Traditional access control models, such as Attribute-Based Access Control (ABAC), Role-Based Access Control (RBAC), and Token-Based Access Control (TBAC), suffer from scalability, auditability, and delegation shortcomings when used in multi-organizational settings. To mitigate these limitations, we present a hybrid model that integrates TBAC with Organization-Based Access Control (OBAC) through a dual-token mechanism. Implemented on the Hyperledger Fabric platform, our model enables decentralized and auditable access control through on-chain policy enforcement. We utilize smart contracts to facilitate fine-grained delegation, revocation, and role changes across organizational boundaries. Our experimental findings reveal an appreciable reduction in latency and higher throughput than ABAC-based models, thereby confirming the viability of our model for inter-organizational workflows.Empirical results demonstrate that our proposed access control model achieves an average latency reduction of up to 85.47% and a throughput improvement of approximately 59.78% when evaluated against baseline ABAC systems under identical experimental conditions.

Keywords