A Secure and Auditable Distributed Data-Sharing Framework for Multi-Domain Systems
Article Information
Abstract
Data is one of the essential assets of every organisation, and its security has frequently been highlighted as a concern due to unauthorised access, breaches, and tampering. Conventional data repositories are often based on centralised setups, which are prone to problems such as single points of failure, privacy breaches, and unpredictable system behaviour. While an auditing mechanism can strengthen transparency by tracking how data is accessed, such tools are often managed by external third parties or rely on manual methods. Additionally, due to complexities such as duplicate user credentials across multiple services and systems, it becomes even more difficult for users to control their content. Furthermore, without an access-monitoring system in place, attackers can usually evade detection, leaving the system compromised while they manipulate sensitive data. To address these shortcomings, we propose a distributed data-sharing framework, developed as part of a Trusted Mediator Platform, that enhances data privacy and security by employing a distributed data repository for secure storage and retrieval, integrated with an audit framework implemented on a permissioned blockchain. Our method is designed to mitigate unauthorised access, data tampering, and single points of failure (SPOFs) by distributing data across trusted nodes and providing a tamper-resistant ledger, ensuring traceability and integrity. Our experiment demonstrates strong performance, with average blockchain transaction latency remaining below 1~s for batches of up to 10,000 transactions (tx) and throughput attaining over 115 tx/s, while IPFS achieved an upload throughput of approximately 35 one-megabyte files per second at a batch size of 300, thus indicating their feasibility for the exchange and secure storage of essential data.
Graphical Abstract
Keywords
Data Availability Statement
Funding
Conflicts of Interest
AI Use Statement
Ethical Approval and Consent to Participate
References
- Ahmad, A., Saad, M., Al Ghamdi, M., Nyang, D., & Mohaisen, D. (2021). Blocktrail: A service for secure and transparent blockchain-driven audit trails. IEEE Systems Journal, 16(1), 1367-1378.
[CrossRef] [Google Scholar] - Sun, Y., Zhang, J., Xiong, Y., & Zhu, G. (2014). Data Security and Privacy in Cloud Computing. International Journal of Distributed Sensor Networks, 10(7), 190903.
[CrossRef] [Google Scholar] - IBM. (2026). Cost of a Data Breach Report 2026. Retrieved from https://www.ibm.com/reports/data-breach
[Google Scholar] - Sobers, R. (2025). 82 Must-Know Data Breach Statistics. Varonis. Retrieved from https://www.varonis.com/blog/data-breach-statistics
[Google Scholar] - Dhaliwal, J. (2025). Data Breach Exposes 3 Billion Personal Information Records. McAfee Blog. Retrieved from https://www.mcafee.com/blogs/security-news/data-breach-exposes-3-billion-personal-information-records/
[Google Scholar] - Whittaker, Z. (2024). The biggest data breaches in 2024: 1 billion stolen records and rising. TechCrunch. Retrieved from https://techcrunch.com/2024/10/14/2024-in-data-breaches-1-billion-stolen-records-and-rising/
[Google Scholar] - Goel, A., & Rahulamathavan, Y. (2025). A comparative survey of centralised and decentralised identity management systems: analysing scalability, security, and feasibility. Future Internet, 17(1), 1.
[CrossRef] [Google Scholar] - Chen, Y., Li, H., Li, K., & Zhang, J. (2017). An improved P2P file system scheme based on IPFS and Blockchain. In 2017 IEEE International Conference on Big Data (Big Data) (pp. 2652-2657).
[CrossRef] [Google Scholar] - Lo, O., Buchanan, W. J., Sayeed, S., Papadopoulos, P., Pitropakis, N., & Chrysoulas, C. (2022). GLASS: A Citizen-Centric Distributed Data-Sharing Model within an e-Governance Architecture. Sensors, 22(6), 2291.
[CrossRef] [Google Scholar] - Benet, J. (2014). IPFS - Content Addressed, Versioned, P2P File System. arXiv preprint arXiv:1407.3561.
[CrossRef] [Google Scholar] - Li, X., Jiang, P., Chen, T., Luo, X., & Wen, Q. (2020). A survey on the security of blockchain systems. Future Generation Computer Systems, 107, 841-853.
[CrossRef] [Google Scholar] - Saad, M., Spaulding, J., Njilla, L., Kamhoua, C., Shetty, S., Nyang, D., & Mohaisen, D. (2020). Exploring the Attack Surface of Blockchain: A Comprehensive Survey. IEEE Communications Surveys & Tutorials, 22(3), 1977-2008.
