The Electronic Health Records (EHR) sharing system is the state of art for delivering healthcare. The tools within the system can predict outcomes during the patient's lifetime, monitor how effective are treatments, track therapies and detect human errors. For main industry stakeholders, the priority is to ensure integrity and interoperability across the care continuum. Achieving this priority is still challenging considering an enormous amount of EHR data, security issues, and heterogeneity of healthcare information systems. To overcome these challenges, this work proposes BiiMED: a Blockchain framework for Enhancing Data Interoperability and Integrity regarding EHR-sharing. The proposed solutions include an access management system allowing the exchange of EHRs between different medical providers and a decentralized Trusted Third Party Auditor (TTPA) for ensuring data integrity. This work establishes a foundation for further research on dynamic data interoperability and integrity verification in a fully decentralized environment.
Open banking becomes more and more prevailing in Australia in recent years. It aims to make the users’ personal financial data mutually transfer and exchange across different banks in a secure way. The sensitive data in a financial area requires higher authentication and provenance for participants. In this paper, we propose a provenance-provided data sharing model (PPM) via blockchain to meet the requirements of open banking. The model employs the programmable smart contracts as the middle witness between users and third-party services, and provides the modifications on data layer (data content, transaction structure), smart contract layer (ACL, logic), and application layer (customized APIs). Based on that, our PPM model possesses the properties of transparent authentication, privacy-provided control, and auditable provenance. The analyses and discussion show that our model is a secure and achievable system in the face of open banking.
Before the invention of the various technologies, managing various activities and actions over the internet was achieved through a centralized server to guarantee valid data. With the expanding measure of accessible storage space and the quickening of data stream incited by the internet, a developing enthusiasm for data about the creation procedure and sources of information has developed. While this wide scope of use territories would profit by provenance data, the kind of provenance information, manipulation and querying facilities required vary from application to application. In this way, to discover the distinctions and similitudes between the different application and information model provenance needs and present a general plan for the arrangement of provenance. By characterizing this plan and applying it to existing work we plan to uncover open inquiries in the region of information provenance In this paper we survey the blockchain and provenance of the data in rice supplychain. We implement our proposed approach using smart contract which is to be deploy on ethereum blockchain network in rice supplychain to show the security and provenance of the data . We can track the progress of rice batch after each stage in blockchain and also discussed the need of provenance of assets in supplychain as it increase the trust of the customer
Nasrin Sohrabi, Xun Yi, Zahir Tari, Ibrahim Khalil
Controlling the access over the stored data in the cloud is one of the fundamental security requirements, especially with the wide usage of cloud storage servers for nearly most of the enterprise applications. Traditional cloud-based access control solutions are based on a centralized approach (i.e. a cloud server becomes the central authority to control accesses to the data), which makes it difficult to prevent malicious cloud servers from disclosing user’s data; and therefore compromising the privacy of the stored data. Additionally, the centralization of authority can cause a single point of failure. Furthermore, to provide confidentiality, which is one of the essential security requirements, user’s data is encrypted before it is stored on the cloud. Most of the cloud servers store the decryption keys, after they encrypt the data, in their premises. This compromises data privacy. In this paper we propose a new model that addresses the aforementioned issues. To address the centralization problem, we distributed the access control tasks to smart contracts over a decentralized network, i.e. blockchain. To address the latter, we used Shamir secret sharing scheme to manage the encryption keys. Then we introduced a new type of node, called master node, to our blockchain platform, to store the decryption key parts.
Healthcare data is important in making critical policy decisions, patients care, and medical diagnostics to name a few. Due to the importance and market demand, healthcare data is also vulnerable to cyber attacks. The centralized record keeping systems expose a single node for the attackers to attack. A decentralized system is computationally expensive but has the ability to be revolutionary by keeping the patient at the core and providing security, transparency, privacy, and interoperability of the electronic healthcare data. A blockchain is such an implementation of a distributed and decentralized system using reliable cryptographic algorithms. This paper proposes a secure blockchain based architecture tailored specifically to cater to the needs of e-healthcare systems.
Traditional centralized data storage and processing solutions manifest limitations with regards to overall operational cost and the security and auditability of data. One of the biggest issues with existing solutions is the difficulty of keeping track of who has had access to the data and how the data may have changed over its lifetime; while providing a secure and easy-to-use mechanism to share the data between different users. The ability to electronically regulate data sharing within and across different organizational entities in the supply chain (SC) is an open issue that is only addressed partially by existing legal and regulatory compliance frameworks. In this article, we present Cydon, a decentralized data management platform that executes bespoke distributed applications utilizing a novel search and retrieve algorithm leveraging metadata attributes. Cydon utilizes a smart distributed ledger to offer an immutable audit trail and transaction history for all different levels of data access and modification within a SC and for all data flows within the environment. Results suggest that Cydon provides authorized and fast access to secure distributed data, avoids single points of failure by securely distributing encrypted data across different nodes while maintains an “always-on” chain of custody.
