Personal Blockchain: Uma Estratégia de Gerenciamento de Consentimento de Dados Pessoais Dirigida ao Usuário
Resumo
Os marcos legais de proteção de dados têm como objetivo dar poder aos usuários de decidir e de consentir sobre seus dados e a quem esses são remetidos. O principal marco desse tema é a GDPR (General Data Protection Regulation) na Europa. O fornecimento de estratégias para o suporte à implementação das questões relacionadas às novas legislações tem se tornado cada vez mais evidente. Contudo, o que se tem observado é que os sistemas atuais basicamente estão registrando o consentimento, ainda continuam armazenando e gerenciando as informações dos usuários de forma unilateral. É proposto nesse trabalho a Personal Blockchain, uma carteira de dados baseada em blockchain para armazenamento de dados pessoais. O intuito da Personal Blockchain é empoderar os usuários com o maior controle possível sobre os seus dados. Para viabilizar a Personal Blockchain, também, foi desenvolvido um novo modelo arquitetural, a blockchain matricial com âncora. Esse modelo trará aumento na densidade da blockchain tradicional e proporá uma estrutura de auditoria por meio de uma blockchain tradicional pública.
Palavras-chave:
gerenciamento de consentimento, blockchain, LGPD, GDPR
Referências
Al-Zaben, N., Hassan Onik, M. M., Yang, J., Lee, N.-Y., and Kim, C.-S. (2018). General Data Protection Regulation Complied Blockchain Architecture for Personally Identifiable Information Management. In 2018 International Conference on Computing, Electronics Communications Engineering (iCCECE), pages 77-82, Southend, United Kingdom. IEEE.
Antonopoulos, A. M. (2017). Consensus attacks. In McGovern, T., editor, Mastering Bitcoin: Programming the Open Blockchain, 1005 Gravenstein Highway North, Sebastopol, CA 95472. O'Reilly Media, Inc.
Bayle, A., Koscina, M., Manset, D., and Perez-Kempner, O. (2018). When Blockchain Meets the Right to Be Forgotten: Technology versus Law in the Healthcare Industry. In 2018 IEEE/WIC/ACM International Conference on Web Intelligence (WI), pages 788-792, Santiago. IEEE.
Belen Saglam, R., Aslan, C. B., Li, S., Dickson, L., and Pogrebna, G. (2020). A Data-Driven Analysis of Blockchain Systems' Public Online Communications on GDPR. In 2020 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), pages 22-31, Oxford, United Kingdom. IEEE.
Brasil (2018). Lei geral de protec ao de dados pessoais (LGPD).
Casino, F., Politou, E., Alepis, E., and Patsakis, C. (2020). Immutability and Decentralized Storage: An Analysis of Emerging Threats. IEEE Access, 8:4737-4744.
Haque, A. B., Najmul Islam, A., Hyrynsalmi, S., Naqvi, B., and Smolander, K. (2021). GDPR Compliant Blockchains - A Systematic Literature Review. IEEE Access, pages 1-1.
Herian, R. (2020). Blockchain, GDPR, and fantasies of data sovereignty. Law, Innovation and Technology, 12(1):156-174.
Huang, H., Kong, W., Zhou, S., Zheng, Z., and Guo, S. (2021). A Survey of State-of-the-Art on Blockchains: Theories, Modelings, and Tools. ACM Computing Surveys, 54(2):1-42. Number: 2.
Huang, W.-C., Yeh, L.-Y., and Huang, J.-L. (2019). A Monitorable Peer-to-Peer File Sharing Mechanism. In 2019 20th Asia-Pacific Network Operations and Management Symposium (APNOMS), pages 1-4, Matsue, Japan. IEEE.
Kadena, E. and Holicza, P. (2018). Security Issues in the Blockchain(ed) World. In 2018 IEEE 18th International Symposium on Computational Intelligence and Informatics (CINTI), pages 000211-000216, Budapest, Hungary. IEEE.
Lee, N.-Y., Yang, J., Onik, M. M. H., and Kim, C.-S. (2019). Modifiable Public Blockchains Using Truncated Hashing and Sidechains. IEEE Access, 7:173571-173582.
MDN WEB DOCS COMMUNITY. Codigos de status de respostas HTTP - HTTP - MDN. Disponível em: [link]. Acesso em: 5 ago. 2022.
PARLAMENTO EUROPEU. (UE) 2016/679 (Regulamento Geral sobre a Proteção de Dados), 27 abr. 2016.
Politou, E., Casino, F., Alepis, E., and Patsakis, C. (2020). Blockchain Mutability: Challenges and Proposed Solutions. IEEE Transactions on Emerging Topics in Computing.
Sim, W. L., Chua, H. N., and Tahir, M. (2019). Blockchain for Identity Management: The Implications to Personal Data Protection. In 2019 IEEE Conference on Application, Information and Network Security (AINS), pages 30-35, Pulau Pinang, Malaysia. IEEE.
Stan, O. P. and Miclea, L. (2019). New Era for Technology in Healthcare Powered by GDPR and Blockchain. In Vlad, S. and Roman, N. M., editors, 6th International Conference on Advancements of Medicine and Health Care through Technology; 17-20 October 2018, Cluj-Napoca, Romania, volume 71, pages 311-317. Springer Singapore, Singapore. Series Title: IFMBE Proceedings.
