Tradicionalne metode preverjanja prisotnosti, kot so ročno beleženje ali QR kode, so podvržene manipulaciji in ne zagotavljajo zadostne varnosti ter zasebnosti uporabnikov. Magistrsko delo naslavlja te izzive z razvojem decentraliziranega sistema za preverjanje fizične prisotnosti, ki temelji na tehnologiji verige blokov in ničelno spoznavnih dokazih (zk-SNARK). Sistem integrira ZoKrates ogrodje za generiranje zasebnih dokazov, geolokacijsko verifikacijo z GPS koordinatami, Ethereum pametne pogodbe ter hibridni pristop k shranjevanju podatkov. Implementirani so bili večplatformski uporabniški vmesniki (spletna in mobilna aplikacija) z različnimi načini potrjevanja prisotnosti. Razvita rešitev predstavlja funkcionalen in robusten sistem, ki omogoča varno ter transparentno preverjanje prisotnosti brez razkrivanja osebnih podatkov uporabnikov.
• Security challenges in RFID, edge computing and blockchain enabled supply chains are analysed, focusing on authentication. • A lightweight mutual authentication protocol is proposed for RFID-based supply chains in edge computing and blockchain systems. • The protocol uses XOR, bitwise rotation, and hash functions to ensure security with minimal computational overhead. • Formal security analysis is performed using the Real-Or-Random (ROR) model and validation with the AVISPA tool. • The protocol is adaptable for various supply chains and customizable to meet different IIoT security needs. This paper addresses security challenges, especially in the authentication mechanism of Industrial Internet of Things (IIoT)-enabled supply chain systems by proposing an enhanced Radio Frequency Identification (RFID) authentication protocol. The current system faces significant security risks due to increased connectivity and data exchange within supply chain networks. The proposed protocol integrates edge computing and blockchain to ensure secure, efficient mutual authentication between RFID tags and supply chain nodes. By utilizing the real-time processing capabilities of edge computing and the decentralization and immutability of blockchain, the protocol enhances the security of data transmitted in the system. The proposed protocol utilizes lightweight cryptographic functions optimized for resource-constrained edge devices, ensuring secure authentication and data transmission without compromising scalability or efficiency. Permissioned blockchain technology further strengthens trust and transparency in the supply chain by providing a decentralized, tamper-resistant ledger. The protocol employs cryptographic techniques such as a cryptographically secure one-way hash function, random number generation function, and circular shift operations to ensure data integrity and confidentiality, achieving mutual authentication, forward secrecy, and resistance to cryptographic attacks. Formal security analysis of the proposed authentication protocol is performed using the Real-Or-Random (ROR) model. The results demonstrate that the protocol offers superior trade-offs in term of security, computational cost, and communication efficiency compared to existing authentication protocols in this field. Simulation of the protocol is performed using Automated Validation of Internet Security Protocols and Applications (AVISPA) tools. Its lightweight design makes it suitable for real-world application in resource-constrained IIoT environments.
The adoption of the Internet of Things in critical applications highlights the need to strengthen security in its perception layer, one of the most vulnerable. This article presents a threat model for this layer, identifying replay, denial-of-service, and network traffic capture attacks as the most critical. In order to counteract them, an optimized variant of an authentication protocol based on zero-knowledge proofs is proposed, improving the efficiency and scalability of the original Hecht protocol. The solution introduces elementary matrices to reduce protocol computational complexity and an explicit mechanism for secure secret management. It is experimentally validated in a QR code-based access control system, simulating a real Internet of Things environment. The results show that the proposed variant is lightweight, efficient, and suitable for resource-constrained devices, especially in web environments, offering a high level of security by not revealing information about the secret key during authentication. Furthermore, a design of experiments optimizes the protocol parameters, minimizing execution time without compromising security. The proposed protocol represents a significant improvement in security and efficiency for authentication in the Internet of Things perception layer.