Charla Griffy‐Brown, Howard Miller, Vincent Zhao, Demetrios Lazarikos · 5 authors
Emerging technologies such as artificial intelligence, the Internet of Things, and distributed ledger continue to transform businesses, enabling new value creation in transformative ways. Their potential social impacts create risks. These risks are not easily identified or evaluated making it difficult to address them. There are upside and downside risks. Business leaders from companies deploying these technologies are initially interviewed. Development and preliminary testing of three different risk optimization models using scenario analysis data are informed by this information. Using this analysis, we introduce the foundations for a risk model and potentially a dashboard that executives could use to consider these technologies.
Mohammed Amine Bouras, Qinghua Lu, Zhang Fan, Yueliang Wan · 6 authors
Electronic healthcare (eHealth) identity management (IdM) is a pivotal feature in the eHealth system. Distributed ledger technology (DLT) is an emerging technology that can achieve agreements of transactional data states in a decentralized way. Building identity management systems using Blockchain can enable patients to fully control their own identity and provide increased confidence in data immutability and availability. This paper presents the state of the art of decentralized identity management using Blockchain and highlights the possible opportunities for adopting the decentralized identity management approaches for future health identity systems. First, we summarize eHealth identity management scenarios. Furthermore, we investigate the existing decentralized identity management solutions and present decentralized identity models. In addition, we discuss the current decentralized identity projects and identify new challenges based on the existing solutions and the limitations when applying it to healthcare as a particular use case.
With the approaching of the digital age, digital education resources bring convenience to people because they are prone to duplicate and spread, but there are also some disadvantages in online education service transactions. The security issues of digital education resources and the phenomenon of illegal distribution seriously damage the rights and interests of the owners of digital education resources. Based on this, in this paper, we proposed a blockchain-based digital education resources authentication system which uses the decentralized, tamper-resistant features of blockchain technology to store the digital education resources information in the form of a secret text. In the system, there is no need to require the participation of any third-party institution. The system proposed in this study will greatly protect the rights and interests of the owner of digital education resources.
Data determination is the primary issue to be addressed in open data sharing. This paper proposes a personal data determination method based on blockchain and smart contract, which are used to solve the problem that the current data transaction market relies heavily on system-center entities. it is difficult for centralized method to confirm the data is true and reliable and cause the owner lose the control over data access. The method implements identity authentication by means of certificate authority, and uses digital signature and hash function to store a digest of the original data into the blockchain.By doing this can determine ownership of the data, and prevent it from being tampered with. Constructing a blockchain serving at data interaction platform to realize access control and transfer rights about personal data through the smart contract installed on it,because the operation record of data will be kept on the blockchain one by one.Then using resource state view to speed up the query process. According to experimental simulation concerning about throughput and latency, blockchain and smart contracts can guarantee the authenticity of the data and achieve the right to confirm the data and promote the open sharing of data.
Mohammad Shahriar Rahman, Abdullah Al Omar, Md Zakirul Alam Bhuiyan, Anirban Basu · 6 authors
Cross-border data sharing for knowledge generation is a challenging research direction since an application may access personal data stored in countries different from the one where the application is accessed from. In this article, we propose a cross-border data sharing platform where a global cloud is built atop multiple security gateways that are set up in different countries. Once an application requests access to data from a particular country or region, the global cloud collects the data stored in local data hubs through that region's security gateway. While transferring the data to the global cloud, the security gateway records this transfer information on a blockchain maintained by the global cloud. When an application reports any misbehavior (e.g., providing wrong data type or incorrect data) against a security gateway, the global cloud verifies the claim by auditing the blockchain and punishes the misbehaving security gateway if the claim is true. In the case of false misbehavior report, the application itself will be punished by the global cloud. Thus, our platform provides an accountable data sharing function using blockchain that relies on a relaxed trust assumption on the data providers. We include five algorithms to handle data access request, data sharing, blockchain transaction, detecting, and punishing misbehaving entities. In the algorithms, we also introduce how the transaction takes place in the platform. Thus, the proposed platform is able to handle misbehaving data sender, data receiver, or any entity participating in the platform. We analyze our platform empirically by showing different graphs, which have been generated by a number of experiments on blockchain environment. We also delineate how the multilayer of signature (Elliptic Curve Digital Signature Algorithm) acts in our platform.
