Risk Analysis of Blockchain Application for Aerospace Records Management

Abstract

<div class="section abstract"><div class="htmlview paragraph">Blockchain as a technology has been successfully deployed in the financial industry. As the technology continues to mature, there are opportunities to use this to solve operational challenges in Aerospace. One of the common use cases is replacing paper records as a proof of compliance with a blockchain enabled distributed ledger.</div><div class="htmlview paragraph">Commonly available open source blockchain frameworks have security ingrained in the components. However, replacing paper records with a blockchain based distributed ledger will require investigation of potential risks involved in the end to end usage of this technology for records management.</div><div class="htmlview paragraph">The objective of this paper is to elucidate potential risks in an aviation record management workflow environment enabled by blockchain and suggest requirements to mitigate the risks.</div><div class="htmlview paragraph">In addition requirements for Blockchain based systems will be proposed, which will guarantee minimum functional requirements like <ul class="list disc"><li class="list-item"><div class="htmlview paragraph">Protection of confidential information</div></li><li class="list-item"><div class="htmlview paragraph">Integrity of the information in a record</div></li><li class="list-item"><div class="htmlview paragraph">Safeguards against unauthorized access</div></li></ul></div><div class="htmlview paragraph">The potential gaps are understood using an illustrative end to end blockchain based process along with their conceptual high level intermediate steps. For example: <ul class="list disc"><li class="list-item"><div class="htmlview paragraph">Authenticated trusted digital identities of the participants whose transactions are recorded in distributed ledgers</div></li><li class="list-item"><div class="htmlview paragraph">Trusted source which distributes these identities and has a mechanism to update, revoke and safely secure these identities</div></li><li class="list-item"><div class="htmlview paragraph">Trusted methods to ensure detection if the digital identities are compromised</div></li><li class="list-item"><div class="htmlview paragraph">Trusted method to demonstrate controlled authorization process for digital identities as per access control rules</div></li><li class="list-item"><div class="htmlview paragraph">Trusted methods to demonstrate the generation of accounting logs</div></li></ul></div></div>