ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing

Nabeel Z. Tawfeeq; Dujan B. Taha

doi:10.35377/saucis...1986038

ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing

Abstract

The implementation of the secure credential management systems requires the exchange and sharing of sensitive records along with the strict access control, confidentiality, and accountability requirements. However, the sharing of the credentials is associated with security and privacy concerns. While there are many blockchain solutions that enable immutable audit trails and decentralized trust, the existing approaches provide limited support for verifiable accountability and controlled decryption mechanisms that are needed for the secure handling of sensitive data. This paper proposes a novel framework called Accountable Confidential Trusted Access (ACTA) that offers verifiable accountable decryption and combines the use of blockchain and trusted execution environments (TEEs). In addition, ACTA incorporates Interplanetary File System (IPFS) for off-chain encrypted record storage and maintains its integrity validation with on-chain content identity identifier (CID) and cryptographic hash values. ACTA is based on the three-phase secure process, which includes the linkage of the access authorization, encrypted data, and enclave-execution of the decryption while storing the immutable audit records on the blockchain. Following a successful decryption operation, ACTA records verifiable evidence that an authenticated requester obtained the encrypted record bound to their authorization and that the operation was executed by a registered enclave, without publishing any value derived from the plaintext. Experimental results obtained with Hyperledger Caliper, averaged over four independent runs, indicate that ACTA sustains a peak of 16.82 TPS for certificate issuance and 16.45 TPS for the complete accountable-decryption workflow across offered loads from 2 to 25 TPS, with average end-to-end latency decreasing from 1212 to 295 ms and from 1092 to 222 ms, respectively, as the offered load increases. Storing ciphertext in IPFS reduces on-chain state growth while the accountable-decryption path remains within the same order of magnitude of latency as the issuance path. In addition, security analysis shows that ACTA is resilient to several types of attacks. The proposed framework provides a scalable solution for accountable decryption in blockchain systems without sacrificing confidentiality, integrity, or decentralized trust.

Keywords

Ethical Statement

This study does not involve human participants, animal subjects, or clinical experimentation requiring ethical committee approval. During the preparation of this study, scientific research and publication ethics principles were followed, and all utilized sources are properly cited in the bibliography.

Thanks

The authors would like to thank the University of Mosul, College of Computer Science and Mathematics, for research support during the preparation of this manuscript.

References

X. S. Shen et al., “Blockchain for transparent data management toward 6G,” Engineering, vol. 8, pp. 74–85, 2022, doi: 10.1016/j.eng.2021.10.002.
I. Rom´an-Mart´ınez, J. Calvillo-Arbizu, V. J. Mayor-Gallego, G. Madinabeitia-Luque, A. J. Estepa-Alonso, and R. M. Estepa-Alonso, “Blockchain-based service-oriented architecture for consent management, access control, and auditing,” IEEE Access, vol. 11, pp. 12 727–12 741, 2023, doi: 10.1109/ACCESS. 2023.3242605.
D. Paulin, R. Joud, C. Hennebert, P.-A. Mo¨ellic, T. Franco-Rondisson, and R. Jayles, “HistoTrust: Tracing AI behavior with secure hardware and blockchain technology,” Ann. Telecommun., vol. 78, no. 7–8, pp. 413–427, Aug. 2023, doi: 10.1007/s12243-022-00943-6.
M. Yuan, X. Li, X. Li, H. Tan, and J. Xu, “Trust hardware based secured privacy preserving computation system for three-dimensional data,” Electronics, vol. 10, no. 13, 2021, Art. no. 1546, doi: 10.3390/electronics10131546.
A. Ahmad, K. Kim, M. I. Sarfaraz, and B. Lee, “OBLIVIATE: A data oblivious filesystem for Intel SGX,” in Proc. Netw. Distrib. Syst. Secur. Symp. (NDSS), 2018, doi: 10.14722/ndss.2018.23284.
C. M¨uller, M. Brandenburger, C. Cachin, P. Felber, C. G¨ottel, and V. Schiavoni, “TZ4Fabric: Executing smart contracts with ARM TrustZone: (practical experience report),” in Proc. Int. Symp. Reliable Distrib. Syst. (SRDS), 2020, pp. 31–40, doi: 10.1109/SRDS51746.2020.00011.
M. Brandenburger, C. Cachin, R. Kapitza, and A. Sorniotti, “Blockchain and trusted computing: Problems, pitfalls, and a solution for Hyperledger Fabric,” 2018, arXiv:1805.08541, doi: 10.48550/arXiv.1805.08541.
Hyperledger Foundation, “Hyperledger Fabric documentation: What is Hyperledger Fabric?” Accessed: Apr. 17, 2026. [Online]. Available: https://hyperledger-fabric.readthedocs.io/en/latest/whatis.html

