Jan Lauinger, Jens Ernstberger, Andreas Finkenzeller, Sebastian Steinhorst
Web users can gather data from secure endpoints and demonstrate the provenance of sensitive data to any third party by using privacy-preserving TLS oracles. In practice, privacy-preserving TLS oracles remain limited and cannot verify larger, sensitive data sets. In this work, we introduce new optimizations for TLS oracles, which enhance the efficiency of selectively verifying the provenance of confidential web data. The novelty of our work is a construction which secures an honest verifier zero-knowledge proof system in the asymmetric privacy setting while retaining security against malicious adversaries. Concerning TLS 1.3 in the one round-trip time (1-RTT) mode, we propose a new, optimized garble-then-prove paradigm in a security setting with malicious adversaries. Our improvements reach new performance benchmarks and facilitate a practical deployment of privacy-preserving TLS oracles in web browsers.
With the rapid development of Decentralized Finance (DeFi) and Real-World Assets (RWA), the importance of blockchain oracles in real-time data acquisition has become increasingly prominent. Using cryptographic techniques, threshold signature oracles can achieve consensus on data from multiple nodes and provide corresponding proofs to ensure the credibility and security of the information. However, in real-time data acquisition, threshold signature methods face challenges such as data inconsistency and low success rates in heterogeneous environments, which limit their practical application potential. To address these issues, this paper proposes an innovative dual-strategy approach to enhance the success rate of data consensus in blockchain threshold signature oracles. Firstly, we introduce a Representative Enhanced Aggregation Strategy (REP-AG) that improves the representativeness of data submitted by nodes, ensuring consistency with data from other nodes, and thereby enhancing the usability of threshold signatures. Additionally, we present a Timing Optimization Strategy (TIM-OPT) that dynamically adjusts the timing of nodes' access to data sources to maximize consensus success rates. Experimental results indicate that REP-AG improves the aggregation success rate by approximately 56.6\% compared to the optimal baseline, while the implementation of TIM-OPT leads to an average increase of approximately 32.9\% in consensus success rates across all scenarios.
Javier José Díaz Rivera, Ricard Vilalta, Raúl Muñoz, Pol Alemany · 5 authors
In complex network systems, multiple Software Defined Networking (SDN) controllers are often deployed across different domains to manage diverse underlay technologies. This multi-controller environment introduces significant challenges in ensuring security and trust, as traditional secure methods such as Public Key Infrastructures (PKI), which rely on Certificate Authorities (CAs), often struggle to provide the necessary flexibility, transparency, and protection against tampering. Distributed Ledger Technologies (DLT) present a compelling solution by enabling decentralized management and the immutable recording of network configurations. This paper proposes an approach where SDN controllers from various domains act as valida-tor nodes within a DLT framework, utilizing Byzantine Fault Tolerance (BFT) as the consensus mechanism. This creates a distributed trust model that enhances collaborative network management by balancing trust among network controllers. By implementing a private, permissioned ledger, data integrity is enforced, and access is restricted to authorized stakeholders, thus maintaining consistency and trust among network configurations through a verifiable record of all transactions. The performance and operational efficiency of this DLT-based approach in multi-SDN controller environments are further evaluated. Experimental results demonstrate the practical benefits and viability of integrating DLT with SDN environments for collaborative network management.
