Prior to provisioning sensor data to smart contracts, a pre-processing of the data on intermediate off-chain nodes is often necessary. When doing so, originally constructed cryptographic signatures cannot be verified on-chain anymore. This exposes an opportunity for undetected manipulation and presents a problem for applications in the Internet of Things where trustworthy sensor data is required on-chain. In this paper, we propose trustworthy pre-processing as enabler for end-to-end sensor data integrity in data on-chaining workflows. We define requirements for trustworthy pre-processing, present a model and common workflow for data on-chaining, select off-chain computation utilizing Zero-knowledge Proofs (ZKPs) and Trusted Execution Environments (TEEs) as promising solution approaches, and discuss both our proof-of-concept implementations and initial experimental, comparative evaluation results. The importance of trustworthy pre-processing and principle solution approaches are presented, addressing the major problem of end-to-end sensor data integrity in blockchain-based IoT applications.
The exponential growth of digital transactions and regulatory requirements has necessitated the development of robust, transparent, and tamper-proof recordkeeping systems that can withstand the scrutiny of modern audit processes. This comprehensive study investigates the implementation and effectiveness of blockchain-based architectures for regulatory recordkeeping systems, with particular emphasis on achieving real-time audit readiness across multiple industry sectors. The research examines how distributed ledger technology can address the fundamental challenges of data integrity, transparency, and immutability that traditional centralized recordkeeping systems have struggled to resolve effectively. The investigation encompasses a thorough analysis of existing blockchain frameworks, consensus mechanisms, and smart contract implementations specifically designed for regulatory compliance applications. Through systematic evaluation of various blockchain architectures, including permissioned networks, hybrid systems, and consortium blockchains, this study identifies optimal configurations for different regulatory environments. The research methodology combines theoretical framework analysis with practical implementation case studies from financial services, healthcare, supply chain management, and energy sectors to provide comprehensive insights into the practical applications and limitations of blockchain-based regulatory systems. Key findings reveal that blockchain-based architectures demonstrate significant improvements in data integrity verification, audit trail transparency, and compliance monitoring capabilities compared to traditional systems. The study identifies critical success factors including proper node governance structures, appropriate consensus mechanisms, integration with existing enterprise systems, and compliance with data privacy regulations. However, the research also highlights substantial challenges including scalability limitations, energy consumption concerns, regulatory uncertainty, and the complexity of legacy system integration that must be addressed for successful implementation. The research contributes to the existing body of knowledge by proposing a comprehensive framework for evaluating blockchain suitability for specific regulatory environments, developing implementation guidelines for different industry contexts, and identifying best practices for maintaining audit readiness in distributed ledger systems. The study concludes that while blockchain technology offers transformative potential for regulatory recordkeeping, successful implementation requires careful consideration of technical, regulatory, and organizational factors to ensure both compliance and operational efficiency.
Rahul Ganpatrao Sonkamble, Shraddha Phansalkar, Vidyasagar Potdar, Anupkumar M. Bongale
Interoperability in Electronic Health Records (EHR) is significant for the seamless sharing of information amongst different healthcare stakeholders. Interoperability in EHR aims to devise agreements in its interpretation, access, and storage with security, privacy, and trust. A study and survey of state-of-the-art literature, prototypes, and projects in standardization of the EHR structure, privacy-preservation, and EHR sharing are very essential. The presented work conducts a systematic literature review to address four research questions. 1) What are the different standards for common interpretation, representation, and modeling of EHR to achieve semantic interoperability? 2) What are the different privacy-preservation techniques and security standards for EHR data storage? 3) How mature is blockchain technology for building interoperable, privacy-preserving solutions for EHR storage and sharing? 4) What is the state-of-the-art for cross-chain interoperability for EHR sharing? An exhaustive study of these questions establishes the potential of a blockchain-based EHR management framework in privacy preservation, access control and efficient storage. The study also unveils challenges in the adoption of blockchain in EHR management with the state-of-the-art maturity of cross-chain interoperable solutions for sharing EHR amongst stakeholders on different blockchain platforms. The research gaps culminate in proposing a blockchain-based EHR framework with privacy preservation and access control design. The proposed framework employs partitioning of EHR to on-chain and off-chain storages for performance guarantees with the retrieval of valid off-chain data. The framework is deployed on the Ethereum test network with Solidity smart contracts. It is observed that different test cases on the partitioning of the EHR data, yielded better read-write throughput and effective gas price than fully on-chain storage.
