IU-TransCert: A Blockchain-Based System for Academic Credentials with Auditability

Abstract

Recent blockchain-based systems for managing credentials show advantages over paper-based procedures. However, issuing credentials with blockchain could conflict with current management rules and policies. One of the possible conflicts is the auditability. Most blockchain-based systems for credentials focus on security, efficiency and privacy while ignoring the auditability of the system. In this paper, we propose a new system IU-TransCert for issuing, verifying, and auditing academic credentials. The system uses a new data structure named the Auditable Merkle Tree that enables credential issuance and built-in auditing capabilities. The auditable data fields can be customized to meet regulations. Credentials are published to the blockchain in the root node of the Auditable Merkle Tree, allowing access for auditors while preserving privacy. The system provides automated and transparent auditing processes for educational authorities to independently verify credentials without involving issuers. We also present a prototype to demonstrate feasibility, and a security analysis to examine protections against threats. The analysis and discussion shows that the proposed system could enhance credential privacy, efficiency, integrity, and auditability across the university ecosystem.