Blockchain interoperability protocols enable cross-chain asset transfers or data retrievals between isolated chains, which are considered as the core infrastructure for Web 3.0 applications such as decentralized finance protocols. However, existing protocols either face severe scalability issues due to high on-chain and off-chain costs, or suffer from trust concerns because of centralized designs. In this paper, we propose \texttt{MAP}, a trustless blockchain interoperability protocol that relays cross-chain transactions across heterogeneous chains with high scalability. First, within \texttt{MAP}, we develop a novel \textit{cross-chain relay} technique, which integrates a unified relay chain architecture and on-chain light clients of different source chains, allowing the retrieval and verification of diverse cross-chain transactions. Furthermore, we reduce cross-chain verification costs by incorporating an optimized zk-based light client scheme that adaptively decouples signature verification overheads from inefficient smart contract execution and offloads them to off-chain provers. For experiments, we conducted the first large-scale evaluation on existing interoperability protocols. With \texttt{MAP}, the required number of on-chain light clients is reduced from $O(N^2)$ to $O(N)$, with around 35\% reduction in on-chain costs and 25\% reduction for off-chain costs when verifying cross-chain transactions. To demonstrate the effectiveness, we deployed \texttt{MAP} in the real world. By 2024, we have supported over six popular public chains, 50 cross-chain applications and relayed over 200K cross-chain transactions worth over 640 million USD. Based on rich practical experiences, we constructed the first real-world cross-chain dataset to further advance blockchain interoperability research.
The integration of blockchain technology into compliance auditing presents a transformative opportunity for enhancing Governance, Risk, and Compliance (GRC) mechanisms within hybrid cloud IT governance frameworks. This review explores the potential of blockchain to address long-standing challenges in auditability, transparency, and trust across distributed and heterogeneous computing environments. By leveraging blockchain’s immutable ledger, smart contract automation, and decentralized consensus protocols, organizations can ensure real-time verification of compliance activities, secure audit trails, and enforceable policy adherence across cloud infrastructures. The paper critically evaluates existing literature on blockchain-enabled compliance auditing, identifies gaps in current GRC integration practices within hybrid cloud ecosystems, and discusses emerging frameworks that align regulatory compliance with dynamic IT operations. Key challenges such as interoperability, scalability, and regulatory acceptance are analyzed alongside opportunities for enhanced accountability, cross-border compliance, and audit automation. The review concludes by outlining future research directions, emphasizing the need for standardized blockchain-GRC interfaces, regulatory sandboxing, and industry-specific implementation models to fully realize the benefits of blockchain in hybrid cloud IT governance.
In distributed computing, data trading mechanisms are essential for ensuring the sharing of data across multiple computing nodes. Nevertheless, they currently encounter considerable obstacles, including low accuracy in matching trading parties, ensuring fairness in transactions, and safeguarding data privacy throughout the trading process. In order to address these issues, we put forward a data trading security scheme based on zero-knowledge proofs and smart contracts. In the phase of preparing the security parameters, the objective is to reduce the complexity of generating non-interactive zero-knowledge proofs and to enhance the efficiency of data trading. In the pre-trading phase, we devise attribute atomic matching smart contracts based on precise data property alignment, with the objective of achieving fine-grained matching of data attributes between trading parties. In the trading execution phase, lightweight cryptographic algorithms based on elliptic curve cryptography (ECC) and non-interactive zero-knowledge proofs are employed for the dual encryption of trading data and the generation of attribute proof contracts, thus ensuring the security and privacy of the data. The results of experiments conducted on the Ethereum platform in an industrial IoT scenario demonstrate that our scheme maintains stable and low-cost consumption while ensuring accuracy in matching and privacy protection.
Gabriel Fernández-Blanco, Iván Froiz-Míguez, Paula Fraga‐Lamas, Tiago M. Fernández‐Caramés
The educational system manages extensive documentation and paperwork, which can lead to human errors and sometimes abuse or fraud, such as the falsification of diplomas, certificates or other credentials. In fact, in recent years, multiple cases of fraud have been detected, representing a significant cost to society, since fraud harms the trustworthiness of certificates and academic institutions. To tackle such an issue, this article proposes a solution aimed at recording and verifying academic records through a decentralized application that is supported by a smart contract deployed in the Ethereum blockchain and by a decentralized storage system based on Inter-Planetary File System (IPFS). The proposed solution is evaluated in terms of performance and energy efficiency, comparing the results obtained with a traditional Proof-of-Work (PoW) consensus protocol and the new Proof-of-Authority (PoA) protocol. The results shown in this paper indicate that the latter is clearly greener and demands less CPU load. Moreover, this article compares the performance of a traditional computer and two Single-Board Computers (SBCs) (a Raspberry Pi 4 and an Orange Pi One), showing that is possible to make use of the latter low-power devices to implement blockchain nodes but at the cost of higher response latency. Furthermore, the impact of Ethereum gas limit is evaluated, demonstrating its significant influence on the blockchain network performance. Thus, this article provides guidelines, useful practical evaluations and key findings that will help the next generation of green blockchain developers and researchers.
