Zt &t: secure service session management using blockchain-based tokens in zero trust networks.

Abstract

In today’s interconnected world, the line that separates the network perimeter can no longer be identified. This has led to the development of Zero Trust Networking (ZTN) and Software Defined Perimeter (SDP) concepts, which aim to extend the perimeter of trust to every entity connected to the network regardless of their physical location. However, implementing complex security mechanisms and constant trust assurance for every interaction can be challenging. One solution is integrating blockchain technology into Zero Trust to provide security. Blockchain offers features such as data decentralization, anonymity, cryptography, and immutable record of transactions that can be utilized. This work proposes a mechanism for secure service session management using blockchain capabilities. Non-fungible tokens (NFT) are applied to access and provider tokens representing a policy agreement for service consumption. These tokens are mapped to the public addresses of entities registered in the blockchain. The proposal is realized through an open-source Zero Trust platform and a private Ethereum blockchain.