With the increase of smart factories and smart cities following the recent 4th industrial revolution, internal user authentication and authorization have become an important issue. The user authentication model using the server-client structure has a problem of forgery of the access history caused by the log manipulation of the administrator and unclearness of the responsibility. In addition, users must independently manage the authentication method for each service authentication. In this paper, to solve the above problem, the researchers propose an integrated ID model based on a hybrid blockchain. The proposed model is implemented as two layers of Ethereum and Hyperledger Fabric: the former layer is responsible for integrated authentication, and the latter layer is responsible for access control. The physical pass or application for user authentication and authorization are integrated to one ID through the proposed model. In addition, the decentralized blockchain ensures the integrity and transparency of the stored access history, and it also provides non-repudiation of authority and access history.
Blockchain technology was introduced through Bitcoin in a 2008 whitepaper by the mysterious Satoshi Nakamoto. Since its inception, it has gathered great attention because of its unique properties-immutability and decentralized authority. This technology is now being implemented in various fields such as healthcare, IoT, data management, etc., apart from cryptocurrencies. As it is a newly emerging technology, researchers and organizations face many challenges in integrating this technology into other fields. Consent management is one of the essential processes in an organization because of the ever-evolving privacy laws, which are introduced to provide more control to users over their data. This paper is a systematic review of Blockchain's application in the field of consent and privacy data management. The review discusses the adaptation of Blockchain in healthcare, IoT, identity management, and data storage. This analysis is formed on the principles of the Preferred Reporting Items for Systematic Reviews and Meta-Analysis (PRISMA) and a process of systematic mapping review. We provide analysis of the development, challenges, and limitations of blockchain technology for consent management.
Edi Surya Negara, A N Hidyanto, Ria Andryani, Deni Erlansyah
Abstract The development of Blockchain and Smart Contract technology provides significant changes in the form of solutions to social technology problems, such as the problem of document forgery on e-government services. In its implementation of government services, there are several challenges faced, such as social technology problems, blockchain mechanisms, virtual machines, and smart contract code levels, and automation of disintermediation. This paper summarizes and discusses the methodology and research results from various recent papers on the state of the use of smart contracts in e-government services and the weaknesses and potential problems in the use of e-government services.
Abstract Cryptocurrencies are proliferating as instantiations of blockchain, which is a transparent, distributed ledger technology for validating transactions. Blockchain is thus said to embed trust in its technical design. Yet, blockchainâs technical promise of trust is not fulfilled when applied to the cryptocurrency ecosystem due to many social challenges stakeholders experience. By investigating a cryptocurrency chatbot (Brokerbot) that distributed information on cryptocurrency news and investments, we explored social tensions of trust between stakeholders, namely the botâs developers, users, and the bot itself. We found that trust in Brokerbot and in the cryptocurrency ecosystem are two conjoined, but separate challenges that users and developers approached in different ways. We discuss the challenging, dual-role of a Brokerbot as an object of trust as a chatbot while simultaneously being a mediator of trust in cryptocurrency, which exposes the social-technical gap of trust. Lastly, we elaborate on trust as a negotiated social process that people shape and are shaped by through emerging ecologies of interlinked technologies like blockchain and conversational interfaces.
Since the last decade, Smart home systems achieved popularity due to their increase in comfort and improvement in quality life. Smart homes with the integration of Internet of Things devices by embedding intelligence into sensors and actuators, data, and services can be communicated efficiently and in a more secure manner. In a Smart home environment, there can be several users who will need to access services from various Smart home devices at any point in time either individually or concurrently. In an Internet of Things, it is possible to process and exchange data without human intervention. Therefore, because of this full autonomy, these entities need to recognize, authenticate entities and ensure the integrity of their exchanged data. In a conventional smart home system, every device has to authenticate separately using credentials. Such authentication is not required in a trusted environment. The same account can be shared across different devices and when shared, the authentication process can be reduced to a consent-based process. In this research, assuming that there are multiple smart devices connected to each other and to the cloud via the hub. Also, there can be multiple sets of users accessing the same set of smart devices and related services through different accounts. The problem with conventional authentication is no common authentication or authorization system to avoid redundant logins. In this regard, Blockchain has been considered for its potential to provide a framework for decentralized-based applications based on the concept of Smart Contracts. By combining the power of Blockchain technology and public-key cryptography it is possible to ensure secure authentication and identification of people and devices. This work avoids the duplicate authentication for accessing the same service and does the communication in a limited latency. Most of the important security goals such as authentication, authorization, confidentiality, and integrity are met.