Puneeta Singh, Shrddha Sagar, Sofia Singh, Haya Mesfer Alshahrani · 6 authors
The Crucial and costly process of verifying medical documents frequently depends on centralized databases. Nevertheless, manual validation of document verification wastes a great deal of time and energy. The application of Blockchain technology could potentially alleviate the problem by reducing fraud and increasing efficiency. Non-transferable Soul-bound tokens (SBTs) can be a safe and unbreakable way to authenticate medical records by generating encrypted code, which allows the user to authenticate a portion of data. Within the paper, we provide a blockchain-based SBT-based automatic mechanism for authentication and verification of records. Soul-bound tokens generate a decentralized, immutable identity or credential system that is tied to a record. Through cloud computing, the system can reduce the verification time by accessing a decentralized database. Blockchain systems can lower platform costs and determine the optimal allocation of resources across a dispersed network by utilizing deep learning algorithms. Two advantages of utilizing blockchain technology are less fraud and increased efficiency. SBTs and cloud computing enable the procedure to be expedited and decentralized databases to be readily available. The suggested system's scalability and potential uses in other industries may be the subject of future research.
Sana Naz, Mohsin Javaid Siddiqui, Scott Uk-Jin Lee
To be a stakeholder/validator/token holder is not so difficult in the Proof of Stake (POS)-based blockchain networks; that is why the number of validators is large in these networks. These validators play an essential part in the block creation process in the PoS-based blockchain network. Due to the large validators, the block creation time and communication message broadcasting overhead get increased in the network. Many consensus algorithms use different techniques to reduce the number of validators, such as Delegated Proof of Stake (DPoS) consensus algorithms, which select the set of delegators via stake transactions for the block creation process. In this paper, we propose S&SEM, a secure and speed-up election process to select the ‘z’ number of validators/delegators. The presented election process is based on a traditional voting style with multiple numbers of rounds. The presented election mechanism reduces the possibility of malicious activity in the voting process by introducing a special vote message and a round that checks duplicate votes. We did horizontal scaling in the network to speed up the election process. We designed an improved incentive mechanism for the fairness of the election process. The designed reward and penalty procedure controls the nodes’ behaviors in the network. We simulate the S&SEM, and the result shows that the presented election process is faster and more secure to select delegators than the existing process used by DPOS.
The world is rapidly heading towards digitization and digital documentation.The COVID-19 pandemic has highlighted the significance of digitization in our daily lives.Nowadays, fake documents are widely available and easy to obtain, harming both our financial system and social trust.Consequently, there is a growing demand for procedures to verify and authenticate various crucial documents, including transactional, financial, governmental, and personal certificates, as well as educational certificates.This type of practice can be done using blockchain and cryptography technology.In this paper, we propose a Blockchain based Digital Identity Management System (BDIMS) that empowers organizations to generate instantaneously authenticated and tamper-resistant digital credentials.It issues a signed document and stores the signature on the blockchain.The verifier can easily verify the signature from the blockchain instantly using the digital signature concept.BDIMS also provides a QR-code system for real-time identity verification.It also introduces zero-knowledge proof for verifying the part of an identity without revealing the original statement.Furthermore, a user can store and share all their identities on a single platform using BDIMS.The proposed model effectively addresses the shortcomings of traditional methods by ensuring a comprehensive and streamlined approach.It successfully bridges the gaps and overcomes the difficulties inherent in conventional document verification systems, meeting all the necessary criteria for a robust and reliable verification process.
