The adoption of modern health records is growing more mature, yet security issues always accompany it. Interplanetary file system (IPFS) and blockchain are developing technologies with decentralization, distributed fault tolerance, and trustworthiness. Using IPFS and blockchain technology to tackle medical health record data security issues is a very promising trend, and it is presently being utilized to secure medical health record data security. This article first explains the idea of IPFS and highlights the classification of existing IPFS and blockchain techniques before briefly discussing distributed ledger to tackle the existing medical health record data security challenges and faults. Finally, to preserve medical health records, a new medical health record storage architectural model based on IPFS and blockchain technologies is presented.
Perubahan teknologi semakin lama semakin pesat diberbagai bidang, termasuk teknologi digital yang merupakan revolusi dari teknologi analog dan elektronik. Dekade ini semua serba bermetamorfosis menjadi digital, termasuk akhirnya muncul uang digital, yaitu cryptocurrency. Cryptocurrency sebagai bentuk digital cash beroperasi dengan bantuan teknik yang disebut kriptografi. Kriptografi sendiri adalah proses yang menerjemahkan semua informasi yang dapat dibaca menjasi kode yang tidak dapat dipecah sama sekali. Cryptocurrency menggunakan blockchain sebagai buku utama, yang semua sistemnya dikelola oleh yang disebut penambang. Mata uang crypto memiliki sistem yang sedikit rumit yang tidak dengan mudah dapat dipahami, jadi pengetahuan tentang cryptocurrency mau tidak mau harus dipelajari, dipahami agar dalam implementasi tidak mengalami dampak yang merugikan. Jenis jenis cryptocurrency, serta kekurangan dan kelebihannya akan dikupas sekilas dalam artikel ini.
Authentication and authorization constitute the essential security component, access control, for preventing unauthorized access to cloud services in mobile cloud computing (MCC) environments. Traditional centralized access control models relying on third party trust face a critical challenge due to a high trust cost and single point of failure. Blockchain can achieve the distributed trust for access control designs in a mutual untrustworthy scenario, but it also leads to expensive storage overhead. Considering the above issues, this work constructed an authentication and authorization scheme based on blockchain that can provide a dynamic update of access permissions by utilizing the smart contract. Compared with the conventional authentication scheme, the proposed scheme integrates an extra authorization function without additional computation and communication costs in the authentication phase. To improve the storage efficiency and system scalability, only one transaction is required to be stored in blockchain to record a user's access privileges on different service providers (SPs). In addition, mobile users in the proposed scheme are able to register with an arbitrary SP once and then utilize the same credential to access different SPs with different access levels. The security analysis indicates that the proposed scheme is secure under the random oracle model. The performance analysis clearly shows that the proposed scheme possesses superior computation and communication efficiencies and requires a low blockchain storage capacity for accomplishing user registration and updates.
In recent years, the rapid and wide-ranging implementation of a cloud-based electronic healthcare record (EHR) storage system has shown significant advantages in effectively managing EHR for healthcare organizations and patients. However, in the cloud-based EHR storage model, the patients no longer have direct control of their EHR, whereas healthcare organizations may access the outsourced EHR whenever necessary. It may always cause severe security issues, specifically when healthcare organizations collude with the cloud service provider (CSP) to conceal any medical malpractice. Therefore, to deal with these significant concerns, we have introduced a novel blockchain based efficient tamper-proof model for EHR storage in decentralized InterPlanetary File System (IPFS) storage in the cloud - “TAC-EHR”. The key idea of the model is that every operation involves outsourcing EHRs and integrating these EHRs into a transaction on the public blockchain provides computationally unforgeability to the outsourced EHRs. Moreover, the proposed EHR storage model can also manage batch outsourcing, i.e., numerous EHR outsourcing for multiple patients by multiple doctors simultaneously, in an effective manner. The experimental and security analysis demonstrates that the proposed blockchain based cloud-assisted EHR storage model efficiently assures intractability computationally and outperforms the existing models in terms of computational and communication overhead.