[CrossRef] [Google Scholar] - Sayeed, S., Pitropakis, N., Buchanan, W. J., Markakis, E., Papatsaroucha, D., & Politis, I. (2023, August). TRUSTEE: Towards the creation of secure, trustworthy and privacy-preserving framework. In Proceedings of the 18th International Conference on Availability, Reliability and Security (pp. 1-10).
[CrossRef] [Google Scholar] - Athanere, S., & Thakur, R. (2022). Blockchain based hierarchical semi-decentralized approach using IPFS for secure and efficient data sharing. Journal of King Saud University - Computer and Information Sciences, 34(4), 1523-1534.
[CrossRef] [Google Scholar] - Gorenflo, C., Lee, S., Golab, L., & Keshav, S. (2020). FastFabric: Scaling hyperledger fabric to 20 000 transactions per second. International Journal of Network Management, 30(5), e2099.
[CrossRef] [Google Scholar] - Ward, M. (2018). Transactions Per Second (TPS). Corda blog (Medium). Retrieved from https://medium.com/corda/transactions-per-second-tps-de3fb55d60e3
[Google Scholar] - MultiChain. (2025). Tips for performance optimization. Retrieved from https://www.multichain.com/developers/performance-optimization
[Google Scholar] - Søgaard, J. S., Eklund, P. W., Herskind, L., & Spasovski, J. (2023). Improving trust in a (trans) national invoicing system: the performance of crash vs. byzantine fault tolerance at scale. Applied Sciences, 13(12), 6941.
[CrossRef] [Google Scholar] - Christodoulou, K., Iosif, E., Inglezakis, A., & Themistocleous, M. (2020). Consensus crash testing: Exploring ripple's decentralization degree in adversarial environments. Future Internet, 12(3), 53.
[CrossRef] [Google Scholar] - Alt, R., & Gräser, M. (2025). Distributed ledger technology. Electronic Markets, 35(1), 53.
[CrossRef] [Google Scholar] - El Ioini, N., & Pahl, C. (2018, October). A review of distributed ledger technologies. In OTM Confederated International Conferences`` On the Move to Meaningful Internet Systems'' (pp. 277-288). Cham: Springer International Publishing.
[CrossRef] [Google Scholar] - Casino, F., Dasaklis, T. K., & Patsakis, C. (2019). A systematic literature review of blockchain-based applications: Current status, classification and open issues. Telematics and informatics, 36, 55-81.
[CrossRef] [Google Scholar] - Yaga, D., Mell, P., Roby, N., & Scarfone, K. (2018). Blockchain Technology Overview (NISTIR 8202). National Institute of Standards and Technology.
[CrossRef] [Google Scholar] - Polge, J., Robert, J., & Le Traon, Y. (2021). Permissioned blockchain frameworks in the industry: A comparison. ICT Express, 7(2), 229-233.
[CrossRef] [Google Scholar] - Huang, H., Lin, J., Zheng, B., Zheng, Z., & Bian, J. (2020). When blockchain meets distributed file systems: An overview, challenges, and open issues. IEEE Access, 8, 50574-50586.
[CrossRef] [Google Scholar] - Sun, J., Yao, X., Wang, S., & Wu, Y. (2020). Blockchain-based secure storage and access scheme for electronic medical records in IPFS. IEEE access, 8, 59389-59401.
[CrossRef] [Google Scholar] - Samonas, S., & Coss, D. (2014). The CIA Strikes Back: Redefining Confidentiality, Integrity and Availability in Security. Journal of Information System Security, 10(3), 21-45. https://www.proso.com/dl/Samonas.pdf
[Google Scholar] - Putz, B., Böhm, F., & Pernul, G. (2021, June). HyperSec: Visual Analytics for blockchain security monitoring. In IFIP International Conference on ICT Systems Security and Privacy Protection (pp. 165-180). Cham: Springer International Publishing.
[CrossRef] [Google Scholar] - Li, H., Mi, X., Dou, Y., & Guo, S. (2023, June). An empirical study of storj dcs: Ecosystem, performance, and security. In 2023 IEEE/ACM 31st International Symposium on Quality of Service (IWQoS) (pp. 1-10). IEEE.
[CrossRef] [Google Scholar] - Reno, S., Roy, K., & Tabassum, T. (2025). Blockweave: An Arweave‐Based Decentralized Storage Solution to Tackle the Blockchain Trilemma. Engineering Reports, 7(7), e70259.
