Digital Document Management System with Distributed Permission Using Secret Sharing Scheme
김희민 · Seoul National University Open Repository (Seoul National University) · 2020
The use of digital documents is exploding around the world due to the improvement of productivity and the convenience of access and backup of data.Usually, digital documents are managed by a document management system (DMS) which provides access control of the documents with access permission (e.g., password or account).However, when a user who has permission for the documents can directly access the digital document, it can occur a serious security problem.For example, when a malicious attacker gets access permission of a digital document, the document is able to be leaked.In addition, when a user who has authority behaves maliciously for his own benefit, the digital document can be easily falsified by the user.To handle these issues, we propose a new digital document management system for the security of digital documents which distributes the access permissions of the digital document.The proposed system encrypts a digital document with a key and stores the encrypted document into Interplanetary File System(IPFS).In addition, to distribute access permission of the digital document, it manages the key via Shamir's secret sharing scheme and blockchain.We implement our proposed system using Golang on Linux and evaluate the system on local IPFS and Ethereum testnet.The experimental results show that the proposed system provides high security of the digital document with minor performance overhead compared with the existing system.