Q. Li, L. Kong, X. Min, and B. Zhang, “DareChain: A blockchain-based trusted collaborative network infrastructure for metaverse,” Int. J. Crowd Sci., vol. 7, no. 4, pp. 168–179, 2023, doi: 10.26599/IJCS.2023.9100025.
H.-Y. Paik, X. Xu, H. M. N. D. Bandara, S. U. Lee, and S. K. Lo, “Analysis of data management in blockchain-based systems: From architecture to governance,” IEEE Access, vol. 7, pp. 186 091–186 107, 2019, doi: 10.1109/ACCESS.2019.2961404.
T. Hardin and D. Kotz, “Amanuensis: Information provenance for health-data systems,” Inf. Process. Manage., vol. 58, no. 2, 2021, Art. no. 102460, doi: 10.1016/j.ipm.2020.102460.
S. Ruoti, B. Kaiser, A. Yerukhimovich, J. Clark, and R. Cunningham, “Blockchain technology: what is it good for?” Commun. ACM, vol. 63, no. 1, pp. 46–53, Jan. 2020, doi: 10.1145/3369752.
H. Mora, J. C. Mendoza-Tello, E. G. Varela-Guzm´an, and J. Szymanski, “Blockchain technologies to address smart city and society challenges,” Comput. Hum. Behav., vol. 122, 2021, Art. no. 106854, doi: 10.1016/j.chb.2021.106854.
R. Yuan, Y.-B. Xia, H.-B. Chen, B.-Y. Zang, and J. Xie, “ShadowEth: Private smart contract on public blockchain,” J. Comput. Sci. Technol., vol. 33, no. 3, pp. 542–556, May 2018, doi: 10.1007/s11390-018-1839-y.
L. P. Maddali, M. S. D. Thakur, R. Vigneswaran, M. A. Rajan, S. Kanchanapalli, and B. Das, “VeriBlock: A novel blockchain framework based on verifiable computing and trusted execution environment,” in Proc. Int. Conf. Commun. Syst. Netw. (COMSNETS), 2020, pp. 1–6, doi: 10.1109/COMSNETS48256. 2020.9027414.
R. Cheng et al., “Ekiden: A platform for confidentiality-preserving, trustworthy, and performant smart contracts,” in Proc. IEEE Eur. Symp. Secur. Privacy (EuroS&P), 2019, pp. 185–200, doi: 10.1109/EuroSP.2019.00023.
T. Abdullah Punjabi, A. Q. Alban, and M. Barhamgi, “Effective transparent monitoring of personal data,” in Web Information Systems Engineering – WISE 2024 PhD Symposium, Demos and Workshops, ser. Lecture Notes in Computer Science, M. Barhamgi et al., Eds., vol. 15463. Singapore: Springer, 2025, pp. 29–45, doi: 10.1007/978-981-96-1483-7 3.
H. Saidi, N. Labraoui, A. A. A. Ari, L. A. Maglaras, and J. H. M. Emati, “DSMAC: Privacy-aware decentralized self-management of data access control based on blockchain for health data,” IEEE Access, vol. 10, pp. 101 011–101 028, 2022, doi: 10.1109/ACCESS.2022.3207803.
S. Palacios, A. Ault, J. V. Krogmeier, B. Bhargava, and C. G. Brinton, “AGAPECert: An auditable, generalized, automated, privacy-enabling certification framework with oblivious smart contracts,” IEEE Trans. Dependable Secure Comput., vol. 20, no. 4, pp. 3269–3286, Jul./Aug. 2023, doi: 10.1109/TDSC. 2022.3192852.
N. Jean-Louis et al., “SGXonerated: Finding (and partially fixing) privacy flaws in TEE-based smart contract platforms without breaking the TEE,” Proc. Privacy Enhancing Technol., vol. 2024, no. 1, pp. 617–634, 2024, doi: 10.56553/popets-2024-0035.
Y. Xiao, N. Zhang, J. Li, W. Lou, and Y. T. Hou, “PrivacyGuard: Enforcing private data usage control with blockchain and attested off-chain contract execution,” in Computer Security – ESORICS 2020, ser. Lecture Notes in Computer Science, vol. 12309. Cham, Switzerland: Springer, 2020, pp. 610–629, doi: 10.1007/978-3-030-59013-0 30.