[CrossRef] [Google Scholar] - Filecoin. (2024). Network Performance. Filecoin Docs. Retrieved from https://docs.filecoin.io/networks/mainnet/network-performance
[Google Scholar] - Austria, P., Park, C. H., Hoffman, A., & Kim, Y. (2021). Performance and Cost Analysis of Sia, a Blockchain-Based Storage Platform. In 2021 IEEE/ACIS 6th International Conference on Big Data, Cloud Computing, and Data Science (BCD) (pp. 98-103).
[CrossRef] [Google Scholar] - Kumari, K. A., Sangeetha, S., Rajeevan, V., Dharshini, M. D., & Haritha, T. (2022, December). Trade management system using R3 Corda blockchain. In International Conference on Intelligent Systems Design and Applications (pp. 257-275). Cham: Springer Nature Switzerland.
[CrossRef] [Google Scholar] - Brown, R. G., Carlyle, J., Grigg, I., & Hearn, M. (2016). Corda: an introduction. R3 CEV, August, 1(15), 14. https://smallake.kr/wp-content/uploads/2016/10/corda-introductory-whitepaper-final.pdf
[Google Scholar] - Kuzlu, M., Pipattanasomporn, M., Gurses, L., & Rahman, S. (2019, July). Performance analysis of a hyperledger fabric blockchain framework: throughput, latency and scalability. In 2019 IEEE international conference on blockchain (Blockchain) (pp. 536-540). IEEE.
[CrossRef] [Google Scholar] - Stamatellis, C., Papadopoulos, P., Pitropakis, N., Katsikas, S., & Buchanan, W. J. (2020). A privacy-preserving healthcare framework using hyperledger fabric. Sensors, 20(22), 6587.
[CrossRef] [Google Scholar] - Androulaki, E., Barger, A., Bortnikov, V., Cachin, C., Christidis, K., De Caro, A., ... & Yellick, J. (2018, April). Hyperledger fabric: a distributed operating system for permissioned blockchains. In Proceedings of the thirteenth EuroSys conference (pp. 1-15).
[CrossRef] [Google Scholar] - Avantaggiato, M., & Gallo, P. (2019). Challenges and Opportunities using MultiChain for Real Estate. In 2019 IEEE International Black Sea Conference on Communications and Networking (BlackSeaCom) (pp. 1-5).
[CrossRef] [Google Scholar] - Mazzoni, M., Corradi, A., & Di Nicola, V. (2022). Performance evaluation of permissioned blockchains for financial applications: The ConsenSys Quorum case study. Blockchain: Research and applications, 3(1), 100026.
[CrossRef] [Google Scholar] - Baliga, A., Subhod, I., Kamat, P., & Chatterjee, S. (2018). Performance evaluation of the quorum blockchain platform. arXiv preprint arXiv:1809.03421.
[CrossRef] [Google Scholar] - Moreno-Sanchez, P., Zafar, M. B., & Kate, A. (2016). Listening to Whispers of Ripple: Linking Wallets and Deanonymizing Transactions in the Ripple Network. Proceedings on Privacy Enhancing Technologies, 2016(4), 436-453.
[CrossRef] [Google Scholar] - Armknecht, F., Karame, G. O., Mandal, A., Youssef, F., & Zenner, E. (2015, August). Ripple: Overview and outlook. In International conference on trust and trustworthy computing (pp. 163-180). Cham: Springer International Publishing.
[CrossRef] [Google Scholar] - Andrian, Y., Kim, H., & Ju, H. (2019). A Distributed File-Based Storage System for Improving High Availability of Space Weather Data. Applied Sciences, 9(23), 5024.
[CrossRef] [Google Scholar] - Daniel, E., & Tschorsch, F. (2022). IPFS and friends: A qualitative comparison of next generation peer-to-peer data networks. IEEE Communications Surveys & Tutorials, 24(1), 31-52.
[CrossRef] [Google Scholar] - Merlec, M. M., & In, H. P. (2024). Blockchain-Based Decentralized Storage Systems for Sustainable Data Self-Sovereignty: A Comparative Study. Sustainability, 16(17), 7671.
[CrossRef] [Google Scholar] - Zheng, P., Zheng, Z., Luo, X., Chen, X., & Liu, X. (2018). A detailed and real-time performance monitoring framework for blockchain systems. In Proceedings of the 40th International Conference on Software Engineering: Software Engineering in Practice (pp. 134-143).
[CrossRef] [Google Scholar] - Hyperledger Labs. (2026). Hyperledger Explorer (blockchain-explorer) [Software repository, archived 5 February 2026]. Retrieved from https://github.com/hyperledger-labs/blockchain-explorer
[Google Scholar] - Wen, F., Wang, Z., Qu, L., Huang, H., & Hu, X. (2024). Enhancing secure multi-group data sharing through integration of IPFS and hyperledger fabric. PeerJ Computer Science, 10, e1962.
