Ensuring Privacy in Controlling Access and Sharing of Information by Supply Chain Entities

Abstract

The importance of using supply chains in industries cannot be denied. Supply chain and its management are vital in any organization and involve coordinating all activities related to producing and delivering goods and services to the end consumer. This complex process requires effective planning, execution, and monitoring. Effective supply chain management ensures that a company can minimize costs, increase efficiency, and maximize profits. In this paper, the concepts and dimensions of supply chain security are examined, and then the effects of cyber threats, fraud, and natural disasters on the supply chain are discussed. After studying the dimensions of security and privacy in the supply chain, we have concluded that the current research has not examined the secure sharing of information in the supply chain. For this reason, our primary focus in this paper is on data confidentiality and the privacy of participants' information. In this paper, we have presented a comprehensive protocol for a supply chain that considers the aspects of information storage, access control, authentication, key agreement, and data sharing in the supply chain. Next, we evaluated our proposed scheme informally and formally using the Scyther tool, and the results obtained indicate that the proposed scheme is secure against known attacks and also meets security requirements. Finally, we show that the proposed scheme performed well in execution time.