operates on a blockchain full node maintained directly by the DApp owner (i.e., an in-house RPC node) or a set of nodes hosted by a third party (i.e., a third-party RPC service) intended to ease DApp deployment. Given the ever-growing blockchain states (e.g., 130 GB and 1.8 TB for a fully synced and an archived Ethereum node, respectively, as of 2018), the RPC service plays an increasingly important role in the DApp ecosystem, scaling DApp clients to low-end mobile devices and web browsers. Major blockchains today flock to roll out RPC supports, which spawn a good number of services in practice, including nine service providers (as is evaluated in this work) supporting the Ethereum's JSON-RPC interface [16], blockchain.info [5] with Bitcoin's JSON-RPC [2], dfuse.io [13] and greymass.com [39] with EOSIO's Chain API [6], stellar.org [46] with Stellar Horizon [23], etc. These services host the majority of DApps; for instance, at least 63% of Ethereum based DApps use one RPC service [10]. DApp clients RPC service JSON-RPC Block/tx synchronization Blockchain peers
Ruba Awadallah, Azman Samsudin, Je Sen Teh, Mishal Almazrooie
Due to its wide accessibility, cloud services are susceptible to attacks. Data manipulation is a serious threat to data integrity which can occur in cloud computing - a relatively new offering under the umbrella of cloud services. Data can be tampered with, and malicious actors could use this to their advantage. Cloud computing clients in various application domains want to be assured that their data is accurate and trustworthy. On another spectrum, blockchain is a tamper-proof digital ledger that can be used alongside cloud technology to provide a tamper-proof cloud computing environment. This paper proposes a scheme that combines cloud computing with blockchain that assures data integrity for all homomorphic encryption schemes. To overcome the cloud service provider's (CSP) ultimate authority over the data, the proposed scheme relies on the Byzantine Fault Tolerance consensus to build a distributed network of processing CSPs based on the client requirements. After certain computations performed by all CSPs, they produce a master hash value for their database. To ensure immutable data is produced, master hash values are preserved in Bitcoin or Ethereum blockchain networks. The master hash values can be obtained by tracking the block header address for verification purposes. A theoretical analysis of the overhead costs associated with creating master hash values for each of the cryptocurrencies is presented. We found that Ethereum leads to lower client financial costs and better online performance than Bitcoin. We also specify the data security requirements the proposed scheme provides, the ground-level implementation, and future work. The proposed verification scheme is based on public cryptocurrency as a back-end service and does not require additional setup actions by the client other than a wallet for the chosen cryptocurrency.
The first step to realise the true potential of blockchain systems is to explain the associated security risks and vulnerabilities. These risks and vulnerabilities, exploited by the threat agent to affect the valuable assets and services. In this work, we use a security risk management (SRM) domain model and develop a framework to explore two security risks - Sybil and Double-spending - that are observed and considered most concerning security risks within blockchain systems. The framework illustrates the protected assets or assets to secure, the classification of threats that the attacker can trigger using Sybil attack, the identification of threats that cause Double-spending, the vulnerabilities of identified threats, and their countermeasures. We evaluated a newly built framework by exploring Sybil and Double-spending risks in Ethereum-based healthcare applications. We also recognise the various other security and implementation challenges of blockchain that hinder the acceptance of blockchain-enabled solutions. Furthermore, we discuss the permissioned blockchain systems making an appearance in industry-level enterprises and how permissioned blockchain systems control these challenges. We conclude the paper and outline the future work that aims to build an ontology-based blockchain security reference model. The results of this work could help blockchain developers, practitioners, and other associated stakeholders to communicate about Sybil and Double-spending risks, what security countermeasures should be introduced, and what security and implementation challenges are emerging in blockchain systems.