Background The healthcare industry is significantly transforming toward digital and smart healthcare. Blockchain, as an emerging distributed collaborative paradigm, offers a promising solution for ensuring trustworthiness and high availability of services in this evolving healthcare. This paper aims to provide a comprehensive survey of blockchain-based applications in smart healthcare. Methods We first present real-world blockchain use cases in smart healthcare and related fields, outlining the motivations for this study. Next, we review cutting-edge blockchain applications in various domains, including health data sharing, public health management, drug supply chains, insurance claims, and the Internet of Medical Things. A detailed analysis of several blockchain-based healthcare data sharing scenarios is included. Results The findings illustrate the diverse applications of blockchain technology in enhancing healthcare systems, along with a detailed examination of challenges related to technical implementation and adoption. Conclusion We discuss the challenges facing blockchain integration in smart healthcare and propose potential solutions to guide future research in this area.
Rahul Ganpatrao Sonkamble, Anupkumar M. Bongale, Shraddha Phansalkar, Deepak Dharrao
An Electronic Health Record (EHR) store essential and sensitive patient's medical information. Since health information is highly confidential data, it should be accessible with the consent of the patient. Blockchain based EHR management system offers improvised privacy and patient-centric approach. EHR management systems are available with multiple blockchain platforms. Generally, EHRs are maintained at several independent blockchain platforms. EHR management systems should be capable of securely exchange data on cross platform blockchain network. The interoperability in such blockchain platforms should facilitate seamless cross-chain interaction and information exchange. This article proposes a method that facilitates secure EHR exchange on Ethereum and Hyperledger fabric network using hepatitis dataset. The key contributions of the proposed method include:•Hash lock based interoperable cross-chain method for EHR exchange across Ethereum and Hyperledger fabric.•Additional security to the EHR is ensured by partitioning EHR as on-chain (blockchain platform) and off-chain InterPlanetary File System (IPFS)•Secure Password Authentication-Based Key Exchange (SPAKE) based session management for EHR exchange across two parties.The proposed patient centric method is validated to ensures the successful exchange of patient EHR across Ethereum and Hyperledger fabric.
Abdul Razzaq, Tao Zhang, Muhammad Numair, Abdulrahman Alreshidi · 9 authors
Abstract Metaverse—a three‐dimensional computational environment—combines physical and virtual reality to enable social relationships and immersive experiences by mimicking real‐world scenarios. Metaverse is considered the third wave of the internet revolution (exploiting Web 3.0), leveraging upcoming technologies such as extended reality and artificial intelligence shaping a new era of human–‐machine interactions. In recent years, increased research and development on educational technologies (EduTech) based on blockchain technology has seen substantial growth of metaverse‐based solutions within the higher education context. This research aims to synergize blockchain technology and metaverse environments to conduct online exams (metaExam) in a trustworthy, reliable, and secure way. The synergy between blockchain and the metaverse brings various benefits, such as improved security, cost effectiveness, and increased efficiency in the online examination process. One of the central features of the proposed solution metaExam is to leverage cryptographic protocols via blockchain to control data access, making verification faster and protecting against misuse. Exam scores and grades are stored on a blockchain ledger using a digital signature method to enhance security. We validated the proposed solution by testing a prototype on the Ethereum platform using the Sepolia Testnet network using Microsoft Windows environment. Evaluation results indicate (i) query response time (10–50 ms), (ii) and query execution performance (CPU utilization between 1%–5%) offering computationally feasible solution. This research contributes by integrating blockchain and metaverse technologies to offer a solution metaExam that can offer improved security and immersive user experience for exam management. The proposed solution and its validation can provide insights into transforming online exams, offering a fresh perspective on addressing concerns about exam grade authenticity and verifying academic credentials in EduTech.