Nowadays the whole world is immersed in data. Starting from creating the data, using the data, sharing the data, everyone has control of their respective data. Even the companies rely highly on data as all of their storage and analysis have been computerized. In most traditional methods, the database which is being deployed is deemed trustworthy. But the threat always persists no matter how secure the database is. Attackers perform various types of attacks possible to gain access, tamper or perform any kind of compromising action on the database which will hamper the working of a company/individual.So, the goal is to achieve security against those attacks and additionally avoiding users to obtain information which they are not authorized to.However, there exists a series of relational data such as medical databases where there are two or more parties involved in a database and the trust factor automatically takes a hit. In this paper, I propose a model, that provides authorization, confidentiality, accessibility and privacy for a healthcare database. \n\n
Sheikh Mohammad Idrees, Mariusz Nowostawski, Roshan Jameel
The COVID-19 pandemic has caused substantial global disturbance by affecting more than 42 million people (as of the end of October 2020). Since there is no medication or vaccine available, the only way to combat it is to minimize transmission. Digital contact tracing is an effective technique that can be utilized for this purpose, as it eliminates the manual contact tracing process and could help in identifying and isolating affected people. However, users are reluctant to share their location and contact details due to concerns related to the privacy and security of their personal information, which affects its implementation and extensive adoption. Blockchain technology has been applied in various domains and has been proven to be an effective approach for handling data transactions securely, which makes it an ideal choice for digital contact tracing apps. The properties of blockchain such as time stamping and immutability of data may facilitate the retrieval of accurate information on the trail of the virus in a transparent manner, while data encryption assures the integrity of the information being provided. Furthermore, the anonymity of the user's identity alleviates some of the risks related to privacy and confidentiality concerns. In this paper, we provide readers with a detailed discussion on the digital contact tracing mechanism and outline the apps developed so far to combat the COVID-19 pandemic. Moreover, we present the possible risks, issues, and challenges associated with the available contact tracing apps and analyze how the adoption of a blockchain-based decentralized network for handling the app could provide users with privacy-preserving contact tracing without compromising performance and efficiency.
The Internet of Things (IoT) is expected to improve the individualsâ quality of life. However, ensuring security and privacy in the IoT context is a non-trivial task due to the low capability of these connected devices. Generally, the IoT device management is based on a centralized entity that validates communication and connection rights. Therefore, this centralized entity can be considered as a single point of failure. Yet, in the case of distributed approaches, it is difficult to delegate the right validation to IoT devices themselves in untrustworthy IoT environments. Fortunately, the blockchain may provide decentralization of overcoming the trust problem while designing a privacy-preserving system. To this end, we propose a novel privacy-preserving IoT device management framework based on the blockchain technology. In the proposed system, the IoT devices are controlled by several smart contracts that validate the connection rights according to the privacy permission settings predefined by the data owners and the stored record array of detected misbehavior of each IoT device. In fact, smart contracts can immediately detect the devices that have vulnerabilities and have been hacked or pose a threat to the IoT network. Therefore, the data ownerâs privacy is preserved by enforcing the control over the own devices. For validation purposes, we deploy the proposed solution on a private Ethereum blockchain and give the performance evaluation.
The principle of data protection by design, as it is enshrined in article 25 of the GDPR, is difficult to apply in blockchains. This article will assess how the reliance on asymmetric encryption and other privacy enhancing technological architectures -necessary in a blockchainbased system-approach both user control and data protection by design compliance from the single scope of anonymization and unlinkability. Data subjects' rights, accountability, and the potential shortcomings of applied technological constraints are thus sidelined. Ultimately, this limited understanding of technological privacy, acts as a misguiding set of principles for technological co-regulation through standardisation in blockchains. The standardization of these choices without a holistic analysis of data protection by design imperatives could ultimately weaken the position of data subjects, whose trust in the technological protections of personal data might prove to be relatively misplaced.