[CrossRef] [Google Scholar] - Zheng, Z., Xie, S., Dai, H. N., Chen, X., & Wang, H. (2018). Blockchain challenges and opportunities: A survey. International journal of web and grid services, 14(4), 352-375.
[CrossRef] [Google Scholar] - Meeks, E., & Dufour, A.-M. (2024). D3.js in Action (3rd ed.). Manning Publications. https://www.manning.com/books/d3js-in-action-third-edition
[Google Scholar] - Kaushal, R. K., & Kumar, N. (2024, March). Exploring hyperledger caliper benchmarking tool to measure the performance of blockchain based solutions. In 2024 11th international conference on reliability, infocom technologies and optimization (trends and future directions)(ICRITO) (pp. 1-6). IEEE.
[CrossRef] [Google Scholar] - Dabbagh, M., Choo, K.-K. R., Beheshti, A., Tahir, M., & Safa, N. S. (2021). A survey of empirical performance evaluation of permissioned blockchain platforms: Challenges and opportunities. Computers & Security, 100, 102078.
[CrossRef] [Google Scholar] - Kang, P., Yang, W., & Zheng, J. (2022). Blockchain private file storage-sharing method based on IPFS. Sensors, 22(14), 5100.
[CrossRef] [Google Scholar] - Wang, Y., Yin, X., Zhu, H., & Hei, X. (2020, July). A blockchain based distributed storage system for knowledge graph security. In International Conference on Artificial Intelligence and Security (pp. 318-327). Cham: Springer International Publishing.
[CrossRef] [Google Scholar] - Azbeg, K., Ouchetto, O., & Andaloussi, S. J. (2022). BlockMedCare: A healthcare system based on IoT, Blockchain and IPFS for data management security. Egyptian informatics journal, 23(2), 329-343.
[CrossRef] [Google Scholar] - Ye, H., & Park, S. (2021). Reliable vehicle data storage using blockchain and IPFS. Electronics, 10(10), 1130.
[CrossRef] [Google Scholar] - Pawar, M. K., Patil, P., Sharma, M., & Chalageri, M. (2021, June). Secure and scalable decentralized supply chain management using ethereum and ipfs platform. In 2021 International Conference on Intelligent Technologies (CONIT) (pp. 1-5). IEEE.
[CrossRef] [Google Scholar] - Wang, P., & Susilo, W. (2021). Data Security Storage Model of the Internet of Things Based on Blockchain. Computer Systems Science and Engineering, 36(1), 213--224.
[CrossRef] [Google Scholar] - Jayabalan, J., & Jeyanthi, N. (2022). Scalable blockchain model using off-chain IPFS storage for healthcare data security and privacy. Journal of Parallel and distributed computing, 164, 152-167.
[CrossRef] [Google Scholar] - Tovanich, N., Heulot, N., Fekete, J. D., & Isenberg, P. (2019). Visualization of blockchain data: A systematic review. IEEE transactions on visualization and computer graphics, 27(7), 3135-3152.
[CrossRef] [Google Scholar] - Papatsaroucha, D., Pityanou, K., Sayeed, S., Papadopoulos, P., Kasimatis, D., Zotou, M., ... & Markakis, E. K. (2025, October). A Greener Approach to Privacy-Aware Cross-Border Data Federation Through Knowledge Reuse. In International Conference on Digital Sovereignty (pp. 407-419). Cham: Springer Nature Switzerland.
[CrossRef] [Google Scholar] - Papatsaroucha, D., Regueiro, C., Escalante, M., Martignano, M., Hillman, V., & Markakis, E. K. (2025, December). Secure and Privacy-Preserving Secondary Data Use: A Framework for Cross-Domain Computation in the Encrypted Domain. In 2025 Annual Computer Security Applications Conference Workshops (ACSAC Workshops) (pp. 212-221). IEEE.
[CrossRef] [Google Scholar] - Acar, A., Aksu, H., Uluagac, A. S., & Conti, M. (2018). A survey on homomorphic encryption schemes: Theory and implementation. ACM Computing Surveys (Csur), 51(4), 1-35.
[CrossRef] [Google Scholar] - Otto, B., & Jarke, M. (2019). Designing a multi-sided data platform: findings from the International Data Spaces case: B. Otto, M. Jarke. Electronic markets, 29(4), 561-580.