One of the main security challenges when federating separate Internet of Things (IoT) administrative domains is effective Identity and Access Management, which is required to establish trust and secure communication between federated IoT devices. The primary goal of the work is to develop a “lightweight” protocol to enable authentication and authorization of IoT devices in federated environments and ensure the secure communication of IoT devices. We propose a novel Lightweight Authentication and Authorization Framework for Federated IoT (LAAFFI) which takes advantage of the unique fingerprint of IoT devices based on their configuration and additional hardware modules, such as Physical Unclonable Function, to provide flexible authentication and authorization based on Distributed Ledger technology. Moreover, LAAFFI supports IoT devices with limited computing resources and devices not equipped with secure storage space. We implemented a prototype of LAAFFI and evaluated its performance in the Hyperledger Fabric-based IoT framework. Three main metrics were evaluated: latency, throughput (number of operations or transactions per second), and network resource utilization rate (transmission overhead introduced by the LAAFFI protocol). The performance tests conducted confirmed the high efficiency and suitability of the protocol for federated IoT environments. Also, all LAAFFI components are scalable as confirmed by tests. We formally evaluated LAAFFI security using Verifpal as a formal verification tool. Based on the models developed for Verifpal, we validated their security properties, such as message secrecy, authenticity, and freshness. Our results show that the proposed solution can improve the security of federated IoT environments while providing zero-day interoperability and high scalability. Compared to existing solutions, LAAFFI is more efficient due to the use of symmetric cryptography and algorithms adapted for operations involving IoT devices. LAAFFI supports multiple authorization mechanisms, and since it also offers authentication and accountability, it meets the requirements of Authentication, Authorization and Accounting (AAA). It uses Distributed Ledger (DL) and smart contracts to ensure that the request complies with the policies agreed between the organizations. LAAFFI offers authentication of devices belonging to a single organization and different organizations, with the assurance that the encryption key will be shared with another device only if the appropriate security policy is met. The proposed protocol is particularly useful for ensuring the security of federated IoT environments created ad hoc for special missions, e.g., operations conducted by NATO countries and disaster relief operations Humanitarian Assistance and Disaster Relief (HADR) involving military forces and civilian services, where immediate interoperability is required.
Abstract The widespread adoption of cloud computing has dramatically altered how data is stored, processed, and accessed in an era. The rapid development of digital technologies characterizes all this. The widespread adoption of cloud services has introduced new obstacles to guaranteeing secure and expeditious access to sensitive data. Organizations of all types find user-friendly and cost-effective solutions crucial, which is why they consider cloud services essential. The availability of the cloud hampers access control security in systems that are constantly and remotely changing. Conventional methods of access control are efficient, but the advanced world of technology exposes them to more threats. Applying blockchain technology to cloud access control systems, which are decentralized, transparent, and tamper-proof, has overcome these challenges. This paper aims to discuss the potential of blockchain in enhancing access management, security and trust in cloud computing. Besides, this scholarly article reviews the evolving area of blockchain-based access control systems and synthesizes the findings of 118 selected papers from various academic repositories. Based on this systematic review of the studies, twelve different types of blockchain-based access control paradigms can be identified. This work provides a critical analysis of the research on blockchain technology in access control systems, with a focus on scalability, compatibility, and security challenges. It also highlights areas that require further research and proposes directions for future research to advance this rapidly growing area of scholarship.
The growing digitization of education presents significant challenges in maintaining the integrity and trustworthiness of educational content. Traditional systems often fail to ensure data authenticity and prevent unauthorized alterations, particularly in the evaluation of teachers' professional activities, where demand for transparent and secure assessment mechanisms is increasing. In this context, Blockchain technology offers a novel solution to address these issues. This paper introduces a Blockchain-enhanced framework for the Electronic Platform for Expertise of Content (EPEC), a platform used for reviewing and assessing educational materials. Our approach integrates the Polygon network, a Layer-2 solution for Ethereum, to securely store and retrieve encrypted reviews, ensuring both privacy and accountability. By leveraging Python, Flask, and Web3.py, we interact with a Solidity-based smart contract to securely link each review to a unique identifier (UID) that connects on-chain data with real-world databases. The system, containerized using Docker, facilitates easy deployment and integration through API endpoints. Our implementation demonstrates significant cost savings, with a 98\% reduction in gas fees compared to Ethereum, making it a scalable and cost-effective solution. This research contributes to the ongoing effort to implement Blockchain in educational content verification, offering a practical and secure framework that enhances trust and transparency in the digital education landscape.