Yijia Liu, Jie Wang, Zheng Yan, Zhiguo Wan · 5 authors
Internet of Things (IoT) aims to create a vast network with billions of things that can seamlessly create and exchange data, establishing intelligent interactions between people and objects around them. It is characterized with openness, heterogeneity, and dynamicity, which inevitably introduce severe security, privacy, and trust issues that hinder the widespread application of IoT. Trust management (TM) holds great promise in identifying malicious nodes, maintaining trust relationships, and enhancing system security. Traditional TM systems (TMSs) can be classified into centralized, semi-centralized, and distributed ones, all three of which suffer from critical challenges and thus are not sufficient for facilitating IoT development. Blockchain, as a disruptive technology, can help addressing the challenges of TM in IoT, thanks to its advanced features, such as decentralization, consistency, and tamper-proofing. As a result, blockchain-based TM (BC-TM) has been extensively studied in recent years to achieve decentralized TM in IoT. However, it still lacks a comprehensive survey on the current state of the arts. To fill this gap, in this article, we conduct a serious survey on BC-TM in IoT. We first propose a set of evaluation criteria that should be met by a TMS in IoT. Then, we propose a taxonomy of TMSs and continue with a thorough review on BC-TM in IoT by employing the proposed criteria. In the end, based on the review, a series of open issues are identified, and future research directions are suggested.
Dennis Krummacker, Benedikt Veith, Daniel Lindenschmitt, Hans D. Schotten
Abstract This manuscript investigates viable Distributed Ledger Technology (DLT) architecture approaches to be used as basis for the distribution of integrity verification data. We discuss what can be a Trust Anchor and how the property of trust can be enabled as a service for mobile communications infrastructures. This follows up on a preceding publication, in the course of which a service was developed that can be utilized to create trust and traceability in transactions between other services. Crucial for the integrity of such an audit trail is proof for which side was committing, in case a tampering was detected. For such verification in the aftermath, mechanisms for the distribution of meta data are necessary. Where our ultimate goal is to develop a versatile framework for Trust as a Service (TaaS), the work at hand contributes the investigation on header distribution. We put a major focus on providing Trust as a Service (TaaS) especially in the mobile communications domain since a reliable concept for trustworthiness is indispensable for the vision of organic infrastructures beyond 5G, which means that such networks are flexible regarding their composition and open for stakeholders.
A non-fungible token (NFT) references a data store location, typically, using a URL or another unique identifier. At the minimum, a NFT is expected to guarantee ownership and control over the tokenised asset. However, information stored on a third party data store may be copied and stolen. We propose a solution to give control back to the information owner by storing encrypted content on the data store and providing additional security against hacks and zero day exploits. The content on our data store is never decrypted or returned to its owner for decryption during rekeying. Also, the key size in our protocol does not increase with each rekeying. With this, we reduce the synchronisation steps and maintain a bounded key size.
Shams Mhmood Abd Ali, Mohd Najwadi Yusoff, Hasan Falah Hasan
The continuous advancements of blockchain applications impose constant improvements on their technical features. Particularly immutability, a highly secure blockchain attribute forbidding unauthorized or illicit data editing or deletion, which functions as crucial blockchain security. Nonetheless, the security function is currently being challenged due to improper data stored, such as child pornography, copyright violation, and lately the enaction of the “Right to be Forgotten (RtbF)” principle disseminated by the General Data Protection Regulation (GDPR), where it requires blockchain data to be redacted to suit current applications’ urgent demands, and even compliance with the regulation is a challenge and an unfeasible practice for various blockchain technology providers owing to the immutability characteristic. To overcome this challenge, mutable blockchain is highly demanded to solve previously mentioned issues, where controlled and supervised amendments to certain content within constrained privileges granted are suggested by several researchers through numerous blockchain redaction mechanisms using chameleon and non-chameleon hashing function approaches, and methods were proposed to achieve reasonable policies while ensuring high blockchain security levels. Accordingly, the current study seeks to thoroughly define redaction implementation challenges and security properties criteria. The analysis performed has mapped these criteria with chameleon-based research methodologies, technical approaches, and the latest cryptographic techniques implemented to resolve the challenge posed by the policy in which comparisons paved current open issues, leading to shaping future research directions in the scoped field.