Traceability in food supply chains is crucial for ensuring safety, enabling effective quality control, and maintaining consumer trust. However, traditional paper-based or digital tracking systems often prove too slow and opaque during food safety incidents or investigations into fraud. To address these limitations, this paper presents a modular Web3 architecture that integrates Ethereum blockchain smart contracts, Internet of Things (IoT) sensors, and machine learning (ML) to achieve end-to-end traceability and sustainability in agrifood supply chains, and to support auditable, partially automated decision-making. The system design separates concerns into layers: an on-chain layer of Ethereum smart contracts for tamper-proof event logging and automated business logic, and an off-chain layer for secure storage of detailed sensor data and documents, linked by crypto-graphic hashes to ensure data provenance. Low-cost IoT sensors are deployed from farm to distributor, continuously monitoring environmental conditions (temperature, humidity, geolocation) and uploading signed, time-stamped summaries to the blockchain. In addition, ML models perform predictive quality control by estimating expected conditions, detecting anomalies, and scoring the conformity of product batches, which enables smart contracts to automatically trigger state transitions (acceptance or dispute escrow of shipments) based on real-time data. Using Ethereum smart contracts, a prototype that manages the life cycle of a specific food product was implemented, and two cases (conformant vs non-conformant shipments) were studied to demonstrate how cryptographically verifiable data and events make decisions transparent and trustworthy.
The advancement of 6G wireless communication technology has facilitated the integration of Vehicular Ad-hoc Networks (VANETs). However, the messages transmitted over the public channel in the open and dynamic VANETs are vulnerable to malicious attacks. Although numerous researchers have proposed authentication schemes to enhance the security of Vehicle-to-Vehicle (V2V) communication, most existing methodologies face two significant challenges: (1) the majority of the schemes are not lightweight enough to support real-time message interaction among vehicles; (2) the sensitive information like identity and position is at risk of being compromised. To tackle these issues, we propose a lightweight dual authentication protocol for V2V communication based on Physical Unclonable Function (PUF). The proposed scheme accomplishes dual authentication between vehicles by the combination of Zero-Knowledge Proof (ZKP) and MASK function. The security analysis proves that our scheme provides both anonymous authentication and information unlinkability. Additionally, the performance analysis demonstrates that the computation overhead of our scheme is approximately reduced 23.4% compared to the state-of-the-art schemes. The practical simulation conducted in a 6G network environment demonstrates the feasibility of 6G-based VANETs and their potential for future advancements.
several industrial sectors including healthcare supply chain operations. The private sector works differently because blockchain technology brings better security as well as elevated accountability and enhanced transparency. The study investigates blockchain implementation in supply chains together with healthcare operations by showing its ability to track goods precisely while reducing theft and accelerating data movement. Independent research trials prove blockchain technology enhances key operational features through better medical data management and insurance claim processing and pharmaceutical supply chain monitoring. Our team observed major performance value increases through blockchain adoption which lowered patient record retrieval times by 40% in healthcare settings. The implementation of blockchain technology led to a service delivery enhancement together with a 50% reduction of administrative expenses which shortened insurance claim processing times. Blockchains reduce fraudulent pharmaceutical products by 30% thus helping the pharmaceutical industry protect both patient safety and product integrity. Through blockchain-enabled supply chain traceability operators detect and react swiftly to tainted products which decreases health hazards affecting the public. These important additions prove vital for industries focused on security because of their need for openness. The research confirms blockchain's ability to improve supply chain management through reduction of risks and increased transparency and better operational integrity and security for healthcare systems. Supply chain managers alongside healthcare providers can cut expenses while delivering faster services to patients through improved security and efficiency of their systems which results in enhanced customer protection. Supply chain operations together with the healthcare sector will operate more efficiently in a secure fiscal manner.
Robert G. Werner, Dominique Briechle, Marit Elke Anke Mathiszig
Currently, the ad hoc, one-way distribution of pharmaceuticals from pharmacies to their customers is inefficient and high in emissions. The HitchhikeBox concept aims to improve the current logistics system by utilizing existing transport channels. This eliminates the need for single-purpose delivery trips and personnel. The system is open to competing service providers, with fully automated contract management, payment and sanctioning of the parties involved. The system utilizes asymmetric encryption and zero-knowledge proofs to guarantee user privacy and non-traceability of deliveries for contracts, payments, and sensor data. The system is designed to be resilient, self-governing and suitable for highly sensitive goods, such as the transport of pharmaceuticals, by ensuring their optimal condition. In addition, the system utilizes smart contracts to conclude and enforce contracts, as well as a distributed off-chain cluster to process and store data in a GDPR-compliant manner. The HitchhikeBox concept facilitates semi-automated, cost-effective and eco-friendly logistics while maintaining reliability, privacy and liability.