[CrossRef] [Google Scholar]
Cite This Article
TY - JOUR AU - Sayeed, Sarwar AU - Papadopoulos, Pavlos AU - Kasimatis, Dimitrios AU - Pitropakis, Nikolaos AU - Buchanan, William J. AU - Markakis, Evangelos K. AU - Papatsaroucha, Dimitra AU - Pityanou, Konstantina AU - Politis, Ilias PY - 2026 DA - 2026/09/23 TI - A Secure and Auditable Distributed Data-Sharing Framework for Multi-Domain Systems JO - ICCK Transactions on Information Security and Cryptography T2 - ICCK Transactions on Information Security and Cryptography JF - ICCK Transactions on Information Security and Cryptography VL - 2 IS - 3 SP - 172 EP - 191 DO - 10.62762/TISC.2026.917693 UR - https://www.icck.org/article/abs/TISC.2026.917693 KW - distributed storage KW - audit trail KW - data sharing KW - privacy KW - transparency AB - Data is one of the essential assets of every organisation, and its security has frequently been highlighted as a concern due to unauthorised access, breaches, and tampering. Conventional data repositories are often based on centralised setups, which are prone to problems such as single points of failure, privacy breaches, and unpredictable system behaviour. While an auditing mechanism can strengthen transparency by tracking how data is accessed, such tools are often managed by external third parties or rely on manual methods. Additionally, due to complexities such as duplicate user credentials across multiple services and systems, it becomes even more difficult for users to control their content. Furthermore, without an access-monitoring system in place, attackers can usually evade detection, leaving the system compromised while they manipulate sensitive data. To address these shortcomings, we propose a distributed data-sharing framework, developed as part of a Trusted Mediator Platform, that enhances data privacy and security by employing a distributed data repository for secure storage and retrieval, integrated with an audit framework implemented on a permissioned blockchain. Our method is designed to mitigate unauthorised access, data tampering, and single points of failure (SPOFs) by distributing data across trusted nodes and providing a tamper-resistant ledger, ensuring traceability and integrity. Our experiment demonstrates strong performance, with average blockchain transaction latency remaining below 1~s for batches of up to 10,000 transactions (tx) and throughput attaining over 115 tx/s, while IPFS achieved an upload throughput of approximately 35 one-megabyte files per second at a batch size of 300, thus indicating their feasibility for the exchange and secure storage of essential data. SN - 3070-2429 PB - Institute of Central Computation and Knowledge LA - English ER -
@article{Sayeed2026A,
author = {Sarwar Sayeed and Pavlos Papadopoulos and Dimitrios Kasimatis and Nikolaos Pitropakis and William J. Buchanan and Evangelos K. Markakis and Dimitra Papatsaroucha and Konstantina Pityanou and Ilias Politis},
title = {A Secure and Auditable Distributed Data-Sharing Framework for Multi-Domain Systems},
journal = {ICCK Transactions on Information Security and Cryptography},
year = {2026},
volume = {2},
number = {3},
pages = {172-191},
doi = {10.62762/TISC.2026.917693},
url = {https://www.icck.org/article/abs/TISC.2026.917693},
abstract = {Data is one of the essential assets of every organisation, and its security has frequently been highlighted as a concern due to unauthorised access, breaches, and tampering. Conventional data repositories are often based on centralised setups, which are prone to problems such as single points of failure, privacy breaches, and unpredictable system behaviour. While an auditing mechanism can strengthen transparency by tracking how data is accessed, such tools are often managed by external third parties or rely on manual methods. Additionally, due to complexities such as duplicate user credentials across multiple services and systems, it becomes even more difficult for users to control their content. Furthermore, without an access-monitoring system in place, attackers can usually evade detection, leaving the system compromised while they manipulate sensitive data. To address these shortcomings, we propose a distributed data-sharing framework, developed as part of a Trusted Mediator Platform, that enhances data privacy and security by employing a distributed data repository for secure storage and retrieval, integrated with an audit framework implemented on a permissioned blockchain. Our method is designed to mitigate unauthorised access, data tampering, and single points of failure (SPOFs) by distributing data across trusted nodes and providing a tamper-resistant ledger, ensuring traceability and integrity. Our experiment demonstrates strong performance, with average blockchain transaction latency remaining below 1~s for batches of up to 10,000 transactions (tx) and throughput attaining over 115 tx/s, while IPFS achieved an upload throughput of approximately 35 one-megabyte files per second at a batch size of 300, thus indicating their feasibility for the exchange and secure storage of essential data.},
keywords = {distributed storage, audit trail, data sharing, privacy, transparency},
issn = {3070-2429},
publisher = {Institute of Central Computation and Knowledge}
}
Article Metrics
Publisher's Note
ICCK stays neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and Permissions
Portico