Unmanned aerial vehicles (UAVs) extend the traditional ground-based Internet of Things (IoT) into the air. UAV mobile edge computing (MEC) architectures have been proposed by integrating UAVs into MEC networks during the current novel coronavirus disease (COVID-19) era. UAV mobile edge computing (MEC) shares personal data with external parties (such as edge servers) during intelligent medical analytics. However, this technique raises privacy concerns about patients’ health data. More recently, the concept of federal learning (FL) has been set up to protect mobile user data privacy. Compared to traditional machine learning, federated learning requires a decentralized distribution system to enhance trust for UAVs. Blockchain technology provides a secure and reliable solution for FL settings between multiple untrusted parties with anonymous, immutable, and distributed features. Therefore, blockchain-enabled FL provides both theories and techniques to improve the performance of intelligent UAV edge computing networks from various perspectives. This survey begins by discussing the current state of research on blockchain and FL. Then, compare the leading technologies and limitations. Second, we will discuss how to integrate blockchain and FL into UAV edge computing networks and the associated challenges and solutions. Finally, we discuss the fundamental research challenges and future directions.
Abdullah Yousafzai, Latif U. Khan, Umer Majeed, Owais Hakeem · 5 authors
Federated learning (FL) enables the training of a shared collaborative machine learning model while keeping all the confidential training data on distributed devices. The FL state-of-the-art considers a monopolist FL task publisher. However, we present a FL marketplace where multiple FL task publishers and mobile devices co-exist for a set of diverse and varying learning tasks. Mobile devices participating in the training of FL models provides pay-as-you-go (i.e. using blockchain-based cryptocurrencies) FL training services to the FL task publishers. In the proposed framework, multiple FL task publishers may compete with each other and the participating workers (i.e. mobile devices) can choose one FL task publisher over another for participation in the training of a global model. We utilize code offloading for enabling customized FL pipelines in mobile devices and mitigating the model heterogeneity inherent in varying and changing FL tasks published by the task publishers. Experimental results indicate the efficacy of the proposed framework.
Silvia Gabrielli, Stephan Krenn, Donato Pellegrino, Juan Carlos Pérez Baún · 7 authors
Abstract The KRAKEN project aims to enable the sharing, brokerage, and trading of personal data including sensitive data (e.g., educational and health records and wellbeing data from wearable devices) by returning its control to both data subjects/data providers throughout the entire data lifecycle. The project is providing a data marketplace which will allow the sharing of personal data and its usage for research and business purposes, by using privacy-preserving cryptographic tools. KRAKEN is developing an advanced platform to share certified information between users and organizations by leveraging on distributed ledger technology, promoting the vision of self-sovereign identity solutions (ensuring users’ consent and data control in a privacy-friendly way), preserving security, privacy, and the protection of personal data in compliance with EU regulations (e.g., GDPR). The feasibility of the KRAKEN solution will be tested through two high-impact pilots in the education and healthcare fields.
Tariq Alsboui, Hussain Al-Aqrabi, Richard Hill, Shamaila Iram
In the Internet of things (IoT), security and privacy issues are a fundamental challenge determining the successful implementation of many IoT applications. Distributed ledger technology (e.g., Blockchain) offers a great promise to solve these issues. Blockchain-based solutions support security and privacy, yet they involve significant energy due to mining, low throughput, and computational overhead that is not acceptable for IoT resource-constrained devices. In this paper, we propose an energy-efficient Privacy-Preserving Distributed Intelligence approach (PPDI) by adopting the IOTA technology. IOTA is an emerging distributed ledger technology that allows for zero fees transactions for the IoT. The proposed PPDI aims to address the privacy issues in the IoT by using the IOTA Masked Authenticated Messaging (MAM) protocol. MAM ensures privacy by encrypting and granting permission to authorized users to access data. This paper presents a healthcare scenario that demonstrate how IOTA MAM can be used to address the privacy issue in the IoT. The experimental results clearly show that IOTA MAM is a feasible solution that can be used to solve privacy related issues in the IoT domain.