Arko Djajadi, Karunia Suci Lestari, Linda Evan Englista, Aldi Destaryana
The security and confidentiality of data are very important for institutions. Meanwhile, data fabrication or falsification of official documents is still common. Validation of the authenticity of documents such as certificates becomes a challenge for various parties, especially those who have to make decisions based on the validity of the document. Scanning-based signatures on printed and digital documents are still relatively easy to counterfeit and yet still difficult to distinguish from the original. The traditional approach is no longer reliable. Solutions to these problems require the existence of data security techniques, seamless online verification of the authenticity of printed documents, and e-certificates quickly. The objective of the study is to model the e-certificate verification process via blockchain and proof-of-stake consensus methods and use MD5 encryption. The data or identity listed on the e-certificate is secured with an embedded digital signature in the form of a QR code and can be checked for the truth online. A combination of technologies capable of suppressing or removing counterfeiting of digital assets will accelerate digital transformation across spectrums of modern life. The resulting architectural model can be used as a starting point for implementing a blockchain-based e-certificate verification and validation automation system.
Research efforts on Distributed Ledger Technologies (DLTs) for industrial applications have constantly been increasing over the last years. The use of DLTs in the Industry 4.0 paradigm provides traceability, integrity, and immutability of the generated industrial data. However, Industry 4.0 ecosystems are typically composed of multiple smart factory clusters belonging to several companies, which are immersed in constant interaction with other business partners, clients, or suppliers. In such complex ecosystems, multiple DLTs are necessarily employed to maintain the integrity of the data throughout the whole process, from when the data is generated until it is processed at higher levels. Moreover, industrial data is commonly heterogeneous, which causes compatibility issues, along with security and efficiency issues in the homogenization process. Thus, the data needs to be pre-processed and homogenized in a secure manner before being exploited. Consequently, in this work, we address the issues mentioned above by providing an industrial raw data pre-processing and homogenization process according to a standard data model. We employ decentralized blockchain oracles to guarantee the integrity of the external data during the homogenization process. Hereafter, we design an interoperable plant blockchain for trustworthy storage and processing of the resulting homogenized data across several industrial plants. We also present a prototype implementation of the aforementioned scheme and discuss its effectiveness. Finally, we design a monitoring scheme to overview the usage the performance of the architecture processes and identify possible performance and security issues.
André Augusto, Rafael Belchior, Imre Kocsis, Gönczy László · 6 authors
The last few years have seen a steep increase in blockchain interoperability research. Most solutions connect public blockchains; hence, the main cross-chain use case is token transfer. By-design platform transparency, tamper-resistance, and auditability make blockchains an infrastructure candidate for Central Bank Digital Currencies (CBDCs), but bridging CBDCs is an important missing piece in general. In this paper, we leverage an asset transfer protocol, ODAP/SATP, to define an extendable and dependable blockchain interoperability middleware that can bridge CBDC from Hyperledger Fabric to EVM-based permissioned blockchains. The key interoperation enabler in the solution is a shared asset definition enforced by both sides of the bridge, accompanied by a mapping between Fabric Identities and Ethereum addresses for Identity management. We implement our design for the CBDC use case utilizing Hyperledger Cactus. Through a preliminary performance evaluation, we show that the underlying ledgers heavily influence the latency of the solution, not the bridging components.