Nodes in Mobile Ad Hoc Networks (MANETs) are limited battery powered. That’s why energy efficient routing has become an important optimization criterion in MANETs. The conventional routing protocols do not consider energy of the nodes while selecting routes which leads to early exhaustion of nodes and partitioning of the network. This paper attempts to provide an energy aware routing algorithm. The proposed algorithm finds the transmission energy between the nodes relative to the distance and the performance of the algorithm is analyzed between two metrics Total Transmission energy of a route and Maximum Number of Hops. The proposed algorithm shows efficient energy utilization and increased network lifetime with total transmission energy metric.
Radio Frequency Identification (RFID) promotes the fundamental tracking procedure of the Internet of Things (IoT) network due to its autonomous data collection as well as transfer incurring low costs. To overcome the insecure exchange of tracking data and to prevent unauthorized access, parallel dependency RFID grouping-proof protocol is applied by the reader to authenticate tags simultaneously. However, conventional grouping-proof authentication schemes are not sufficient for the memory constraint RFID tags due to the recurrent utilization of a 128-bit PRNG (Pseudo Random Number Generator) function. Alternatively, the existing parallel-dependency grouping-proof schemes are not able to overcome numerous limitations regarding session establishment, efficient key management, and multicast message communication within the specified group. In this research, a lightweight, secure, and efficient communication protocol is proposed to overcome the aforementioned limitations using Elliptic Curve Cryptography (ECC) and Zero-Knowledge property to establish a session key among the participated tags, reader, and remote server. The proposed scheme can work in offline mode. The proposed ECC-based parallel dependency grouping-proof scheme is referred to as ECC-PDGPP which abides by the rules of the EPC class-1 gen-2 (C1 G2) standard of RFID tags. Finally, the proposed protocol is analyzed using a formal random oracle model and simulated using a well-known AVISPA simulation tool that shows the proposed scheme is well protected against all potential security threats.
Ángel Niebla-Montero, Iván Froiz-Míguez, José Varela-Barbeito, Paula Fraga‐Lamas · 5 authors
Security presents significant challenges due to the exponential growth in the number of Internet of Things (IoT) devices that generate and collect data over the network. It is crucial to ensure the integrity and security of IoT devices, as well as to address issues such as interoperability and trust in data sources. In the proposed article, we present a novel architecture together with its implementation as a proof-of-concept of a traceability and auditing IoT system based on Distributed Ledger Technology (DLT). To demonstrate the applicability of the proposed solution, a smart contract-based system for occupational risk prevention (ORP) has been developed to monitor oxygen concentration in confined spaces that exist in ships and shipyards. The system has been devised for the operators that weld inside the ships of the Spanish shipbuilding company Navantia, which is one of the largest shipbuilders in the world. Specifically, the IOTA network has been used, which benefits the system through its decentralized, secure, and scalable data structure. In addition, the integration of smart contracts allows for establishing predefined rules and conditions, ensuring the execution of logic in a reliable and automated manner. To demonstrate the viability of the system, it has been tested locally and in the IOTA testing environment. Despite the challenges in deploying smart contracts with IOTA, the developed system is considered useful for the traceability and auditing of the oxygen concentrations without the need for any human intervention. Furthermore, it establishes the groundwork for future advancements in IoT traceability and auditing in industrial ORP scenarios.
As electric vehicles become more popular, battery swap stations are gaining attention as a new type of charging facility. However, the charging process for electric vehicles involves privacy information such as user location and charging mode, which can be easily stolen or leaked, posing security risks and personal privacy concerns for users. Therefore, protecting the privacy of electric vehicle battery swap station users has become an important issue. This paper aims to study a privacy protection system for electric vehicle battery swap stations using blockchain technology. First, the basic principles and application scenarios of blockchain technology are introduced. Second, potential privacy leaks in electric vehicle battery swap stations are analysed, and a privacy protection scheme based on blockchain is proposed, including anonymous identity authentication, zero-knowledge proof, and encrypted communication. Third, a blockchain-based privacy protection system for electric vehicle battery swap stations is designed and implemented, and its performance is experimentally evaluated and compared with traditional privacy protection schemes in terms of security and efficiency. This paper demonstrates that the blockchain-based privacy protection scheme for electric vehicle battery swap stations possesses high levels of security and reliability, effectively safeguarding users' privacy information. Furthermore, this scheme exhibits promising application prospects and potential for widespread adoption. With the continuous development and utilization of blockchain technology, the privacy protection scheme for electric vehicle battery swap stations using blockchain is expected to provide users with more secure, reliable, and convenient charging services.