In the digital information age, the traditional centralized storage model is vulnerable to security attacks, which leads to the spread of false information and difficulty in tracing. This study proposes a decentralized campus information security system using blockchain technology and builds a tamper-proof, traceable, and privacy-protected architecture through Ethereum and Inter Planetary File System (IPFS). The system uses zero-knowledge proof and homomorphic encryption technology to ensure privacy and uses IPFS as an off-chain storage mechanism to improve the scalability of the system and data access speed. Experimental results show that compared with traditional digital applications, the system performs well in ensuring the authenticity and security of information and effectively protects user privacy.
Jean Gilbert Mbula Mboma, Obed Tshimanga Tshipata, Witesyavwirwa Vianney Kambale, Mohamed Salem · 6 authors
Verifying the authenticity of documents, whether digital or physical, is a complex and crucial challenge faced by a variety of entities, including governments, regulators, financial institutions, educational establishments, and healthcare services. Rapid advances in technology have facilitated the creation of falsified or fraudulent documents, calling into question the credibility and authenticity of academic records. Most existing blockchain-based verification methods and systems focus primarily on verifying the integrity of a document, paying less attention to examining the authenticity of the document’s actual content before it is validated and registered in the system, thus opening loopholes for clever forgeries or falsifications. This paper details the design and implementation of a proof-of-concept system that combines GPT-3.5’s natural language processing prowess with the Ethereum blockchain and the InterPlanetary File System (IPFS) for storing and verifying documents. It explains how a Large Language Model like GPT-3.5 extracts essential information from academic documents and encrypts it before storing it in the blockchain ensuring document integrity and authenticity. The system is tested for its efficiency in handling both digital and physical documents, demonstrating increased security and reliability in academic document verification.
Md. Rafid Haque, Sakibul Islam Munna, Sabbir Ahmed, Md. Tariqul Islam · 6 authors
Centralized version control systems (VCS) are vital for software development but pose risks of data loss and ownership disputes. While blockchain offers a decentralized alternative, existing solutions are often hindered by high latency, compromising the real-time collaboration essential for modern workflows. This study introduces a novel hybrid architecture combining the security of the Ethereum blockchain and the InterPlanetary File System (IPFS) with two key contributions: 1) Shamir's Secret Sharing (SSS) to create a trust-minimized model for key distribution, and 2) an authoritative-first, optimistic-fallback retrieval protocol utilizing a temporary middleware to decouple the user experience from blockchain confirmation delays. We implemented a full prototype and conducted a comprehensive performance evaluation on the public Sepolia testnet. Our results demonstrate that this architecture not only provides a secure, auditable, and resilient platform for source code hosting but also achieves highly competitive user-perceived performance. Our user-perceived push time reduces submission latency by up to 49% compared to a standard git push for common repository sizes, proving that a well-designed decentralized VCS can balance the core tenets of security and decentralization with the practical need for speed and efficiency.
Noor Ul Ain Tahir, Umer Rashid, Hassan Jalil Hadi, Naveed Ahmad · 7 authors
This study investigated the potential of blockchain technology to transform Electronic Health Record (EHR) administration, integrity, and security. EHRs store vital health information such as medical history, diagnosis, prescriptions, and imaging findings, which may be shared with healthcare professionals to improve patient care. The existing EHR systems have a centralized framework. These centralized systems have a single point of failure, data management, integrity, and security concerns. Blockchain technology provides a solution to these problems by delivering benefits such as safety, privacy, secrecy, and decentralization. This study presents a framework for adopting blockchain technology in EHR systems, providing a comprehensive, modular, and straightforward approach. Our proposed framework addresses the constraints of existing EHR systems by providing a platform for connected and interoperable EHRs. The proposed blockchain-based patient health records management framework demonstrates the potential to address the limitations of current centralized health records systems. It offers benefits such as data privacy and security, interoperability, audibility, decentralization, and automation through the use of smart contracts. The proposed framework is implemented in Ethereum. The evaluation, i.e., cost and performance results, show that this solution is reasonable and may be used on any blockchain network, whether it is permissioned or permissionless.