The metaverse gradually evolves into a virtual world containing a series of interconnected sub-metaverses. Diverse digital resources, including identities, contents, services, and supporting data, are key components of the sub-metaverse. Therefore, a Domain Name System (DNS)-like system is necessary for efficient management and resolution. However, the legacy DNS was designed with security vulnerabilities and trust risks due to centralized issues. Blockchain is used to mitigate these concerns due to its decentralized features. Additionally, it supports identity management as a default feature, making it a natural fit for the metaverse. While there are several DNS alternatives based on the blockchain, they either manage only a single type of identifiers or isolate identities from other sorts of identifiers, making it difficult for sub-metaverses to coexist and connect with each other. This paper proposes a Multi-Identifier management and resolution System (MIS) in the metaverse, supporting the registration, resolution, and inter-translation functions. The basic MIS is portrayed as a four-tier architecture on a consortium blockchain due to its manageability, enhanced security, and efficiency properties. On-chain data is lightweight and compressed to save on storage while accelerating reading and writing operations. The resource data is encrypted based on the attributes of the sub-metaverse in the storage tier for privacy protection and access control. For users with decentralization priorities, a modification named EMIS is built on top of Ethereum. Finally, MIS is implemented on two testbeds and is available online as the open-source system. The first testbed consists of 4 physical servers located in the UK and Malaysia while the second is made up of 200 virtual machines (VMs) spread over 26 countries across all 5 continents on Google Cloud.
A. Ramachandran, Punyala Ramadevi, Ahmed Alkhayyat, Yousif Kerrar Yousif
Nowadays, numerous applications are associated with cloud and user data gets collected globally and stored in cloud units. In addition to shared data storage, cloud computing technique offers multiple advantages for the user through different distribution designs like hybrid cloud, public cloud, community cloud and private cloud. Though cloud-based computing solutions are highly convenient to the users, it also brings a challenge i.e., security of the data shared. Hence, in current research paper, blockchain with data integrity authentication technique is developed for an efficient and secure operation with user authentication process. Blockchain technology is utilized in this study to enable efficient and secure operation which not only empowers cloud security but also avoids threats and attacks. Additionally, the data integrity authentication technique is also utilized to limit the unwanted access of data in cloud storage unit. The major objective of the projected technique is to empower data security and user authentication in cloud computing environment. To improve the proposed authentication process, cuckoo filter and Merkle Hash Tree (MHT) are utilized. The proposed methodology was validated using few performance metrics such as processing time, uploading time, downloading time, authentication time, consensus time, waiting time, initialization time, in addition to storage overhead. The proposed method was compared with conventional cloud security techniques and the outcomes establish the supremacy of the proposed method.
Despite the maturity of cloud services (e.g., outsourcing of computational tasks), a number of operational challenges remain. For example, how do we ensure trust between outsourcers and workers in a zero-trust environment? While a number of blockchain-based solutions that eliminate the reliance on trusted third parties have been presented, many of these existing approaches do not achieve robust fairness and/or support compatibility with other systems. In this paper, we propose an efficient fair payment system using blockchain (EFPB), designed to achieve robust fairness and compatibility. Specifically, EFPB comprises a number of cryptographic building blocks, mainly: one-way accumulator (RSA-based construction), stealth address and symmetric encryption. We then evaluate the performance of EFPB to demonstrate that it is more efficient and low-cost than other competing schemes, as well as presenting a comparative summary of functionalities.
In this paper, we are proposing a blockchain-based architectural model to ensure the integrity of healthcare-sensitive data in an AI-based medical research context. In our approach, we will use the HL7 FHIR standardized data structure to ensure the interoperability of our approach with the existing hospital information systems (HIS). Indeed, structuring the data coming from several heterogeneous sources would enhance its quality. In addition, a standardised data structure would help establish a more accurate security and data protection model throughout the process of data collection cleansing and processing. Hence, we designed our architecture to be interoperable with all FHIR-based HISs to add a trust layer to the current medical research process. In this paper we are to achieve our goal, we will combine continua healthcare IoT architecture and Hyperledger fabric architecture. Our trust layer model is composed of four components: (1) an architecture that integrates with the HL7 FHIR data exchange framework, which extends an open protocol that supports efficient standards-based healthcare data exchange (2) a blockchain layer to support access control and auditing of FHIR health records that are stored in the data exchange network databases; (3) a distributed architecture consisting of multiple trusted nodes ensure privacy protection for health data; and (4) an application programming interface (API) will be available for use by the network.