Nowadays, creating a blockchain-based system for supply chain tracing is a complex task. This paper defines a model, a graphical domain specific language, and a set of tools aimed at helping supply chain domain experts to create blockchain based tracing systems for their supply chains. Starting from a graphical representation of the supply chain, the solidity smart contracts implementing the related tracing system are automatically generated by our framework. Small interventions of programmers are required to customize and finalize such smart contracts. A set of web based interfaces to interact with such smart contracts are also automatically generated. We are confident that our results will increase blockchain usage for supply chain traceability thanks to the automatic process of smart contract generation.
This thesis aims to provide new insights into the use of recent advances in non-fungible token (NFT) and Soulbound technology, which are becoming increasingly important in the blockchain context. Specifically, it discusses how these technologies can enable a renewed and strengthened role for the Internet of Everything concept in the complex processes of Industry 5.0, where social, societal, and technical dimensions merge in an irreducible application context. In this context, the concept of reputation and trust becomes crucial, which is closely related to another broader concept: cybersecurity, an ever-present topic. Not to mention another important aspect: privacy, another hot topic. Blockchain technologies, or more generally, DLT (Distributed Ledger Technology), represent valid tools for achieving certain objectives closely tied to these concepts, which become even more crucial in a supply chain.The use of these technologies can improve reputation and trust within a supply chain. Blockchains can provide greater transparency and traceability of information, allowing consumers to better understand the provenance of the products they purchase. This can increase consumer trust in the food supply chain and enhance the reputation of the companies involved. Indeed, the reputation and trust of these actors can also be tracked and automated, making the entire process more reliable, secure, and dynamic. The potential of this approach is illustrated through a simple yet significant industrial case study project on the food supply chain, currently being researched as part of a European collaborative research effort.
Raúl Casanova-Marqués, Joaquín Torres-Sospedra, Jan Hajný, Michael K. Gould
The increasing popularity of wearable-based Collaborative Indoor Positioning Systems (CIPSs) has led to the development of new methods for improving positioning accuracy. However, these systems often rely on protocols, such as iBeacon, that lack sufficient privacy protection. In addition, they depend on centralized entities for the authentication and verification processes. To address the limitations of existing protocols, this paper presents a groundbreaking contribution to the field of wearable-based CIPSs. We propose a decentralized Attribute-based Authentication (ABA) protocol that offers superior levels of privacy protection, untraceability, and unlinkability of user actions. Unlike existing protocols that rely on centralized entities, our approach leverages decentralized mechanisms for authentication and verification, ensuring the privacy of user location data exchange. Through extensive experimentation across multiple platforms, our results demonstrate the practicality and feasibility of the proposed protocol for real-world deployment. Overall, this work opens up new avenues for secure and privacy-preserving wearable-based CIPSs, with potential implications for the rapidly growing field of Internet of Things (IoT) applications.
Dr. P. N. Fale, Payal Dahe, Namita Shendre, Priyanshu Khadaskar · 6 authors
Fake products create a huge negative impact in the market for both buyers and sellers. The sellers fails to deliver the product as per the consumers expectations and the consumers starts to doubt the quality and standards of the company which ultimately results in the negative marketing of the brand whose fake products are being circulated in the market. The most critical part about counterfeit products is that it can be harmful for the consumers. Since, the fake or counterfeit products are not restricted to any particular sector in the market therefore it has become important for us to detect these products and find a way to keep them out of the market. These products can be dangerous if we consider very dominating sectors of market like pharmaceutical and food supplies. To tackle such problems, we need to maintain a data, which is easily accessible to consumers where they can verify the details about the products and build a level of trust regarding the product authenticity. As we all know that no product is safe from counterfeiting due to the continuous growth in counterfeit products in the supply chain. It is degrading company's name and their profit; it also affects the customer, for example if this counterfeiting is done in pharmaceutical field, then it will directly affect the customer's health. To counter this problem, the research work has been proposed but not perfected. In this proposed approach, we will be using Blockchain technology to find genuineness of the product. Blockchain technology is generally a ledger system, which holds all the data of the transactions that take place on it. The unique thing about this technology is that the ledger that we mentioned here is a distributed ledger across a peer-to-peer network. Also, we propose a system where we store product's detail and its ownership status on architecture provided by Ethereum. We will be using QR code, which will be scanned by customer such that he/she will be able to find out the details of the product as manufacturing details, current owner etc. and will be able to determine whether the product is fake or real.