S. H. Said, R. S. Sinde, E. M. Kosia, and M. A. Dida, “A comprehensive blockchain-based system for educational qualifications management and verification to counter forgery,” IEEE Access, vol. 13, pp. 31 562–31 589, 2025, doi: 10.1109/ACCESS.2025.3542545.
A. Ayub Khan, A. A. Laghari, A. A. Shaikh, S. Bourouis, A. M. Mamlouk, and H. Alshazly, “Educational blockchain: A secure degree attestation and verification traceability architecture for higher education commission,” Appl. Sci., vol. 11, no. 22, 2021, Art. no. 10917, doi: 10.3390/app112210917.
J. Porzuczek, “Assessment of the spatial distribution of moisture content in granular material using electrical impedance tomography,” Sensors, vol. 19, no. 12, 2019, Art. no. 2807, doi: 10.3390/s19122807.
R. Li, Q. Wang, Q. Wang, D. Galindo, and M. Ryan, “SoK: TEE-assisted confidential smart contract,” Proc. Privacy Enhancing Technol., vol. 2022, no. 3, pp. 711–731, 2022, doi: 10.56553/popets-2022-0093.
S. Alansari, “A blockchain-based approach for secure, transparent and accountable personal data sharing,” Ph.D. dissertation, School Electron. Comput. Sci., Univ. Southampton, Southampton, U.K., Aug. 2020. [Online]. Available: https://eprints.soton.ac.uk/447633/
Y. Wang, J. Li, S. Zhao, and F. Yu, “Hybridchain: A novel architecture for confidentiality-preserving and performant permissioned blockchain using trusted execution environment,” IEEE Access, vol. 8, pp. 190 652–190 662, 2020, doi: 10.1109/ACCESS.2020.3031889.
D. Zhang and L. Fan, “Cerberus: Privacy-preserving computation in edge computing,” in Proc. IEEE INFOCOM Conf. Comput. Commun. Workshops (INFOCOM WKSHPS), 2020, pp. 43–49, doi: 10.1109/INFOCOMWKSHPS50562.2020.9162942.
A. Punia, P. Gulia, N. S. Gill, E. Ibeke, C. Iwendi, and P. K. Shukla, “A systematic review on blockchain-based access control systems in cloud environment,” J. Cloud Comput., vol. 13, no. 1, 2024, Art. no. 146, doi: 10.1186/s13677-024-00697-7.
C. Liu, C. Hou, T. Jiang, J. Ning, H. Qiao, and Y. Wu, “FACOS: Enabling privacy protection through fine-grained access control with on-chain and off-chain system,” 2024, arXiv:2406.03695, doi: 10.48550/arXiv.2406.03695.
F. Mehmood, U. Khalid, and S. Karim, “Consent management system based on user data security and privacy using Hyperledger Fabric blockchain,” in Proc. 6th Int. Conf. Inf. Technol. Elect. Eng. (ICITEE), 2023, pp. 447–454, doi: 10.1145/3640115.3640188.
C. Daud´en-Esmel, J. Castell`a-Roca, and A. Viejo, “Blockchain-based access control system for efficient and GDPR-compliant personal data management,” Comput. Commun., vol. 214, pp. 67–87, 2024, doi: 10.1016/j.comcom.2023.11.017.
M. Du, X. Ma, Z. Zhe, X. Wang, and C. Qijun, “A review on consensus algorithm of blockchain,” in Proc. IEEE Int. Conf. Syst., Man, Cybern. (SMC), 2017, pp. 2567–2572, doi: 10.1109/SMC.2017.8123011.
P. Cortez, 2008, “Student Performance,” UCI Machine Learning Repository, doi: 10.24432/C5TG7T.
A. Baliga, I. Subhod, P. Kamat, and S. Chatterjee, “Performance evaluation of the Quorum blockchain platform,” 2018, arXiv:1809.03421, doi: 10.48550/ arXiv.1809.03421.
C.-L. Chen, J. Yang, W.-J. Tsaur, W. Weng, C.-M. Wu, and X. Wei, “Enterprise data sharing with privacy-preserved based on Hyperledger Fabric blockchain in IIOT’s application,” Sensors, vol. 22, no. 3, 2022, Art. no. 1146, doi: 10.3390/s22031146.