The financial technology (FinTech) has promoted the wide application of FinTech with the help of artificial intelligence, blockchain, cloud computing, data science and other new technologies. Trust evaluation has become a forward-looking issue for the rapid development of FinTech. The existing trust evaluation methods of FinTech do not consider the impact of the timeliness, reliability and non-invasive factors of trust on trust evaluation, which results in low accuracy of trust evaluation and incapability of effectively identifying malicious behaviors of users. Firstly, this paper introduces the blockchain technology to construct a four-layer architecture structure and multiple trust evaluation indicators based on blockchain service data. Secondly, the paper proposes a blockchain based FinTech trust evaluation mechanism (BFTEM), which utilizes blockchain to record relevant data and multiple trust parameters during the transmission process of each block, and verify the trust degree issued by the trust holder through the comprehensive trust value of the user. Finally, the block generation time, throughput, delayed response time and comprehensive trust value are experimentally studied through simulation experiments. Simulation experiments show that BFTEM mechanism can better improve the security and reliability of FinTech data, and has advantages in improving the accuracy of trust evaluation and expanding potential applications.
The article outlines the potential benefits of blockchain technology in the education sector, particularly in open educational resources. The literature on open educational resources, blockchain technology and credential authentication is reviewed. The potential benefits and possible challenges of adopting blockchain technology to the process of verifying and authenticating students' academic achievements, which are crucial to ensure their credibility and recognition in other institutions as well as in the labour market, were presented. The main objective of this article was to provide students' perspectives on their familiarity with ORE, blockchain technology and how it can be adopted to verify educational credentials. The author of the article highlights the new benefits of implementing blockchain technology, primarily in terms of verifying the authenticity of diplomas and educational achievements, increasing their value and credibility in the eyes of employers. The introduction of these technologies can influence a more transparent teacher evaluation process and ensure secure storage of learner data. The results of this study indicate the potential of blockchain technology in enhancing the credibility and authenticity of academic achievement in OER. The study highlights the importance of further education and awareness initiatives, dealing with technical complexities and addressing data privacy and security issues to ensure the successful integration of blockchain into the education system. Through the use of distributed registries, a secure and transparent platform can be created to share and verify educational credentials.
Storage requirements are increasing rapidly with fast-growing Cloud computing technology.The more data storage and transaction processing requirements, the more chances of malicious activities.Storage security is a vital concern nowadays.To deal with this problem, in this research, we propose a system that provides an efficient security mechanism for data storage on the Cloud with enhanced access control policies by using Blockchain technology, which is immutable in nature.The usage of smart contracts improves transparency and creates a trust model that eliminates the requirement of a trusted third party.The system manages the log trails of all transactions and accomplishes all access policies.The proposed model is transparent, traceable, and secure.Data owners hold all rights to their data and any activity pertaining to accessing the data illegitimately shall not be accepted by the network and shall be notified to all the concerns.We demonstrate our proposed mechanism with details about all concerned stakeholders.The Attribute-Based Encryption (ABE) scheme is used with multiple authorities to manage the user attributes that avoid the use of the central authority.The smart contract avoids the computational burden on the user side and reduces communication costs.We analyze security and compare the performance of our proposed model.
The development of information technology allows the collaborative business process to be run across multiple enterprises in a larger market environment. However, while collaborative business expands the realm of businesses, it also causes various hazards in collaborative Interaction, such as data falsification, inconstancy, and misuse. To solve these issues, a blockchain-based collaborative business modeling approach was proposed and analyzed. However, the existing studies lack the blockchain risk problem-solving specification, and there is no verification technique to examine the process. Consequently, it is difficult to confirm the appropriateness of the approach. Thus, here, we propose and build a blockchain-based trust model to strengthen and verify the integrity and security of the collaborative business process; Integrity and security address the validity of collaborative interactions in terms of a trust, and we construct a blockchain pattern based on trust elements to meet the required the characteristics. Specifically, a trust model can be applied to the healthcare data-sharing process, and then the achievement of the trust-based safe data-sharing process can be proven. Our model can be used as a trust-building guidance tool or for integrity and security verification with the collaborative business process in a distributed environment with blockchain.