Jing Huey Khor, Michail Sidorov, Seri Aathira Balqis Zulqarnain
Scalability prevents public blockchains from being widely adopted for Internet of Things (IoT) applications such as supply chain management. Several existing solutions focus on increasing the transaction count, but none of them address scalability challenges introduced by resource-constrained IoT device integration with these blockchains, especially for the purpose of supply chain ownership management. Thus, this paper solves the issue by proposing a scalable public blockchain-based protocol for the interoperable ownership transfer of tagged goods, suitable for use with resource-constrained IoT devices such as widely used Radio Frequency Identification (RFID) tags. The use of a public blockchain is crucial for the proposed solution as it is essential to enable transparent ownership data transfer, guarantee data integrity, and provide on-chain data required for the protocol. A decentralized web application developed using the Ethereum blockchain and an InterPlanetary File System is used to prove the validity of the proposed lightweight protocol. A detailed security analysis is conducted to verify that the proposed lightweight protocol is secure from key disclosure, replay, man-in-the-middle, de-synchronization, and tracking attacks. The proposed scalable protocol is proven to support secure data transfer among resource-constrained RFID tags while being cost-effective at the same time.
Despite the widespread use of radio frequency identification and wireless connectivity such as near field communication in electric vehicles, their security and privacy implications in Ad-Hoc networks have not been well explored. This article provides a data protection assessment of radio frequency electronic system in the tire pressure monitoring system (TPMS). It is demonstrated that eavesdropping is completely feasible from a passing car, at an approximate distance up to 50 m. Furthermore, our reverse analysis shows that the staticn-bit signatures and messaging can be eavesdropped from a relatively far distance, raising privacy concerns as a vehicles’ movements can be tracked by using the unique IDs of tire pressure sensors. Unfortunately, current protocols do not use authentication, and automobile technologies hardly follow routine message confirmation so sensor messages may be spoofed remotely. To improve the security of TPMS, we suggest a novel ultralightweight mutual authentication for the TPMS registry process in the automotive network. Our experimental results confirm the effectiveness and security of the proposed method in TPMS.
In agri-food supply chains (ASC), consumers purchase agri-food goods from farmers. During this process, customers emphasize the need for agri-food safety, while producers hope to enhance their revenues. Due to the dynamism and complexity of the Bangladesh ASC, the traceability and control of agri-food goods encounter formidable obstacles. Due to their reliance on intermediaries, legal financial hurdles, Ethereum-based financial solutions, etc., however, most existing solutions cannot adequately meet the traceability and management needs of Bangladesh ASC. To solve these issues, the authors proposed an integrated Agri-food supply chain (IASC) model. In this study, a systematic review of the literature was conducted using a thematic analysis method. In a portion of the model, the authors depicted a linear physical flow to illustrate the relationship and function of intermediaries and to explain Bangladesh ASC’s dependence on intermediaries. The approach incorporates Blockchain technology and IoT to promote transparency, minimize mistake, prevent product delays, remove unethical and illegal actions, improve supply chain (SC) management, track the whereabouts of the goods, and eventually increase consumer and supplier trust. The article also mentions that crypto currency-based financial transactions between stakeholders in the supply chain are now unlawful in Bangladesh. For blockchain API, a mobile banking and digital payment-based solution has been proposed. Finally, the blockchain-based Hyperledger Sawtooth API has been suggested so that clients can trace the entire history of a product by scanning the QR code on the packaging. Since Bangladesh’s economy is primarily based on agriculture, this research can assist in boosting Bangladesh’s economy. The paper would also contribute to the reduction of corruption and the improvement of firmer/grower and consumer satisfaction. The findings also pave the way for future studies to implement blockchain technology in ASC without relying on Ethereum-based financial flow solutions.
Blockchain-based supply chains provide a new solution to decentralized multi-party product management. However, existing methods, including ID-based and cryptographic-based solutions, cannot achieve both counterfeit resistance and decentralization in supply chain management. We argue that this dilemma comes from the disconnection and inconsistency of the data records and physical product entities. This paper proposes RF-Chain, a novel decentralized supply chain management solution that uniquely combines data record authentication and physical-layer RFID tag authentication to effectively achieve credibility and counterfeit resistance. The main contribution of this work is to integrate physical-layer authentication of cheap commodity RFID tags into a blockchain-based information management system, and RF-Chain is the first to do so. The proposed cross-layer authentication can effectively defend against counterfeit attacks without relying on a central key management service. Real-world experiments utilizing the Ethereum (ETH) platform and more than 100 RFID tags demonstrate that RF-Chain is secure, effective, time-efficient, and cost-efficient.