Voigt, P. and von dem Bussche, A. (2017). The EU General Data Protection Regulation (GDPR): A Practical Guide. Cham, 1st ed. 2017 edition.
Weber, I., Lu, Q., Tran, A. B., Deshmukh, A., Gorski, M., and Strazds, M. (2019). A Platform Architecture for Multi-Tenant Blockchain-Based Systems. In 2019 IEEE International Conference on Software Architecture (ICSA), pages 101-110, Hamburg, Germany. IEEE.
Antonopoulos, A. M. (2017). Consensus attacks. In McGovern, T., editor, Mastering Bitcoin: Programming the Open Blockchain, 1005 Gravenstein Highway North, Sebastopol, CA 95472. O'Reilly Media, Inc.
Bayle, A., Koscina, M., Manset, D., and Perez-Kempner, O. (2018). When Blockchain Meets the Right to Be Forgotten: Technology versus Law in the Healthcare Industry. In 2018 IEEE/WIC/ACM International Conference on Web Intelligence (WI), pages 788-792, Santiago. IEEE.
Belen Saglam, R., Aslan, C. B., Li, S., Dickson, L., and Pogrebna, G. (2020). A Data-Driven Analysis of Blockchain Systems' Public Online Communications on GDPR. In 2020 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), pages 22-31, Oxford, United Kingdom. IEEE.
Brasil (2018). Lei geral de protec ao de dados pessoais (LGPD).
Casino, F., Politou, E., Alepis, E., and Patsakis, C. (2020). Immutability and Decentralized Storage: An Analysis of Emerging Threats. IEEE Access, 8:4737-4744.
Haque, A. B., Najmul Islam, A., Hyrynsalmi, S., Naqvi, B., and Smolander, K. (2021). GDPR Compliant Blockchains - A Systematic Literature Review. IEEE Access, pages 1-1.
Herian, R. (2020). Blockchain, GDPR, and fantasies of data sovereignty. Law, Innovation and Technology, 12(1):156-174.
Huang, H., Kong, W., Zhou, S., Zheng, Z., and Guo, S. (2021). A Survey of State-of-the-Art on Blockchains: Theories, Modelings, and Tools. ACM Computing Surveys, 54(2):1-42. Number: 2.
Huang, W.-C., Yeh, L.-Y., and Huang, J.-L. (2019). A Monitorable Peer-to-Peer File Sharing Mechanism. In 2019 20th Asia-Pacific Network Operations and Management Symposium (APNOMS), pages 1-4, Matsue, Japan. IEEE.
Kadena, E. and Holicza, P. (2018). Security Issues in the Blockchain(ed) World. In 2018 IEEE 18th International Symposium on Computational Intelligence and Informatics (CINTI), pages 000211-000216, Budapest, Hungary. IEEE.
Lee, N.-Y., Yang, J., Onik, M. M. H., and Kim, C.-S. (2019). Modifiable Public Blockchains Using Truncated Hashing and Sidechains. IEEE Access, 7:173571-173582.
MDN WEB DOCS COMMUNITY. Codigos de status de respostas HTTP - HTTP - MDN. Disponível em: [link]. Acesso em: 5 ago. 2022.
PARLAMENTO EUROPEU. (UE) 2016/679 (Regulamento Geral sobre a Proteção de Dados), 27 abr. 2016.
Politou, E., Casino, F., Alepis, E., and Patsakis, C. (2020). Blockchain Mutability: Challenges and Proposed Solutions. IEEE Transactions on Emerging Topics in Computing.
Sim, W. L., Chua, H. N., and Tahir, M. (2019). Blockchain for Identity Management: The Implications to Personal Data Protection. In 2019 IEEE Conference on Application, Information and Network Security (AINS), pages 30-35, Pulau Pinang, Malaysia. IEEE.
Stan, O. P. and Miclea, L. (2019). New Era for Technology in Healthcare Powered by GDPR and Blockchain. In Vlad, S. and Roman, N. M., editors, 6th International Conference on Advancements of Medicine and Health Care through Technology; 17-20 October 2018, Cluj-Napoca, Romania, volume 71, pages 311-317. Springer Singapore, Singapore. Series Title: IFMBE Proceedings.
Voigt, P. and von dem Bussche, A. (2017). The EU General Data Protection Regulation (GDPR): A Practical Guide. Cham, 1st ed. 2017 edition.
Weber, I., Lu, Q., Tran, A. B., Deshmukh, A., Gorski, M., and Strazds, M. (2019). A Platform Architecture for Multi-Tenant Blockchain-Based Systems. In 2019 IEEE International Conference on Software Architecture (ICSA), pages 101-110, Hamburg, Germany. IEEE.
Publicado
21/11/2022
Como Citar
ARAÚJO, Mateus Bruno; DE SOUZA, Cidcley Teixeira.
Personal Blockchain: Uma Estratégia de Gerenciamento de Consentimento de Dados Pessoais Dirigida ao Usuário. In: TRABALHOS EM ANDAMENTO - SIMPÓSIO BRASILEIRO DE ENGENHARIA DE SISTEMAS COMPUTACIONAIS (SBESC), 12. , 2022, Fortaleza/CE.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2022
.
p. 104-109.
ISSN 2763-9002.
DOI: https://doi.org/10.5753/sbesc_estendido.2022.228132.