Smart cities have experienced rapid development with the advances of information and communication technologies such as Internet of Things (IoT). To tackle the data storage issues raised by large-scale data generated by IoT devices, an increasing number of enterprises and individuals prefer to outsource their data to cloud, where data integrity becomes a concern to cloud users. A variety of provable data possession (PDP) protocols have been proposed for centralized cloud storage scenarios so far. However, a centralized cloud relies too much on the trust of the central servers and, thus, is prone to the single point of failure. In this article, we describe a blockchain-based PDP model to realize the decentralized outsourcing storage framework, and then present a concrete construction of decentralized PDP by using multireplica storage tricks. Moreover, our protocol provides dynamic operations for outsourced data and at the same time, guarantees the fairness of all parties involved. We provide a detailed security proof for the proposed protocol and deploy a smart contract for the protocols as well. We finally evaluate the algorithms and the implementation results demonstrate the practicability of the proposed protocol.
In this competitive world, it is hard to get a job. It requires some specific qualifications and experience according to the post. If a person is not fulfilling these required entities, then not able to apply for that post. Therefore, some people, who are not eligible may use different forgery approaches like fake mark sheets, fake experience certificates, fake medical certificates, etc. However, despite being these fake certificates, some people may have a criminal background also. Therefore, large numbers of resources are required to verify the educational records, criminal background, and experience of a person. Therefore, the proposed system provides an efficient solution to these problems using blockchain technology. In the proposed work, we used three different modules like college, organisation, and police. The college is responsible for providing academic qualifications and the organisation is responsible for providing experience while police are responsible for proving and verification of the criminal record. The proposed system is implemented on the Ethereum blockchain platform and effectively can be used by the organisations for verifying the record of their employees.
Christian Sri Kusuma Aditya, M. Akash, pothuru eswar akash, M. Amitkumar · 8 authors
The complexity of providing secure access, protecting critical data and end-user privacy in cloud data centre is leading to a demand for a new approach in network and data security. Recently, blockchain technology is being used in claims management to provide a decentralized and secure solution. The issue of security is crucial in the Virtual machine authorization in the cloud data centers. In the traditional approach of VM authorization, SSH key and IP address is given to the user to log into virtual machines. This opens much vulnerability as it might get spoofed or sniffed from the network, leading to accesses of private data to intruder. In this work, we propose a method which intends to aid in the security of the VM authorization using claims-based authorization system in conjunction with Blockchain based decentralized storage. Furthermore, the proposed system automates the process of launching a VM in OpenStack orchestration software.
A cyber attack necessitates preventing the spread of damage by quickly responding to the incident. To investigate the situation accurately, we must collect, manage, and maintain log data on devices related to the system. We herein propose a distributed management method for logs using a blockchain scheme. The blockchain scheme has the following two features. One makes managed data tamper resistant. The other makes access to the same data possible with multiple terminals, thereby increasing access availability. A log management method that adapts these features can provide log data that are guaranteed to be complete when needed. This paper presents our evaluation of the feasibility of our method in a prototype.
For the problem that the shared decryption key lacks of fine-grained access control and the search results lacks of correctness verification under one-to-many search model,a verifiable attribute-based searchable encryption scheme based on blockchain was proposed.The ciphertext policy attribute-based encryption mechanism was used on the shared key to achieve fine-grained access control.Ethereum blockchain technology was combined to solve the problem of incorrect search results returned by the semi-honest and curious cloud server model,so it could prompt both the cloud server and the user to follow the rules of the contract honestly and achieved service-payment fairness between the user and the cloud server in the pay-per-use cloud environment.In addition,based on the irreversible modification of the blockchain,the cloud server was guaranteed to receive the service fee,and the user was assured to obtain the correct retrieval results without additional verification which reduced the computational overhead of the user.The security analysis shows that the scheme satisfies the semantic security against adaptive chosen keyword attack and can protect the privacy of users and the security of data.The performance comparison and experimental results show that the scheme has certain optimizations in security index generation,search token generation,retrieval efficiency and transaction quantity,so it is more suitable for one-to-many search scenarios such as smart medical.
Nowadays, as lightweight mobile clients become more powerful and widely used, more and more information is stored on lightweight mobile clients, user sensitive data privacy protection has become an urgent concern and prob... | Find, read and cite all the research you need on Tech Science Press
Blockchain has a strong capacity to monitor and retain educational records. The paperless future has yet to become a reality, even with the ability to digitally generate documents. Physical copy of records are still regularly printed which makes them susceptible to document fraud. Thus, the issue of fake certificates and academic records has risen drastically. In this paper, we have made a reliable verification method to avoid academic frauds. The idea presented here is developed over Hyperledger. The University or The Educational Institute is responsible for issuing the certificates, mark-sheets, transcripts, etc. and mining it over the blockchain. The student is provided with the hash number which is the reference number. This number serves the reference of the data. The Organization or the Industry Personal using the hash number checks for the integrity of the submitted document. The present study discusses about importance of block chain and it’s applicability especially for the applications like verification of Academic Records.