Muhammad Hussain Mughal, Zaffar Ahmed Shaikh, Khurshed Ali, Safdar Ali · 5 authors
The streamflow data acquisition with various techniques and dispersing of River’s locations demand improvement of reliability and frequency aspects. One of the reliability measurement characteristics is data ownership. The authority sharing data authorizes its quality and is also responsible for the wrong decision triggered by incorrect data. The consensus-based crowdsourcing data contribute to aggregated streamflow records’ generation. The aggregated streamflow records are stored on a streamflow ledger, a Hyperledger fabric-based ledger for rivers’ streamflow data. In contrast, InterPlanery File System(IPFS) distributed file storage system is helpful for policy documents and distribution scheme storage. Blockchain-based techniques for improvement of data-intensive decision support systems. The distributed river streamflow data measured and shared by distributed gauging officials and stored on the blockchain-based distributed storage system contributes to scalability, transparency, availability, and accessibility of shareable data. All stakeholders require quality data with trust and provenance management through a persistent, linked, and immutable copy of data. This technique resolves the conflict or disagreement on streamflow optimization and flood mitigation decisions. In a nutshell, the blockchain technology with IPFS for off-chain large files storage would contribute twofold to irrigation systems and flood mitigation domains. On one side, the streamflow data aggregation has consensus from streamflow assessment for software agents and stakeholders. Secondly, the persistent data copy is shared among distributed stakeholders using IPFS-based content addressed file-sharing protocol for a common operating picture to improve effective collaboration and coordination among managers of irrigation systems and flood mitigation activities.
Multi-party business processes are based on the cooperation of different actors in a distributed setting. Blockchains can provide support for the automation of such processes, even in conditions of partial trust among the participants. On-chain data are stored in all replicas of the ledger and therefore accessible to all nodes that are in the network. Although this fosters traceability, integrity, and persistence, it undermines the adoption of public blockchains for process automation since it conflicts with typical confidentiality requirements in enterprise settings. In this paper, we propose a novel approach and software architecture that allow for fine-grained access control over process data on the level of parts of messages. In our approach, encrypted data are stored in a distributed space linked to the blockchain system backing the process execution; data owners specify access policies to control which users can read which parts of the information. To achieve the desired properties, we utilise Attribute-Based Encryption for the storage of data, and smart contracts for access control, integrity, and linking to process data. We implemented the approach in a proof-of-concept and conduct a case study in supply-chain management. From the experiments, we find our architecture to be robust while still keeping execution costs reasonably low.
Aditya Pribadi Kalapaaking, Ibrahim Khalil, Mohammad Saidur Rahman, Abdelaziz Bouras
Smart manufacturing systems involve a large number of interconnected devices resulting in massive data generation. Cloud computing technology has recently gained increasing attention in smart manufacturing systems for facilitating cost-effective service provisioning and massive data management. In a cloud-based manufacturing system, ensuring authorized access to the data is crucial. A cloud platform is operated under a single authority. Hence, a cloud platform is prone to a single point of failure and vulnerable to adversaries. An internal or external adversary can easily modify users' access to allow unauthorized users to access the data. This paper proposes a role-based access control to prevent modification attacks by leveraging blockchain and smart contracts in a cloud-based smart manufacturing system. The role-based access control is developed to determine users' roles and rights in smart contracts. The smart contracts are then deployed to the private blockchain network. We evaluate our solution by utilizing Ethereum private blockchain network to deploy the smart contract. The experimental results demonstrate the feasibility and evaluation of the proposed framework's performance.
