The Development of Blockchain-Based Access Control with a Decentralized XACML Approach: A Case Study on Payment Gateway
I Gede Arya Raditya Parameswara, Muhammad Zuhri Catur Candra · 2024
In the digital era, secure and reliable access control is essential, especially for financial transactions, which have shifted from traditional to digital platforms. Blockchain, through decentralization, ensures data integrity by permanently recording transactions that cannot be altered without consensus. This research applies Attribute-Based Access Control (ABAC) and integrates eXtensible Access Control Markup Language (XACML) to manage dynamic and adaptive access policies in a Blockchain-Based Access Control (BAC) system. Using a payment gateway case study, we developed a prototype involving three entities: merchant, attribute authority, and payment provider. The system, implemented on Hyperledger Fabric, uses a BRMS engine for complex decision-making. Test results demonstrate improved transaction integrity and auditability, showcasing the potential of blockchain and XACML to address the limitations of traditional access control systems in payment gateways.