E-voting reduced the cost of election and provided convenience to some extent as compared to the traditional approach of pen and paper but it was considered to be unreliable as anyone having access to the machine physically can obstruct the machine and alter the votes. Also, in order to control the entire procedure from electronic voting to electoral results and tracking the outcomes, a central system is required. Voters are not completely secure as vote can be targeted easily. It also possesses a great threat to the right to vote and transparency. For long, different e-voting systems have been provided with the goal of increasing security and minimizing cost. With the launch of Ethereum, a decentralized platform which runs decentralized applications on it, a secured voting system now seems possible. Making a project successful requires hard work and study. For study purposes, some previous works have been studied and gathered a lot of information which makes the project possible. The job portal-based application and some other things have been learned from the study. The methodology is a very important process for a project. Without this process, a project can’t build up properly. It is a blueprint of a project. This project has used a static waterfall methodology which has a feedback path from one phase to its existing phase. It will allow accounts connected to the network to vote in the election and all votes come in the real time. Application's logical code will deploy in smart contract to a local Ethereum blockchain. It will have a test-driven development (TDD) part, means tests against the smart contract to ensure that the code is bug free. It will also have a client-side application that will allow users connected to the network to interact with the smart contract and vote in the election. User-Interface will develop using HTML, CSS, Java Script. This paper provides a solution for removing inconveniences from conventional elections using blockchain that has emerged as an exciting technology for various application due to its unique characteristics that outperform other technologies. The goal of this research is to establish a system for e-voting that is decentralized rather than centralized by using blockchain technology that guarantees protection to electorate’s identity, data transfer privacy and variability by an open and transparent voting process.
Simona‐Vasilica Oprea, Adela Bârã, Anca-Ioana Andreescu, Marian Pompiliu Cristescu
Digitalization advances in many fields due to its clear advantages and facilities especially in pandemic times when crowds are to be avoided. E-voting is gaining importance as voting using laptops, mobile phones or tablets is more practical. Hence, human counting which leads to unintentional errors or fraud could be eliminated. Furthermore, software applications can reduce the costs of the classic election process and physical infrastructure. In this paper, we propose to identify the most critical specifications of an e-voting application, find a solution for elections in universities and compare our solution with others. The goal is to propose a conceptual architecture using encrypted functions and two stages: voting and validation, separating layers and roles, that is based on blockchain tables and innovative interactions between actors (voters and voting committee) and the two software components (web application and database). For replicability, the conceptual architecture is depicted and formalized using several Unified Modeling Language (UML) diagrams. Furthermore, in order to provide proof of concept, the initial steps in implementing the proposed solution are showcased.
Metaverse is expected to rely on massive Internet of Things (IoT) connections so it inherits various security threats from the IoT network and also faces other sophisticated attacks related to virtual reality technology. As traditional security approaches show various limitations in the large-scale distributed metaverse, this paper proposes MetaCIDS, a novel collaborative intrusion detection (CID) framework that leverages metaverse devices to collaboratively protect the metaverse. In MetaCIDS, a federated learning (FL) scheme based on unsupervised au-toencoder and an attention-based supervised classifier enables metaverse users to train a CID model using their local network data, while the blockchain network allows metaverse users to train a machine learning (ML) model to detect intrusion network flows over their monitored local network traffic, then submit verifiable intrusion alerts to the blockchain to earn metaverse tokens. Security analysis shows that MetaCIDS can efficiently detect zero-day attacks, while the training process is resistant to SPoF, data tampering, and up to 33% poisoning nodes. Performance evaluation illustrates the efficiency of MetaCIDS with 96% to 99% detection accuracy on four different network intrusion datasets, supporting both multi-class detection using labeled data and anomaly detection trained on unlabeled data.