Jonathan Heiss, Robert Muth, Frank Pallas, Stefan Tai
Many service systems rely on verifiable identity-related information of their users. Manipulation and unwanted exposure of this privacy-relevant information, however, must at the same time be prevented and avoided. Peer-to-peer blockchain-based decentralization with a smart contract-based execution model and verifiable off-chain computations leveraging zero-knowledge proofs promise to provide the basis for next-generation, non-disclosing credential management solutions. In this paper, we propose a novel credential on-chaining system that ensures blockchain-based transparency while preserving pseudonymity. We present a general model compliant to the W3C verifiable credential recommendation and demonstrate how it can be applied to solve existing problems that require computational identity-related attribute verification. Our zkSNARKs-based reference implementation and evaluation show that, compared to related approaches based on, e.g., CL-signatures, our approach provides significant performance advantages and more flexible proof mechanisms, underpinning our vision of increasingly decentralized, transparent, and trustworthy service systems.
In this work we develop a rewarding framework that can be used to enhance existing crowd-sensing applications. Although a core requirement of such systems is user engagement, people may be reluctant to participate as sensitive information about them may be leaked or inferred from submitted data. The use of monetary rewards can help incentivize participation, thereby increasing not only the amount but also the quality of sensed data. Our framework allows users to submit data and obtain Bitcoin payments in a privacy-preserving manner, preventing curious providers from linking the data or the payments back to the user. At the same time, it prevents malicious user behavior such as double-redeeming attempts, where a user tries to obtain rewards for multiple submissions of the same data. More importantly, it ensures thefairnessof the exchange in a completely trustless manner; by relying on the Blockchain, the trust placed on third parties in traditional fair exchange protocols is eliminated. Finally, our system is highly efficient as most of the protocol steps do not utilize the Blockchain network. When they do, only the simplest of Blockchain transactions are used as opposed to prior works that are based on the use of more complex smart contracts.
Tahmid Hasan Pranto, Kazi Tamzid Akhter Md Hasib, Tahsinur Rahman, AKM Bahalul Haque · 6 authors
Financial fraud cases are on the rise even with the current technological advancements. Due to the lack of inter-organization synergy and because of privacy concerns, authentic financial transaction data is rarely available. On the other hand, data-driven technologies like machine learning need authentic data to perform precisely in real-world systems. This study proposes a blockchain and smart contract-based approach to achieve robust Machine Learning (ML) algorithm for e-commerce fraud detection by facilitating inter-organizational collaboration. The proposed method uses blockchain to secure the privacy of the data. Smart contract deployed inside the network fully automates the system. An ML model is incrementally upgraded from collaborative data provided by the organizations connected to the blockchain. To incentivize the organizations, we have introduced an incentive mechanism that is adaptive to the difficulty level in updating a model. The organizations receive incentives based on the difficulty faced in updating the ML model. A mining criterion has been proposed to mine the block efficiently. And finally, the blockchain network is tested under different difficulty levels and under different volumes of data to test its efficiency. The model achieved 98.93% testing accuracy and 98.22% Fbeta score (recall-biased f measure) over eight incremental updates. Our experiment shows that both data volume and difficulty level of blockchain impacts the mining time. For difficulty level less than five, mining time and difficulty level has a positive correlation. For difficulty level two and three, less than a second is required to mine a block in our system. Difficulty level five poses much more difficulties to mine the blocks.
Trusted online credential management solutions are needed for instant and practical verification. Most of the available frameworks targeting this field violate the privacy of end-users or lack sufficient solutions in terms of security and Quality-of-Service (QoS). In this paper, we propose a Privacy-aware Fog-enhanced Blockchain-based online credential management solution, namely PriFoB. Our proposed solution adopts a public permissioned Blockchain model with different reliable encryption schemes, standardized Zero-Knowledge-Proofs (ZKPs) and Digital Signatures (DSs) within a Fog–Blockchain integrated framework, which is also GDPR compliant. We deploy both the Proof-of-Authority (PoA) and the Signatures-of-Work (SoW) consensus algorithms for efficient and secure handling of Verifiable Credentials (VCs) and global accreditation of VC issuers, respectively. Furthermore, we propose a novel three-dimensional DAG-based model of the Distributed Ledger (3DDL), and provide a ready-to-deploy PriFoB implementation. We discuss insights regarding the utilization and the potential of PriFoB, and evaluate it in terms of security, privacy, latency, throughput and power utilization. We analyze its performance in different layers of a Fog-enabled cloud architecture with simulation and emulation, and we show that PriFoB outperforms several Blockchain-based solutions utilizing Ethereum, Hyperledger Fabric, Hyperledger Besu and Hyperledger Indy platforms.