Sep 12, 2022·2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech)
The digitization of a supply chain involves satisfying several functional and non-functional context specific requirements. The work presented herein builds on efforts to elicit trust and profit requirements from actors in the Swedish livestock supply chain, specifically the beef supply chain. Interviewees identified several benefits related to data sharing and traceability but also emphasized that these benefits could only be realized if concerns around data security and data privacy were adequately addressed. We developed a data sharing platform as a response to these requirements. Requirements around verifiability, traceability, secure data sharing of potentially large data objects, fine grained access control, and the ability to link together data objects was realized using distributed ledger technology and a distributed file system. This paper presents this data sharing platform together with an evaluation of its usefulness in the context of beef supply chain traceability.
M. Vijayalakshmi, S. Mercy Shalinie, Ming‐Hour Yang, Shou-Chuan Lai · 5 authors
Supply chain management (SCM) governance is the streamline of the IoT product life cycle from its production to delivery. Integrating blockchain with supply chain management is essential to ensure end-to-end tracking, trustiness between manufacturers and customers, fraud and counterfeit elimination, and customizing administrative costs and paperwork. This paper proposes an RFID ownership transfer protocol with the help of zk-SNARKs (Zero Knowledge-Succinct Noninteractive Arguments of Knowledge) using Ethereum blockchain. When the owner performs RFID transfer, the transferred information will be recorded on the blockchain using smart contracts. When using a smart contract to transfer ownership on the Ethereum blockchain, because the content on the blockchain will not be tampered with, all accounts in the Ethereum can view the transfer results and verify them. The privacy of the supply chain is attained by generating the proof of product code via zk-SNARKs algorithm. This algorithm also enhances the scalability of the supply chain system by creating a trusted setup in off-chain mode.
Open access
Blockchain Technology Applications and Security
Physical Unclonable Functions (PUFs) and Hardware Security
Cristian Valencia-Payan, José Fernando Grass Ramírez, Gustavo Ramírez-González, Juan Carlos Corrales
Recently there has been an increase in the use of Blockchain technology for multiple purposes; one of them has been food traceability. This technology has increased quality control, safety, and reliability. So, the producers are looking for better ways to trace the products at any supply chain stage to ensure their quality. A smart contract is a transaction protocol that execute automatically when a predefined set of conditions are met. In this paper, we propose a smart contract to monitor the status of the coffee beans in the transport and storage stages with data validation. Using the Hyperledger Fabric Blockchain tool, we deploy a test network of two actors, also known as organizations. The organizations come together to form a channel in the network. Each has a valid identity that helps them verify their signatures over any transaction. We selected JavaScript to write our proposed smart contract for experimental and evaluation purposes. To evaluate the smart Contract, we use Hyperledger Caliper, obtaining an average throughput of 10.4tps and average latency of 0.7s, being fast enough to be used in a real environment, considering the current control conditions of the coffee beans.
Tobacco products are an addictive commodity. According to the World Health Organization’s (WHO) latest statistics data, tobacco kills more than eight million people each year. In 2003, the WHO proposed the Framework Convention on Tobacco Control (FCTC) to provide an effective framework for the control of tobacco products to governments around the world. In the field of tobacco products, the hardest problem is how to prevent counterfeit tobacco products and smuggling. To solve the problems, we proposed a blockchain-based traceable and verifiable logistics system for tobacco products with global positioning system (GPS) and radio-frequency identification (RFID) Technologies. In this research, we provide an overview of system architecture, and also define the protocol and the smart contract in every phase that stores data into the blockchain center. We realized a decentralized database and authentication system that uses blockchain and smart contract technology; every protocol in every phase was designed to achieve the integrity of data and non-repudiation of message. Every tobacco product’s shipping record will be completed by scanning the RFID tag and retrieving the GPS with a mobile reader, where the record will be updated and validated in the blockchain center. In the end, the security and costs of the system were analyzed, and a comparison was made with the EU’s (European Commission) method. Our system is more flexible for transportation, more secure in the communication protocol, and more difficult to tamper and forge data. In general, the proposed scheme solved the problem of tobacco products counterfeiting and tracking issues.