Manpreet Kaur, Mohammad Zubair Khan, Shikha Gupta, Abdulfattah Noorwali · 6 authors
As Blockchain innovation picks up popularity in many areas, it is frequently hailed as a sound innovation. Because of the decentralization and encryption, many imagine that data put away in a Blockchain is and will consistently be protected. Among various abstraction layers of Blockchain architecture, the consensus layer is the core component behind the performance and security measures of the Blockchain network. Consensus mechanisms are a critical component of a Blockchain system's long-term stability. Consensus forms the core of blockchain technology. Therefore, a range of consensus protocols has been introduced to maximize Blockchain systems' efficiency and meet application domains' individual needs. This research paper describes the layered architecture of Blockchain. A comprehensive review of mainstream consensus protocols mainly Proof of Work (PoW), Proof of Stake (PoS), Delegated Proof of Stake (DPoS), Proof of Activity (PoA) is presented in the paper. These mainstream consensus protocols have been explained and detailed performance analysis of these consensus protocols has been done. We have proposed a performance matrix of these consensus protocols based on different parameters like Degree of decentralization, Latency, Fault Tolerance Rate, Scalability, etc. Consensus protocols being the core of a strong fault-tolerant secured blockchain system, the proposed work intends to help inappropriate protocol selection and further research on strengthening trust and ownership in the technology. Depending upon different parameters like decentralization which is low in POA compared to other protocols, whereas POW is non-scalable, so depending on the priority of a particular performance parameter, the paper will help in the selection of a specific protocol.
There has been a great deal of discussion of the challenges on privacy, data interoperability and quality of Educational Professional Personal Record (EPPR). Therefore, there is a need to reassess the current models, in which various parties generate, exchange and observe a huge amount of personal data with regard to EPPR. Ethereum blockchain has shown that trusted, auditable transactions is detectible using a decentralized network of nodes accompanied by a general ledger. Thus, due to the fast-moving development of educational and professional data generators such as online universities and distance learning, requires learners to engage in detail into their EPPR as well as the educational and professional data generators. In this paper, we propose a novel decentralized framework to manage EPPR using Ethereum blockchain technology. The framework provides the owner of the EPPR a comprehensive immutable log and ease of access to their educational records across the educational record editors and consumers. Furthermore, it provides a recommender engine to endorse skills and competencies to the education record owners and similar candidates for educational records editors and consumers. Ethereum blockchain can provide solutions in terms of exchanging of data among parties by ensuring privacy, accountability and data interoperability. The aim of the proposed framework is to enable educational stakeholders (universities and employing agencies) to participate in the network as blockchain miners rewarded by pseudonymized data in compliance with General Data Protection Rules in United Arab Emirates.
With the advancement of Building Information Modeling (BIM) technology, BIM gains more importance and becomes a prerequisite in building projects. BIM is useful throughout a building lifecycle; from building bid, design, construction, completion, operation, and maintenance to building demolition. However, current information exchange surrounding BIM is still limited and bound to a single participant or organization and is also limited to a particular phase in the building lifecycle. This paper aims to explore BIM information exchange among many parties involved in a secure manner using a blockchain platform throughout the whole building lifecycle. In this research, many parties involved in the building project will be able to recognize one another through deployment of a permissioned blockchain. This information exchange uses Hyperledger Composer, a permissioned blockchain running on a blockchain platform called Hyperledger Fabric. Our experiment shows that BIM information exchange could be further improved. In this study, BIM information exchange can be implemented not only in one building phase but throughout the whole building lifecycle. It also facilitates BIM information exchange among multiple participants in a secure manner via a permissioned blockchain.