With the continuous innovative development and popularization of mobile smart devices , the application of Mobile Crowd Sensing (MCS) continues to be studied extensively. However, existing centralized MCS applications that use servers for task publishing and data collection exhibit common problems, such as single points of failure and security vulnerabilities . Accordingly, we proposed a hybrid blockchain-based identity authentication scheme for MCS called HBIA, which uses blockchain technology to resolve the single-point failure problem. HBIA builds a cluster structure based on factors such as geographical location and balance, and uses it to construct a hybrid blockchain , with the cluster head node and internal cluster node authenticating on the public and private chains, respectively. We also implemented zero-knowledge proof (ZKP) to ensure the privacy of participants’ identities, thus balancing the contradiction between blockchain transparency and security. In addition, HBIA uses the zero-knowledge succinct non-interactive argument of knowledge (zk-SNARK) technology to enable off-chain computing and on-chain verification, further reducing the blockchain’s workload. Finally, HBIA was evaluated based on the pavement crack detection task and tested on the Ethereum public test network known as Ropsten. The test results indicate that the identity authentication scheme proposed in this paper is superior to existing schemes in terms of authentication time.
Aaliya Sarfaraz, Ripon K. Chakrabortty, Daryl Essam
In recent years, supply chains have evolved into huge ecosystems, demanding trust, provenance, and data privacy. Since blockchain technology (BCT) allows for the development of a distributed environment, it is ideal for supply chain management (SCM) applications. However, concerns regarding data privacy have impeded the development of blockchains. Despite the fact that some blockchains can restrict participants from reading and/or writing data, blockchain’s transparency makes protecting sensitive data challenging. To solve the data privacy challenge, this paper proposes a framework, AccessChain, that is an SCM access control framework that is based on an attribute-based access control (ABAC) model that restricts access to competing parties while allowing for network scalability. This proposed AccessChain model has two types of ledgers in its system: local and global. Local ledgers are used to store business contracts between stakeholders and the attribute-based access control model management, whereas the global ledger is used to record transaction data. AccessChain can enable decentralized, fine-grained and dynamic access control management in SCM when combined with the ABAC model and BCT. This paper’s experimental results illustrate that high throughput can be achieved in a large-scale request environment while maintaining data privacy and sustaining a scalable network.
Edge computing offloads the data processing capacity to the user side, provides flexible and efficient computing services for the development of smart city, and brings many security challenges. Aiming at the problems of fuzzy boundary security protection and dynamic identity authentication in the edge computing environment in smart city, the zero trust architecture based on blockchain is studied, and a digital identity model and dynamic authentication scheme of edge computing nodes based on distributed ledger are proposed. Firstly, a digital identity model of two-way authentication between edge computing node and sensing terminal is established to realize fine-grained authorization and access control in edge computing. Secondly, based on the identity data and behavior log bookkeeping on the chain, the quantification of trust value, trust transmission and update are realized, and the traceability of security events is improved. Finally, based on the improved RAFT consensus algorithm, the multi-party consensus and consistency accounting in the authentication process are realized. Simulation results show that this scheme can meet the requirements of zero trust verification in edge computing environment, and has good efficiency and robustness.