Identity-based threshold signature (IDTHS) allows a threshold number of signers to generate signatures to improve the deterministic wallet in the blockchain . However, the IDTHS scheme cannot determine the identity of malicious signers in case of misinformation . To solve this challenge, we propose an identity-based threshold (multi) signature with private accountability (for short AIDTHS) for privacy-preserving blockchain . From the public perspective, AIDTHS is completely private and no user knows who participated in generating the signature. At the same time, when there is a problem with the transaction, a trace entity can trace and be accountable to the signers. We formally define the syntax and security model of AIDTHS. To address the issue of identifying malicious signers, we improve upon traditional identity-based threshold signatures by incorporating zero-knowledge proofs as part of the signature and leveraging a tracer holding tracing keys to identify all signers. Additionally, to protect the privacy of signers, the signature is no longer achievable by anyone, which requires a combiner holding the keys to produce a valid signature. We give a concrete construction of AIDTHS and prove its security. Finally, we implement the AIDTHS scheme and compare it with existing schemes. The key distribution algorithm of AIDTHS takes 13.04 ms and the signature algorithm takes 34.60 μ s . The verification algorithm takes 1 s , which is one-third of the time the TAPS scheme uses.
Vid Keršič, Martin Domajnko, Sašo Karakatič, Muhamed Turkanović
Z vse pogostejšo uporabo interneta in migracijo storitev iz fizičnega sveta v digitalni, postajajo vprašanja o varnosti, zasebnosti in digitalnem lastništvu osebnih podatkov vse pogostejša. Ena izmed ključnih tehnologij, ki omogoča razvoj rešitev na tem področju, so ničelno spoznavni dokazi (ang. zero-knowledge proofs, ZKP). ZKP so kriptografski protokoli, pri katerih dokazovalec dokaže pravilnost poljubne trditve preveritelju, ne da bi pri tem razkril dodatne informacije ali svoje podatke. V članku predstavimo ZKP protokole in njihove razlike, s posebnim poudarkom na dveh najpogostejših družinah protokolov: zk-SNARK in zk-STARK. Njihovo uporabno vrednost prikažemo na področju samo-upravljane in decentralizirane identitete ter na področju strojnega učenja. Pri decentralizirani identiteti ZKP omogočajo deljenje podatkov brez razkritja zasebnih informacij, medtem ko pri strojnem učenju omogočajo preverljivost izhodov modelov. To pomeni, da lahko uporabnik preveri, ali je bil za generiranje napovedi dejansko uporabljen pravilno izbran model.
At the current stage of autonomous driving, monitoring the behavior of safety stewards (drivers) is crucial to establishing liability in the event of an accident. However, there is currently no method for the quantitative assessment of safety steward behavior that is trusted by multiple stakeholders. In recent years, deep-learning-based methods can automatically detect abnormal behaviors with surveillance video, and blockchain as a decentralized and tamper-resistant distributed ledger technology is very suitable as a tool for providing evidence when determining liability. In this paper, a trusted supervision paradigm for autonomous driving (TSPAD) based on multimodal data authentication is proposed. Specifically, this paradigm consists of a deep learning model for driving abnormal behavior detection based on key frames adaptive selection and a blockchain system for multimodal data on-chaining and certificate storage. First, the deep-learning-based detection model enables the quantification of abnormal driving behavior and the selection of key frames. Second, the key frame selection and image compression coding balance the trade-off between the amount of information and efficiency in multiparty data sharing. Third, the blockchain-based data encryption sharing strategy ensures supervision and mutual trust among the regulatory authority, the logistic platform, and the enterprise in the driving process.