Privacy-Preserving On-Chain Attestation for Cross-Domain Data Flows via GBFPlus

Abstract

Cross-domain data flows are commonplace in regulated inter-organizational environments, where durable audit evidence must be retained without publicly exposing sensitive flow metadata. This paper presents a privacy-preserving on-chain attestation framework for recorded cross-domain data transfers in a permissioned setting. Its core data structure, termed GBFPlus, extends the Garbled Bloom Filter (GBF) with explicit occupancy indicators, constrained payloads that encode a consistency prefix and an adjacent-domain identifier, and distinct pairing-derived positions. Each domain administrator records observed inbound and outbound transfers in directional GBFPlus instances and periodically commits signed filter attestations to an append-only ledger. An authorized regulator can reconstruct candidate transfer edges from available bilateral attestations, while light clients verify ledger inclusion through Merkle proofs. A traceable anonymous attestation signature conceals the uploader’s cryptographic identity from ordinary ledger observers while retaining regulator-assisted accountability. The security analysis establishes integrity, conditional anonymity, traceability, and metadata-privacy properties for committed attestations under the stated trust assumptions, and the prototype evaluation reports the measured costs of GBFPlus and the signature operations.