Recently, unmanned aerial vehicles (UAVs) have gained attention due to increased use-cases in healthcare, monitoring, surveillance, and logistics operations. UAVs mainly communicate with mobile base stations, ground stations (GS), or networked peer UAVs, known as UAV swarms. UAVs communicate with GS, or UAV swarms, over wireless channels to support mission-critical operations. Communication latency, bandwidth, and precision are of prime importance in such operations. With the rise of data-driven applications, fifth-generation (5G) networks would face bottlenecks to communicate at near-real-time, at low latency and improved coverage. Thus, researchers have shifted towards network designs that incorporate beyond 5G (B5G) networks for UAV designs. However, UAVs are resource-constrained, with limited power and battery, and thus centralized cloud-centric models are not suitable. Moreover, as exchanged data is through open channels, privacy and security issues exist. Federated learning (FL) allows data to be trained on local nodes, preserving privacy and improving network communication. However, sharing of local updates is required through a trusted consensus mechanism. Thus, blockchain (BC)-based FL schemes for UAVs allow trusted exchange of FL updates among UAV swarms and GS. To date, limited research has been carried out on the integration of BC and FL in UAV management. The proposed survey addresses the gap and presents a solution taxonomy of BC-based FL in UAVs for B5G networks due to the open problem. This paper presents a reference architecture and compares its potential benefits over traditional BC-based UAV networks. Open issues and challenges are discussed, with possible future directions. Finally, a logistics case study of BC-based FL-oriented UAVs in 6G networks is presented. The survey aims to aid researchers in developing potential UAV solutions with the key integrating principles over a diverse set of application verticals.
As a peer‐to‐peer “P2P” distributed ledger, the blockchain has the advantages of decentralization, no trust, open autonomy, and nontampering. Therefore, many users are willing to conduct transactions in blockchain cryptocurrency systems such as Bitcoin and Ethereum. However, the throughput of traditional blockchain is extremely low, and the transaction is so delayed. The payment channel network is the most promising solution to expand the blockchain for widespread use. Achieving secure instant payment on the payment channel can significantly increase transaction throughput and reduce transaction delays. When the payment channel is closed, the balance in the channel will be returned to an account on the blockchain. In this paper, we discuss the design and the implementation of a multiparty payment channel network based on smart contracts. Where a two‐party payment channel is designed based on blockchain and smart contracts, a new multiparty payment channel is established on the basis of the payment channel. A detailed definition and description are given, and the creation, update, and closing functions of the multiparty payment channel are designed. Moreover, we design a multiparty payment channel smart contract, deploy it to the local private blockchain, and conduct simulation and testing. The delay time of different transaction methods is counted, and the network topology type, transaction amount, and other factors are studied. The impact of transaction success rate and the gas consumption of different transaction methods are analyzed through multiple sets of experimental statistics.
The continuous production of large-scale data makes data outsourcing computation a trend. In order to ensure that data outsourcing transaction is trusted and fair, it needs the supervision and judgment of a third party. However, the third-party intermediary increases the transaction cost, and there is also subjective unreliability. Smart contracts allow trusted transactions without a third party, which are automatic, traceable and irreversible. Therefore, in this paper, we propose a framework for data outsourcing computation transaction based on the smart contract, in which the transaction is verifiable, fair and privacy protected. In this framework, by improved the replication-based verifiable computation technology, the data in the dataset is evenly distributed to each server, and at least one data in the sub datasets of the adjacent servers is the same, only the results from the duplicate data are verified, so as to implement the verifiable transaction with the low transaction cost. Meanwhile, a punishment mechanism is adopted to solve the fairness of the transaction in the smart contract. In addition, the oblivious transfer protocol is used to implement the privacy protection of transaction data. We deploy the data outsourcing computation transaction framework in the simulation environment of the Ethereum blockchain, and the experimental results show that our proposed scheme is effective and has low overhead. Specifically, the data returned by the server is verifiable, and the data privacy of the client is protected. When the client and servers are dishonest, they will be punished so that the transaction is fair. Moreover, the cost of using the smart contract in transactions is almost negligible.
Privacy is playing a crucial role in the smart health industry, where health service providers and their customers use the internet of things (IoT) to provide and consume health services. Preserving privacy for legitimate users and preventing illegitimate users from accessing services are difficult to implement simultaneously. In this study, we addressed this issue by proposing a new healthcare system for IoT based on the blockchain and zero-knowledge succinct noninteractive argument of knowledge (zk-SNARK). We employ the anonymity property of the public blockchain to protect users’ privacy. The zk-SNARK scheme works as an anonymous authenticator to prevent unauthorized users from using services. We also analyze the security of the proposed system by showing that it can resist various types of attacks, such as impersonation, collusion, and man-in-the-middle attacks. Finally, we evaluate the performance of the zk-SNARK scheme with respect to computational costs and the interactions with the Ethereum blockchain smart contract with respect to transaction fees.