Karlo Angelo F. Cabugwang, Raphael Christen K. Enriquez, Bienvenido E. Villabroza, Christian Pulmano
There are cases of corruption and fraud within the Philippine government that have gone under the radar, often due to a lack of transparency and verifiability. The objective of this study is to prototype a blockchain network that can run a government process as a decentralized application such that it can enhance transparency and verifiability in the public sector. This can be accomplished by identifying a government process that would be converted into a decentralized application. One of these processes would be converted into a decentralized application. Afterwards, a blockchain framework should be identified — one which can create a public permissioned blockchain network. This framework can be used to design and implement the prototype blockchain network which the decentralized application can run on. The final prototype constitutes of smart contracts deployed on an Ethereum test network with a web frontend to easily interact with it. Mechanisms of the application that are deemed necessary to transparency and verifiability of the system are also identified. Finally, the variable cost of the system and possible limitation is explored in the paper. In this regard, the prototype offers a foundation with which other decentralized applications can follow and build upon. This is to promote transparency and verifiability within and among government processes.
Polepaka Sanjeeva, M. Sai Sathwik, G. Sai Prasad, G. Praneeth Reddy · 6 authors
A decentralized and automated online voting system refers to an electronic voting method that leverages Blockchain technology to guarantee both transparency and security. It removes the need for intermediaries, making it more efficient and cost-effective than traditional voting methods. Aim of the paper is to develop an online voting system using Blockchain technology for secure and transparent voting. The proposed approach involves developing a decentralized voting system using Ethereum Blockchain technology. Smart contracts are used to manage the voting process and ensure its integrity. The datasets used in this paper will consist of mock voting data to simulate a real-world scenario. The results and discussions include an analysis of the system’s performance in terms of security, scalability, and usability. Future enhancements include integrating biometric authentication for enhanced security and accessibility.
Open access
Blockchain Technology Applications and Security
Internet Traffic Analysis and Secure E-voting
Advanced Steganography and Watermarking Techniques
The purpose of this article is to propose a framework named IoT-AC/Bc to secure smart cities. This article describes a new method that integrates Role-Based Access Control (RBAC) and Zero-Knowledge Proof (ZKP) models based on IoT and blockchain technologies. This method enables fast access authentication on smart city gates using ZKP, which provides an extra layer of security to address access control challenges. The framework consists of an Internet of Things Access Control-based Blockchain Smart Contract that manages user authentication, access session identities, and asset real-time interactions; and a Blockchain Ledger Management Smart Contract that implements distributed access control and tracks the ledger history of different activities. The framework achieves availability, scalability, multi-factor authentication, and decentralization, which strengthens distribution, role authority, access rights, and concurrent identity access requests. The results are demonstrated through a comparative analysis focused on the number of multithreaded requests, the cost of smart contract deployment, the multi-factor authentication performance for users’ interactions with the smart city gates, and the security strength levels. The framework’s performance effectiveness is evaluated through a case study that consists of various scenarios. The framework allows improving the security level by 94% under low and medium attack strength and 89% under high attack strength for 18 security attacks. This paper is novel because the framework uses ZKP over a blockchain network as an extra cryptographic technique with RBAC as a logical access control model to achieve fast accessibility authorization for users’ transactions while preserving their private identity on smart city gates. Keywords: Access Control, Blockchain, Internet of Things, Role-Based Access Control, Smart Cities, Multi-Factor Authentication DOI： https://doi.org/10.35741/issn.0258-2724.58.4.56
Tariq Alsboui, Muhammad Hussain, Hussain Al-Aqrabi, Richard Hill · 5 authors
With the vast development of Internet-of-Things (IoT) ecosystem, various types of information, such as healthcare records and physical resources, are integrated for different types of applications. Due to the sheer number of connected IoT devices, which generate a large amount of data, Distributed Ledger Technology, such as Blockchain and IOTA have been recently applied in developing access control models, yet they involve significant energy due to mining, low throughput, non-scalable, and computational overhead that is not acceptable for IoT resource-constrained devices. In this paper, we propose a Scalable Decentralized and Lightweight Access Control framework (SDAC) by using the IOTA platform. IOTA is an emerging distributed ledger technology that has significant features for IoT, such as zero fees transactions, scalability, security and energy efficiency. The proposed SDAC aims to improve security, authorize, and authenticate users when accessing data by using the IOTA Masked Authenticated Messaging (MAM) protocol. MAM ensures access control by encrypting and granting permission to only authorized users. The experimental results indicate that IOTA MAM is a feasible solution that can be used for managing authorization in the IoT domain.