Junhoo Park, Hyekjin Kim, Geunyoung Kim, Jae‐Cheol Ryou
As blockchain-based applications and research such as cryptocurrency increase, an oracle problem to bring external data in the blockchain is emerging. Among the methods to solve the oracle problem, a method of configuring oracle based on TLS, an existing internet infrastructure, has been proposed. However, these methods currently have the disadvantage of not supporting privacy protection for external data, and there are limitations in configuring the process of a smart contract based on external data verification for automation. To solve this problem, we propose a framework consisting of middleware of external source server, data prover, and verification contract. The framework converts the data signed in the web server into a proof that the owner can prove with zk-SNARKs and provides a smart contract that can verify this. Through these procedures, data owners not only protect their privacy by proving themselves, but they can also automate on-chain processing through smart contract verification. For the proposed framework, we create a proof using libsnark for server data and show the performance and cost to verify with Solidity the smart contract language of the Ethereum platform.
Imagechain is a cryptographic structure that chain digital images with hash links. The most important feature, which differentiates it from blockchain, is that the pictures are not stored inside the blocks. Instead, the block and the image are combined together in the embedding process. Therefore, the imagechain is built from standard graphic files that may be used in the same way as any other image, but additionally, each of them contains a data block that links it to a previous element of the chain. The presented solution does not require any additional files except the images themselves. It supports multiple file formats and embedding methods, which makes it portable and user-friendly. At the same time, the scheme provides a high level of security and resistance to forgery. This is achieved by hashing the whole file with embedded data, so the image cannot be altered or removed from the chain without losing integrity. This article describes the basic concept of an imagechain together with building blocks and applications. The two most important issues are embedding methods and block structure.
Open access
Blockchain Technology Applications and Security
Advanced Steganography and Watermarking Techniques
Vladimir Kukharenko, Kirill Ziborov, Rafael Faritovich Sadykov, Alexandr Naumchev · 6 authors
The extent of formal verification methods applied to industrial projects has always been limited. The proliferation of distributed ledger systems (DLS), also known as blockchain, is rapidly changing the situation. Since the main area of DLSs' application is the automation of financial transactions, the properties of predictability and reliability are critical for implementing such systems. The actual behavior of the DLS is determined by the chosen consensus protocol, which properties require strict specification and formal verification. Formal specification and verification of the consensus protocol is necessary but not sufficient. It is required to ensure that the software implementation of the DLS nodes complies with this protocol. The verified software implementation of the protocol must run on a fairly reliable operating system. The so-called “smart contracts”, which are an important part of the applied implementations of specific business processes based on DLSs, must be verifiable as well. In this paper, we describe an ongoing industrial project that will result in a DLS verified at least at the four technological levels described above. We then share our experience with the formal specification and verification of HotStuff, a leader-based fault-tolerant protocol that ensures reaching distributed consensus in the presence of Byzantine processes.
The development of Internet of Things (IoT) and Mobile Edge Computing (MEC) has led to close cooperation between electronic devices. It requires strong reliability and trustworthiness of the devices involved in the communication. However, current trust mechanisms have the following issues: (1) heavily relying on a trusted third party, which may incur severe security issues if it is corrupted, and (2) malicious evaluations on the involved devices which may bias the trustrank of the devices. By introducing the concepts of risk management and blockchain into the trust mechanism, we here propose a blockchain-based trust mechanism for distributed IoT devices in this paper. In the proposed trust mechanism, trustrank is quantified by normative trust and risk measures, and a new storage structure is designed for the domain administration manager to identify and delete the malicious evaluations of the devices. Evidence shows that the proposed trust mechanism can ensure data sharing and integrity, in addition to its resistance against malicious attacks to the IoT devices.
