Blockchain Papers

Bharati B. Pannyagol, Santosh L. Deshpande, Rohit B. Kaliwal

No abstract is available for this record.

Tae-Woong Kang, N.S. Woo, Jihyeon Ryu

In the rapidly evolving environment of wireless medical sensor networks (WMSN) and the internet of medical things (IoMT), remote medical support has seen unprecedented advancements. It is essential that the data relayed from the sensors must be trustworthy and unaltered, and that the sensors themselves are genuine. Wireless networks, however, have inherent vulnerabilities. In addition, since WMSN is directly linked to patients’ lives, its continuous availability is crucial. Considerable efforts have been made to maintain the integrity and authenticity of such data. However, many studies have failed to address the problem of a single point of failure (SPOF). This issue has been particularly detrimental to patients who require ongoing management. To address this issue and ensure the protection of the authenticity and integrity of patient data, we suggest the implementation of an authentication scheme based on blockchain technology. In 2022, Yu et al. introduced a blockchain-integrated authentication and key generation scheme for WMSN using Physical Unclonable Functions (PUFs), effectively addressing the SPOF problem by conducting mutual authentication through smart contracts without relying on centralized servers. Our research found that this scheme inadvertently shared critical parameters, including challenge-response pairs and important private keys, with the blockchain network, making it vulnerable to various breaches. We present an enhanced protocol designed to mitigate these security challenges. By limiting the data interaction with smart contracts and ensuring only relevant parties access crucial parameters, our approach reduces the risk of public information disclosure on the blockchain. This not only mitigates the SPOF issue but also efficiently helps in prevention of physical attacks. We prove that our proposed system prevents known security vulnerabilities through informal and formal analysis using the Scyther, Proverif, and BAN logic. Furthermore, the proposed scheme offers 67.37% reduction in computation costs and 3.67% in communication costs, presenting an efficient and secure solution for WMSN in the IoMT landscape.

Iftikhar Aslam Tayubi, Mudarakola Lakshmi Prasad, Pundru Chandra Shaker Reddy, Swati Sharma · 6 authors

No abstract is available for this record.

P. Infant Vinoth, D. Nagendra Kumar, M. P. S. Guhan, M Archana · 5 authors

No abstract is available for this record.

Xingyu Liang, Sen Wang, Ling Xiong

No abstract is available for this record.

Chaoyue Lv, Di Lu, Yuanyuan Zhang, Xindi Ma · 7 authors

No abstract is available for this record.

Nima Modrek Alsaiary, Shakeel Ahmed

The present era is witnessing rapid development in the smartphone revolution, where mobile users can access many required services through mobile applications. These services include healthcare, finance, learning, insurance, and the Internet of Things. Android has become the most popular smartphone operating system, and this rapidly increasing adoption of Android has led to a significant increase in the number of malware compared to previous years, resulting in issues related to the insecurity of mobile applications and the violation of their users' privacy. A large role in this mobile phone revolution has been played by the emergence of blockchain technology (BCT), which represents an effective way to develop applications, improve their security, and protect the privacy of their users. The aim of this paper is to design a system architecture for the software and provide a prototype that uses BCT at its core for the purpose of storing and sharing malicious data while also integrating a malicious detection technique. We employed the design science research approach to guide our project. Through this approach, we successfully integrated a malware detection technique with BCT in an Android application, resulting in a decentralized feature that enables peers to add and share malware data. Furthermore, we have developed an easy-to-use interface that allows users to interact with the blockchain in the Android application. This interface displays the results of the malware signature detection algorithm and enables users to take appropriate action if malware is detected. We have employed a design science methodology to develop a software framework, and open-source code meeting the tool's requirements has been provided. Finally, the proposed methodology has been evaluated against the existing methodologies and compared with the other techniques to demonstrate the effectiveness of the blockchain-based detection tools.

B. Pabitha, V. Vani, Shridhar Sanshi, N. Karthik

No abstract is available for this record.

Saurav Bhattacharya, Madhavi Najana, Harsh Gupta, Anoop Gupta

This article explores the importance of putting users at the center of consent processes, in Single Sign On (SSO) systems to tackle privacy issues and empower user independence. It dives into the world of SSO systems shedding light on their privacy weaknesses and the need for users to have control over how their data is shared. By looking at privacy focused SSO solutions and their drawbacks the article suggests a plan to give users control over their data sharing preferences during authentication. The main elements of this plan include a user consent management interface, consent choices, educational materials, preference persistence and tracking logs. Additionally it talks about the obstacles in implementing consent driven SSO systems like creating consent APIs and incorporating privacy boosting technologies such as zero knowledge proofs and decentralized identity frameworks. By tackling these hurdles and promoting designs that prioritize users the article aims to help create authentication solutions that prioritize privacy in line, with changing regulations and user desires.