Details

Primary Language

English

Subjects

Cryptography, Data Security and Protection, Data and Information Privacy

Journal Section

Research Article

Authors

Nabeel Z. Tawfeeq ^*
0000-0003-4943-0944
Iraq

Dujan B. Taha
0000-0003-3503-2689
Iraq

Early Pub Date

October 27, 2026

Publication Date

October 30, 2026

Submission Date

July 4, 2026

Acceptance Date

October 5, 2026

Published in Issue

Year 2026 Volume: 9 Number: 5

DOI

https://doi.org/10.35377/saucis...1986038

IZ

https://izlik.org/JA99SC45ML

Cite

RIS / Bibtex

APA

Tawfeeq, N. Z., & Taha, D. B. (2026). ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing. Sakarya University Journal of Computer and Information Sciences, 9(5), 1540-1559. https://doi.org/10.35377/saucis...1986038

AMA

1.Tawfeeq NZ, Taha DB. ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing. SAUCIS. 2026;9(5):1540-1559. doi:10.35377/saucis.1986038

Chicago

Tawfeeq, Nabeel Z., and Dujan B. Taha. 2026. “ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing”. Sakarya University Journal of Computer and Information Sciences 9 (5): 1540-59. https://doi.org/10.35377/saucis. 1986038.

EndNote

Tawfeeq NZ, Taha DB (October 1, 2026) ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing. Sakarya University Journal of Computer and Information Sciences 9 5 1540–1559.

IEEE

[1]N. Z. Tawfeeq and D. B. Taha, “ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing”, SAUCIS, vol. 9, no. 5, pp. 1540–1559, Oct. 2026, doi: 10.35377/saucis...1986038.

ISNAD

Tawfeeq, Nabeel Z. - Taha, Dujan B. “ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing”. Sakarya University Journal of Computer and Information Sciences 9/5 (October 1, 2026): 1540-1559. https://doi.org/10.35377/saucis. 1986038.

JAMA

1.Tawfeeq NZ, Taha DB. ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing. SAUCIS. 2026;9:1540–1559.

MLA

Tawfeeq, Nabeel Z., and Dujan B. Taha. “ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing”. Sakarya University Journal of Computer and Information Sciences, vol. 9, no. 5, Oct. 2026, pp. 1540-59, doi:10.35377/saucis. 1986038.

Vancouver

1.Nabeel Z. Tawfeeq, Dujan B. Taha. ACTA: A Verifiable Accountable Decryption Mechanism for Secure and Auditable Blockchain-Based Data Sharing. SAUCIS. 2026 Oct. 1;9(5):1540-59. doi:10.35377/saucis. 1986038