Liqun Chen, Changyu Dong, Nada El Kassem, Christopher J. P. Newton · 5 authors
Direct Anonymous Attestation (DAA) was designed for the Trusted Platform Module (TPM) and versions using RSA and elliptic curve cryptography have been included in the TPM specifications and in ISO/IEC standards. These standardised DAA schemes have their security based on the factoring or discrete logarithm problems and are therefore insecure against quantum attackers. Research into quantum-resistant DAA has resulted in several lattice-based schemes. Now in this paper, we propose the first post-quantum DAA scheme from symmetric primitives. We make use of a hash-based signature scheme, which is a slight modification of SPHINCS+, as a DAA credential. A DAA signature, proving the possession of such a credential, is a multiparty computation-based non-interactive zero-knowledge proof. The security of our scheme is proved under the Universal Composability (UC) model. While maintaining all the security properties required for a DAA scheme, we try to make the TPM’s workload as low as possible. Our DAA scheme can handle a large group size (up to 2 60 group members), which meets the requirements of rapidly developing TPM applications.
In 2016, Locher and Haenni (Locher andHaenni, 2016) proposed an e-voting scheme that offers verifiability, everlasting vote privacy, and computational receipt-freeness, as well as an informal discussion of how the scheme achieves such properties.We advance this line of work by proposing a new cryptographic scheme that provably satisfies those properties as well as everlasting participation privacy and efficient tallying.Receiptfreeness relies on deniable vote updating and verifiable null ballot posting, generated from public knowledge stored on the bulletin board.The everlasting vote and participation privacy properties directly result from the hash-based commitment scheme and efficient zero-knowledge proofs (SNARKs).Finally, we provide mathematical proofs for all the properties, including a new game-based definition of participation privacy.
Electronic Government (e-Government) systems constantly provide greater services to people, businesses, organisations, and societies by offering more information, opportunities, and platforms with the support of advances in information and communications technologies. This usually results in increased system complexity and sensitivity, necessitating stricter security and privacy-protection measures. The majority of the existing e-Government systems are centralised, making them vulnerable to privacy and security threats, in addition to suffering from a single point of failure. This study proposes a decentralised e-Government framework with integrated threat detection features to address the aforementioned challenges. In particular, the privacy and security of the proposed e-Government system are realised by the encryption, validation, and immutable mechanisms provided by Blockchain. The insider and external threats associated with blockchain transactions are minimised by the employment of an artificial immune system, which effectively protects the integrity of the Blockchain. The proposed e-Government system was validated and evaluated by using the framework of Ethereum Visualisations of Interactive, Blockchain, Extended Simulations (i.e. eVIBES simulator) with two publicly available datasets. The experimental results show the efficacy of the proposed framework in that it can mitigate insider and external threats in e-Government systems whilst simultaneously preserving the privacy of information.