Public blockchains have reached high popularity among technically inclined people, laypersons and researchers alike. Similarly, privacy has gained much attention in the same circles. This attention and high sensitivity of information transmitted in blockchains, lead more and more blockchain-based systems, especially cryptocurrencies, to provide privacy for their users. Popular approaches include ring signatures or zero-knowledge proofs to achieve unlinkable payments within the blockchain. However, these systems solely examine privacy by considering the blockchain and its embedded transactions. The underlying peer-to-peer network of a public blockchain is rarely considered. This leaves the dissemination of transactions open for privacy attacks, as the IP address of the originator of a transaction can be mapped to their real-world identity. In this thesis, we look into the important privacy aspects of broadcasting blockchain transactions. We collect and analyse data of a large blockchain network and construct a privacy-preserving latency estimator. Building on the insights gained from the analysis, we combine dining-cryptographers networks with a secret sharing technique and layer a flood-and-prune broadcast on top, to provide enforced k-anonymity to network participants. To increase the flexibility of this approach, we extend two established privacy protocols. First, we extend a dining-cryptographers based group messaging protocol to transmit arbitrary length messages. Further, we optimize the protocol for common cases, to improve its performance for various environments, especially blockchain transaction dissemination. As a performant intermediate privacy layer, we transform adaptive diffusion from a contact graph protocol to a computer network protocol. We achieve this by changing the underlying network assumptions and the attacker model. We derive optimal forwarding probabilities based on a statistical network model of unstructured peer-to-peer networks. These two sub-protocols are combined in an intertwined layering approach to create 3P3, a flexible privacy-preserving broadcast protocol. Lastly, to manage the groups required for 3P3 and other proposed and common protocols, we propose Pixy. Pixy is a privacy increasing group creation scheme, allowing for filtering and testing of group participants to establish trust. The system allows for smaller group sizes while maintaining privacy guarantees of previous systems, or better privacy for same-sized groups. The software, concepts, data and models in this thesis help researchers and developers of privacy preserving network protocols. Developers can use 3P3, tuning its parameters to the needs of their network. Researchers can build on the data, concepts and models to create novel schemes and generalizations of our insights. This improves privacy for all users of modern and future networks.
Mohammad Hossin shafiabadi, Mohammad Hossin shafiabadi
The purpose of the present research was to introduce a blockchain-based voting system so that any state, including totalitarian states, can show interest in using it. In this method, a hybrid voting system with two centralized and distributed systems was used. Its centralized system is one of the most common voter identification and polling models, and its distributed system, which is designed with Ethereum public blockchain, is voting for voters. Totalitarian states are not interested in announcing the results online. Also, the lack of trust in E-voting systems by both states and voters has led to E-voting in important political elections in most states as support for manual or paper voting. Based on the results of field research with this voting system, it was possible to create a 7 min break between the end of the voting process and the announcement of the results for political considerations. This break can be increased by agreement. The results of the votes cannot be manipulated in any way. Survey results should also be communicated to voters before the voting process. This voting system can improve the level of democracy and maximum participation. It is hoped that the spread of distributed technologies, especially the blockchain, will pave the way for the spread of justice and democracy around the world.
A blockchain is a class of technology that allows the creation and management of \ndifferent forms of decentralised and distributed digital ledgers where data are stored, \nchronologically recorded, transferred and finally shared between the ânodesâ participating in \na peer-to-peer network. These features prima facie clash with the GDPR that informs the EU \ndata protection legislation and is based on a centralised representation of the reality in which \ndata are processed, collected, and recorded in a database controlled by identified subjects. \nThe underpinning idea of this article is diametrically opposed to the one which considers the \ntechnology not GDPR-compliant by default. First, the author argues that the points of tension \ncan be mitigated by technical and/or governance methods, thus acting at both application and \ninfrastructure level. In essence, a case-by-case analysis is the only feasible option to assess the \ncompliance between the regulation and the technology. Second, a further and closer look at \nblockchainâs underlying concepts reveals how both the GDPR and the blockchain have the \nsame purposes but different approaches. More interestingly, the article suggests that the \nblockchain could be seen as a Privacy Enhancing Technology (PET), which might help data \nsubjects gain more control over their personal data and hence support one of the GDPRâs \npurposes (recital 7).