Facebook will soon launch the world's first digital payment currency: Libra. Libra's mission is to foster the development of a simple global currency and financial infrastructure that serves billions of people. This document presents the project, based on a new decentralized blockchain, a cryptomonnaie low volatility and a smart contract platform. The combination of these elements aims to create a new opportunity for innovative and responsible financial services. Libra will be sustained through a small charge per transaction on the blockchain. Many of these charges will be transferred to vendors who can then absorb the costs themselves or relay them to users. Collaboration and innovation with the financial sector (especially with of regulators and experts from various sectors) is the only way to ensure that this new system is based on a durable, secure and reliable framework. This can also lead to a real step towards a low-cost, more accessible and more connected global financial system. Washington and Brussels are calling for far-reaching regulation of Facebook. Responsible citizens have the courage to deal with the ideas of dissidents in social networks, and they have the ability to do so rationally and critically.
Blockchain systems store transaction data in the form of a distributed ledger where each node stores a copy of all data, which gives rise to storage issues. It is well-known that the tremendous storage and distribution of the block data are common problems in blockchain systems. In the literature, some types of secret sharing schemes are employed to overcome these problems. The secret sharing method is one of the most significant cryptographic protocols used to ensure the privacy of the data. The main purpose of this paper is to improve the recent distributed storage blockchain systems by proposing an alternative secret sharing method. We first propose a secure threshold verifiable multi-secret sharing scheme that has the verification and private communication steps based on post-quantum lattice-based hard problems. We then apply the proposed threshold scheme to the distributed storage blockchain (DSB) system to share transaction data at each block. In the proposed DSB system, we encrypt the data block with the AES-256 encryption algorithm before distributing it among nodes at each block, and both its secret key and the hash value of the block are privately shared among nodes simultaneously by the proposed scheme. Thereafter, in the DSB system, the encrypted data block is encoded by the Reed–Solomon code, and it is shared among nodes. We finally analyze the storage and recovery communication costs and the robustness of the proposed DSB system. We observe that our approach improves effectively the recovery communication cost and makes it more robust compared to the previous DSB systems. It also improves extremely the storage cost of the traditional blockchain systems. Furthermore, the proposed scheme brings to the DSB system the desirable properties such as verification process and secret communication without private channels in addition to the known properties of the schemes used in the previous DSB systems. As a result of the flexibility on the threshold parameter of the scheme, a diverse range of qualified subsets of nodes in the DSB system can privately recover the secret values.
Distributed file storage aims to support credible access to data on distributed nodes. There are some application scenarios, for example, data centers, peer-to-peer (P2P) storage systems, and storage in wireless networks. Nevertheless, among these applications, data blocks are inevitably replaced and inaccessible when there exists nodes failure. As a result, data integrity and credibility is absent. To overcome such a challenge, blockchain is explored to protect the distributed data. Through analysis and evaluation, we demonstrate that blockchain advocates data integrity and credibility for distributed file storage, as well as the application of blockchain technology for distributed file storage.
The privacy of Electronic Health Records (EHRs) is facing a major hurdle with outsourcing private health data in the cloud as there exists danger of leaking health information to unauthorized parties. In fact, EHRs are stored on centralized databases that increases the security risk footprint and requires trust in a single authority which cannot effectively protect data from internal attacks. This research focuses on ensuring the patient privacy and data security while sharing the sensitive data across same or different organisations as well as healthcare providers in a distributed environment. This research develops a privacy-preserving framework viz Healthchain based on Blockchain technology that maintains security, privacy, scalability and integrity of the e-health data. The Blockchain is built on Hyperledger fabric, a permissioned distributed ledger solutions by using Hyperledger composer and stores EHRs by utilizing InterPlanetary File System (IPFS) to build this healthchain framework. Moreover, the data stored in the IPFS is encrypted by using a unique cryptographic public key encryption algorithm to create a robust blockchain solution for electronic health data. The objective of the research is to provide a foundation for developing security solutions against cyber-attacks by exploiting the inherent features of the blockchain, and thus contribute to the robustness of healthcare information sharing environments. Through the results, the proposed model shows that the healthcare records are not traceable to unauthorized access as the model stores only the encrypted hash of the records that proves effectiveness in terms of data security, enhanced data privacy, improved data scalability, interoperability and data integrity while sharing and accessing medical records among stakeholders across the healthchain network.