Aysha Alnuaimi, Diana Hawashin, Raja Jayaraman, Khaled Salah · 5 authors
Healthcare credentialing plays a vital role in ensuring the competence and integrity of healthcare professionals. However, the current credentials verification process suffers from time-consuming procedures due to the large number of intermediaries, limited information access, data fragmentation and the persistent risk of fraudulent credentials, leading to delayed hiring, increased administrative burden, and loss of trust and reputation in the healthcare system. In this paper, we utilize blockchain technology to enhance the credentialing process by streamlining the verification steps, improving data security, and providing stakeholders with confidence through secure storage of credentials. In addition, we utilize advanced security techniques, such as proxy re-encryption and cryptographic algorithms, to ensure the protection of sensitive data, facilitate secure communication, and prevent unauthorized access. We develop smart contracts which eliminate the need for intermediaries, automate the verification process, and enhance transparency and data integrity. We present system architecture, sequence diagrams, entity relationship diagrams, and the underlying algorithms of our blockchain-based solution. We discuss how our proposed solution attains the objectives outlined in the paper. We conduct cost evaluation and security analysis to validate the effectiveness of our solution. Additionally, we compare our proposed system with existing blockchain-based solutions, highlighting its novelty. The code of our smart contracts is made publicly available on GitHub.
Khaled Chait, Abdelkader Laouid, Mostefa Kara, Mohammad Hammoudeh · 6 authors
The transformative potential of blockchain technology has resulted in its widespread adoption, bringing about numerous advantages such as enhanced data integrity, transparency, and decentralization. Blockchain has effectively proven its ability to establish trustworthy systems across a multitude of applications. As the number of transactions recorded into a blockchain grows, the blockchain’s size expands significantly posing challenges to the network, particularly in terms of storage capacity and processing power. To address this problem, we present a cryptosystem based on RSA to provide aggregate signatures in blockchains. The aggregate signature replaces all transaction signatures of a block. In this scheme, all participating blockchain nodes use the same modulusN, each with its own private and public key pair generated fromN. Regardless of the number of transactions, nodes, and signers, the aggregate signature size is alwaysO(k), wherekis a security parameter. The miner that constructs a candidate block computes the aggregate signature σ, replaces all transaction signatures by σ, and transmits the block with only one aggregate signature. The proposed scheme incorporates a flexible and accountable subgroup aggregate signature mechanism, allowing any subsettofntotal elements to sign data, wheretis the required number of signers. To verify that a set of elements signed the block, the verifier requires the aggregate signature, the aggregate public key, and the data hash. This approach requires minimal interaction between the signers, which results in reduced network traffic. Regardless of the network size, there are alwayst+nexchanged messages. Experimental analysis shows the proposed aggregate signature scheme’s effectiveness in increasing security robustness and reducing block size and overall network traffic.
A. Sasikumar, Logesh Ravi, Ketan Kotecha, Ajith Abraham · 6 authors
Data security and integrity are becoming increasingly important as the volume of data being created and stored grows. A controlled third party that provides most of the existing big data security systems makes them susceptible to several security risks. By resolving current technology challenges, including scalability, non-tampering, trustworthiness, data governance, and transparency, blockchain technology plays a vital role and has a significant potential to safeguard personal information. Therefore, this work focuses on addressing real-time big data storage issues based on a transdisciplinary research approach. This study introduces a brand-new approach to big data storage security that leverages blockchain technology and applies highway protocol to generate new blocks. The proposed highway protocol works based on the flexible finality condition to overcome issues of baseline models. The highway allows blocks to run the consensus mechanism to configure security thresholds more freely. The proposed protocol also allows blocks with lower thresholds to reach finality more quickly than blocks requiring greater degrees of confidence. Therefore, the proposed big data framework can dynamically control data manipulation and continuously support individuals to participate in the data-sharing process. A comparison was performed with the number of data requests in terms of hit ratio, and a highway protocol provides better results than baseline models. The proposed model provides a data processing period of 13 to 30 ms and an energy consumption of 32 to 41 mJ.