjacent-domain identifier, and distinct pairing-derived positions. Each domain administrator records observed inbound and outbound transfers in directional GBFPlus instances and periodically commits signed filter attestations to an append-only ledger. An authorized regulator can reconstruct candidate transfer edges from available bilateral attestations, while light clients verify ledger inclusion through Merkle proofs. A traceable anonymous attestation signature conceals the uploader’s cryptographic identity from ordinary ledger observers while retaining regulator-assisted accountability. The security analysis establishes integrity, conditional anonymity, traceability, and metadata-privacy properties for committed attestations under the stated trust assumptions, and the prototype evaluation reports the measured costs of GBFPlus and the signature operations.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.