A tecnologia de registro distribuído (DLT – Distributed Ledger Technology) pode ser muito útil para o tratamento de dados pessoais em conformidade com a Lei Geral de Proteção de Dados Pessoais (LGPD), devido a características como transparência e segurança. No entanto, outras características como a imutabilidade e o caráter distribuído podem dificultar essa tarefa. Assim, este trabalho analisa os desafios da conciliação entre DLT e o tratamento de dados em conformidade com a LGPD. Como objeto de análise, utilizou-se o projeto Datavalid do SERPRO - Serviço Federal de Processamento de Dados, contratado pela Uber, em um cenário hipotético em que o tratamento de dados foi realizado utilizando-se o Hyperledger Fabric.
Lukas König, Yuliia Korobeinikova, Simon Tjoa, Peter Kieseberg
Since the introduction of Bitcoin, the term “blockchain” has attracted many start-ups and companies over the years, especially in the financial sector. However, technology is evolving faster than standardization frameworks. This left the industry in the position of having to use this emerging technology, without being backed by any international standards organization regarding for neither the technology itself, nor for a blockchain specific information security framework. In times of the General Data Protection Regulation and growing international trade conflicts, protecting information is more relevant than ever. Standardization of blockchains is an appeal to raise the development of information technologies to the next level. Therefore, this paper shall provide an overview of standardization organization’s publications about blockchains/distributed ledger technologies, a set of comparison criteria for future work and a comparison of the existing standards work itself. With that information, aligning to existing standardization efforts becomes easier, and might even present the possibility to create frameworks where there are none at the moment.
Diego Fernandes Gonçalves Martins, Marco Aurélio Amaral Henriques
Este artigo apresenta o protocolo de consenso Probabilistic Proof-of-Stake (PPoS) e analisa o mesmo dos pontos de vista teórico e prático, focando na sua probabilidade de produzir forks. O texto primeiramente explica o funcionamento do algoritmo, onde é possível entender como um nó participa de um sorteio em rodadas a fim de ganhar o direito de criar um novo bloco para uma cadeia. Em seguida ele apresenta os critérios para aceitação e para confirmação de blocos, seguidos de uma análise da probabilidade de forks e do número esperado de rodadas entre dois blocos consecutivos. Uma blockchain baseada neste protocolo foi implementada e seus resultados práticos mostraram uma boa concordância com a análise teórica, validando a mesma.
Open access
Blockchain Technology Applications and Security
Cloud Data Security Solutions
Advanced Steganography and Watermarking Techniques
Blockchain is one of the emerging technologies with the potential to disrupt many application domains. Cloud is an on-demand service paradigm facilitating the availability of shared resources for data storage and computation. In recent years, the integration of blockchain and cloud has received significant attention for ensuring efficiency, transparency, security and even for offering better cloud services in the form of novel service models. In order to exploit the full potential of blockchain-cloud integration, it is essential to have a clear understanding on the existing works within this domain. To facilitate this, there have been several survey papers, however, none of them covers the aspect of blockchain-cloud integration from a service-oriented perspective. This paper aims to fulfil this gap by providing a service oriented review of blockchain-cloud integration. Indeed, in this survey, we explore different service models into which blockchain has been integrated. For each service model, we review the existing works and present a comparative analysis so as to offer a clear and concise view in each category.
Digital signature is a major component of transactions on Blockchain platforms, especially in enterprise Blockchain platforms, where multiple signatures from a set of peers need to be produced to endorse a transaction. However, such process is often complex and time-consuming. Multi-signature, which can improve transaction efficiency by having a set of signers cooperate to produce a joint signature, has attracted extensive attentions. In this work, we propose two multi-signature schemes, GMS and AGMS, which are proved to be more secure and efficient than state-of-the-art multi-signature schemes. Besides, we implement the proposed schemes in a real Enterprise Blockchain platform, Fabric. Experiment results show that the proposed AGMS scheme helps achieve the goal of high transaction efficiency, low storage complexity, as well as high robustness against rogue-key attacks and $k$ -sum problem attacks.