Jan 1, 2021·Proceedings of the ... Annual Hawaii International Conference on System Sciences/Proceedings of the Annual Hawaii International Conference on System Sciences
Francesca Fallucchi, Marco Gerardi, Michele Petito, Ernesto William De Luca
In an ever more digitized world where information and data are increasingly dematerialized, the question of how to certify intellectual property and define when a document has been created or modified without the presence of any third-party guarantor inevitably arises. This document proposes a decentralized method that, by exploiting blockchain technology and distributed peer-to-peer (P2P) networks, makes it possible to historicize information in such a way that it is not possible for a user to alter its dating, attribute ownership or modify it by impersonating the author. The data certification (document, image, film, data archive, etc.) takes place through the creation of an immutable relationship between the owner and the data. At the legal level, many countries are beginning to regulate blockchain technology so that it can be used in many areas, such as the production chain, the Internet of Things or Public Administration. In this paper we present a solution to promote digital government and greater transparency, through the use of a framework based on the Ethereum blockchain, smart contracts and a decentralized application.
Oyinomomo-emi Emmanuel Akpe, Denis Kisina, Samuel Owoade, Abel Chukwuemeke Uzoka · 6 authors
The increasing complexity of digital platforms, driven by cloud-native architectures, distributed applications, and user-centric services, necessitates robust, scalable, and secure identity management frameworks. This paper explores recent advances in federated authentication and identity management, emphasizing their role in enabling seamless and secure access across interconnected digital ecosystems. Beginning with a foundational overview of identity managementâs evolutionâfrom traditional siloed systems to federated and decentralized modelsâthe study outlines key technologies such as SAML, OAuth, OpenID Connect, and emerging paradigms like decentralized identity and blockchain-based verification. It further investigates the integration of artificial intelligence and machine learning for adaptive authentication, anomaly detection, and risk-based decision-making, alongside privacy-enhancing technologies ensuring compliance with data protection regulations such as GDPR. Through the examination of scalability, interoperability, and security challenges, the paper identifies best practices and architectural strategies critical for real-world implementations. The discussion culminates in practical implications for industry adoption across sectors such as healthcare, finance, and e-commerce, and highlights future research directions including the development of standardized identity frameworks, AI integration, and decentralized identity systems in multi-cloud and edge computing environments. This study offers a comprehensive synthesis of current trends and technologies that are shaping the next generation of identity management in scalable digital platforms.
Myeonghyun Kim, Joonyoung Lee, Kisung Park, Yohan Park · 6 authors
Car-sharing systems can solve various urban problems by providing shared vehicles to people and reducing the operation of personal vehicles. With the development of the Internet of Things, people can easily use a shared car through simple operations on their mobile devices. However, the car-sharing system has security problems. Sensitive information, such as the userâs identity, location information, and access code, is transmitted through a public channel for car-sharing. Hence, an attacker can access this information for illegal purposes, making the establishment of a secure authentication protocol essential. Furthermore, the traditional car-sharing system is established on the centralized structure, so there is a single point of failure. Thus, the design of a decentralized car-sharing scheme is vital for solving the centralized problem. This study designed a decentralized car-sharing scheme using blockchain. Specifically, blockchain technology was used to provide a decentralization car-sharing service and ensure data integrity. The participant entities of the proposed system can be authenticated anonymously. The proposed car-sharing system can be secured against various attacks and provide mutual authentication using informal analysis, automated validation of internet security protocols and applications (AVISPA) simulation, and BAN logic analysis. The computation costs and communication costs of the proposed scheme were also analyzed.