Awais Abdul Khaliq, Adeel Anjum, Abdul Basit Ajmal, Julian Webber · 6 authors
The privacy preservation has received considerable attention from organizations as the growing population is apprehensive regarding personal data being preserved.There are several privacy and security issues in existing systems, such as identity and location disclosure, availability, and authenticity. Smart parking systems utilize third-party parking recommender systems to offer customized parking space recommendations to its users based on user’s past parking experience. However, indiscriminately sharing a user’s data with a third party recommendation system may violate their personal information because their activity and node mobility can be deduced from their previous paring experience. Another problem with existing solutions is that most distributed systems need a third party to anonymize user data to preserve the user’s privacy. Therefore, this article provides three solutions that address the problems mentioned above; at first, based on elliptic curve cryptography (ECC), we proposed the mutual authentication mechanism using HMAC to provide anonymity and integrity during communication; secondly, given the risks to security and privacy posed by untrustworthy third parties, we used local differential privacy, which uses the Laplace distribution technique to add noise randomly and eliminates any necessity for a third party for data perturbation. And thirdly, in addition to LDP , we utilize the IOTA distributed ledger technology to provide a new level of security that ensures immutability, scalability, and quantum secrecy and decentralized the system. Our experiments demonstrate that, in addition to preserving the driver’s privacy and security, our proposed model has low storage overheads, computation, and communication costs.
Open access
Smart Parking Systems Research
Advanced Steganography and Watermarking Techniques
In recent years, the interest in using wireless communication technologies and mobile devices in the healthcare environment has increased. However, despite increased attention to the security of electronic health records, patient privacy is still at risk for data breaches. Thus, it is quite a challenge to involve an access control system especially if the patients’ medical data are accessible by users who have diverse privileges in different situations. Blockchain is a new technology that can be adopted for decentralized access control management issues. Nevertheless, different scalability, security, and privacy challenges affect this technology. To address these issues, we suggest a novel Decentralized Self-Management of data Access Control (DSMAC) system using a blockchain-based Self-Sovereign Identity (SSI) model for privacy-preserving medical data, empowering patients with mechanisms to preserve control over their personal information and allowing them to self-grant access rights to their medical data. DSMAC leverages smart contracts to conduct Role-based Access Control policies and adopts the implementation of decentralized identifiers and verifiable credentials to describe advanced access control techniques for emergency cases. Finally, by evaluating performance and comparing analyses with other schemes, DSMAC can satisfy the privacy requirements of medical systems in terms of privacy, scalability, and sustainability, and offers a new approach for emergency cases.
Tom Godden, Ruben De Smet, Christophe Debruyne, Thibaut Vandervelden · 6 authors
Driven by the increased consciousness in data ownership and privacy, zero-knowledge proofs (ZKPs) have become a popular tool to convince a third party of the truthfulness of a statement without disclosing any further information. As ZKPs are rather complex to design, frameworks that transform high-level languages into ZKPs have been proposed. We propose Circuitree, a Datalog reasoner in zero-knowledge. Datalog is a high-level declarative logic language that is generally used for querying. Furthermore, as a logic language, it can also be used to solve logic problems. An application using Circuitree can efficiently generate ZKPs, based on Datalog rules and encrypted data, to prove that a certain conclusion follows from a Datalog ruleset and encrypted input data. Compared to existing frameworks, which generally use their own limited imperative languages, Circuitree uses an existing high-level declarative language. We point out several applications for Circuitree, including EU Digital COVID Certificates and privacy-preserving access control for peer-to-peer (p2p) networks. Circuitree’s performance is evaluated for access control in a p2p network. First results show that our approach allows for fast proofs and proof verification for this application.