Asma Jodeiri Akbarfam, Sina Barazandeh, Deepti Gupta, Hoda Maleki
Access control is a critical component of computer security, governing access to system resources. However, designing policies and roles in traditional access control can be challenging and difficult to maintain in dynamic and complex systems, which is particularly problematic for organizations with numerous resources. Furthermore, traditional methods suffer from issues such as third-party involvement, inefficiency, and privacy gaps, making transparent and dynamic access control an ongoing research problem. Moreover detecting malicious activities and identifying users who are not behaving appropriately can present notable difficulties. To address these challenges, we propose DLACB, a Deep Learning Based Access Control Using Blockchain, as a solution to decentralized access control. DLACB uses blockchain to provide transparency, traceability, and reliability in various domains such as medicine, finance, and government while taking advantage of deep learning to not rely on predefined policies and eventually automate access control. With the integration of blockchain and deep learning for access control, DLACB can provide a general framework applicable to various domains, enabling transparent and reliable logging of all transactions. As all data is recorded on the blockchain, we have the capability to identify malicious activities. We store a list of malicious activities in the storage system and employ a verification algorithm to cross-reference it with the blockchain. We conduct measurements and comparisons of the smart contract processing time for the deployed access control system in contrast to traditional access control methods, determining the time overhead involved. The processing time of DLBAC demonstrates remarkable stability when exposed to increased request volumes.
Qinxu Ding, Weibiao Xu, Zhiguo Wang, David Kuo Chuen Lee
This paper aims to provide a comprehensive overview of the different voting schemes used in DAO governance. We will examine the various features of these schemes and compare their differences. We propose a new hypothetical voting mechanism specifically designed for decentralized and permissionless DAO governance. This new scheme, which incorporates incentive designs, is intended to be more efficient than existing schemes and can be easily adapted to a permissioned scenario. Through this examination and proposal, we hope to contribute to the ongoing discourse on how to govern decentralized autonomous organizations effectively.
Abstract—This paper investigates the integration of Zero-Knowledge Proofs (ZKP) and OAuth 2.0 to enhance anonymity and security in multi-agent distributed systems. We propose an approach that allows agents to authenticate and prove possession of specific data without revealing the underlying details. Additionally, we outline a potential access control strategy using ZKP for anonymity, allowing agents to validate their access rights without identity exposure. When combined with OAuth 2.0, this mechanism provides a framework for secure data access. While the proposed methods offer promising solutions to security, privacy, and anonymity challenges in multi-agent systems, they also highlight the need for further research and validation to confirm their effectiveness.
Sachi Chaudhary, Shail N. Shah, Riya Kakkar, Rajesh Gupta · 8 authors
Purpose: With the advancement and modernization of Information and Communication Technology, electronic voting (e-voting) has been adopted across the globe for conducting a secure and efficient voting procedure. However, e-voting can be easily exposed to various malicious attacks such as denial-of-service, malware, insider, compromised credentials, etc., that can risk the voter’s privacy and affect the final voting results. Thus, we have considered the decentralized and immutable blockchain technology for completing the voting procedure securely. Nevertheless, many researchers have considered blockchain to mitigate the security and privacy issues of the voting procedure, but they ignored the aspect of cost-efficiency, latency, and response time while voting. Method: The idea of the proposed mechanism is to deploy and implement the smart contract in the Remix Integrated Development Environment (IDE) involving number of voters electing the candidate with various functionalities. Moreover, we considered the amalgamation of blockchain and IPFS to overcome the data storage cost issues of blockchain for voters and candidates communicating through 5G wireless network. The 5G network, with its low latency, high availability, and high reliability facilitates high data rate and reliable communication between voters and candidates to complete the voting procedure efficiently. Results: The deployed smart contract of the proposed voting mechanism highlight various functionalities required for electing the candidate by the voters. Moreover, the deployed smart contract is evaluated and analyzed considering various performance metrics such as gas consumption analysis for smart contract functions and number of voters, cost analysis for smart contract functions, bit error rate, and storage cost comparison with the traditional scheme. We have also verified the security of the proposed voting mechanism using Echidna security tool which shows the election of candidate without any threat. Conclusion: Finally, we have presented a blockchain-based voting mechanism in which IPFS and 5G is employed to avail the cost-efficient, reliable, and secure candidate election by the voters. Moreover, the voters and candidates can communicate with lower response time and high reliability using 5G network so that smart contract consisting of all the functionalities related to the candidate election can be executed efficiently in the Remix IDE.
Open access
Blockchain Technology Applications and Security
Advanced Steganography and Watermarking Techniques