Jayaprakash Kar, Xiaoguang Liu, Fagen Li

Implantable medical devices (IMDs) in medical sciences have provided a quantum leap in network transformation. The communication network with IMDs typically has a wireless radio frequency (RF) telemetry or wired connection. IMDs, being devices, have more computing, communication capabilities and decision-making. Furthermore, these devices are being used to improve patients’ quality of life by medicating various chronic diseases. The captured data is stored in a medical server through a controller node. Our work focuses on wireless communication, so sensitive patient data over a public channel might be tampered with or eavesdropped by unauthorised access. Furthermore, the leakage of health data and malfunctioning of IMDs are vital in constructing cryptographic protocols, particularly in the design of remote user authentication. In this paper, we proposed a novel secure remote user authentication scheme using a lightweight consortium blockchain for the communication network with IMDs.

Alpesh Bhudia, Daniel O’Keeffe, Darren Hurley-Smith

No abstract is available for this record.

Samson Kahsay Gebresilassie, Joseph Rafferty, Mamun Abu-Tair, Aftab Ali · 6 authors

The Internet of Things (IoT) is a technology paradigm that has transformed several domains including manufacturing, agriculture, healthcare, power grids, travel, and retail. Despite the enormous advantages that IoT offers to organizations and transforming individuals’ everyday lives in a wide range of domains, it comes with potential cyber risks that can negatively impact, harm, or damage them. Security is the most challenging issue in IoT systems due to insecure devices, inadequate IDMS, lack of data security and privacy, lack of trust, lack of risk analysis on network traffic, various vulnerabilities and attacks, lack of physical security, and many other risk factors. Although several security architectures have been developed, they fail to properly and fully address these IoT security challenges and an urgent demand awaits for a robust IoT security architecture. Thus, this work investigates state-of-the-art solutions and proposes a holistic novel IoT security architecture called SHIELD: Secure Holistic IoT Environment with Ledger-based Defense with core security capabilities of decentralized Identity Management System (IDMS), Network Traffic Monitoring, Analysis, and dataset generation, deep learning-based Intrusion Detection System (IDS), and Distributed Ledger Technology (DLT)-based Trust Management System (TMS). The proposed architecture is qualitatively compared with existing solutions using key features like a single point of failure, risk/attack-aware, trust, real-time traffic behavior monitoring, up-to-date dataset, cross-platform functionality, and availability among others. As a result of this comparison, SHIELD architecture provides a holistic and robust solution with multiple core security features to overcome some of the key security challenges IoT environment.

Xingyu Shang, Meiling Dai, Xiaoou Liu

No abstract is available for this record.

Tuan-Dung Tran, Minh Tran Duc, Trang Le Tran Thuy, Phan The Duy · 6 authors

No abstract is available for this record.

Sameeksha Prasad, Namita Tiwari, Meenu Chawla

No abstract is available for this record.

Khizar Hameed, Faiqa Maqsood, Zhenfei Wang

No abstract is available for this record.

Aditya Pathak, Irfan Al‐Anbagi, Howard J. Hamilton

Authentication in low-latency Internet of Things (IoT) networks must satisfy three requirements, namely, high security and privacy preservation, high scalability, and low authentication time. These requirements arise because devices in IoT networks must operate in a secure and scalable manner despite being limited in computational resources. Existing authentication mechanisms focus on the security and privacy of IoT networks but neglect the importance of scalability and authentication time. Therefore, existing authentication mechanisms are unscalable and unsuited to low-latency IoT networks. With a focus on increasing scalability and reducing the authentication time while providing high security and privacy preservation in low-latency IoT networks, we propose a mutual authentication mechanism called Zero-Knowledge Proof-based Privacy-Preserving Mutual Authentication (Z-PMA) for IoT networks. The Z-PMA mechanism utilizes a combination of a zero-knowledge proof, an incentive mechanism, and a permissioned blockchain to provide secure, privacy-preserving, scalable, low-latency authentication for IoT networks. We develop a new approach to address the trade-off between the three requirements for authentication mechanisms for low-latency IoT networks that has the potential to improve the overall performance of these networks. A permissioned blockchain is incorporated in the approach to provide secure and immutable data storage using its distributed and unforgeable ledger. Our experimental results show that the Z-PMA mechanism reduces authentication time than existing state-of-the-art authentication mechanisms, while providing high security and privacy preservation as well as high scalability.

Ali Shahidinejad, Jemal Abawajy

Due to its diverse and promising use cases, including civilian, military, and commercial, the Internet of Drones (IoD) has quickly become a hot issue in academic and industry circles. Concerns about drone privacy and security are also growing at the same rate. Drones from different flying zones frequently work together in the IoD to accomplish the same mission, necessitating the development of trust among untrusted domains. Recently, some researchers have used blockchain in their authentication scheme to establish trust across different domains. However, the integration led to significant communication, computation and storage overheads and the loss of crucial security features like anonymity or unlinkability. To address these concerns, we develop a cost-effective key exchange protocol for cross-domain IoD communications through the judicious use of the blockchain. Specifically, we employ Chebyshev's chaotic map as the crypto-system, and the ledger keeps only the public keys of the drones, resulting in a significant decrease in storage and computation overheads. The proposed protocol not only complies with the stringent Canetti and Krawczyk adversary model but also satisfies the essential security requirements for IoD, such as anonymity and unlinkability. Using informal justification, formal proof, and automated security reasoning in addition to a comparative performance evaluation, this research substantiates its claims.

Ghassan Al-Sumaidaee, Željko Žilić

In an era dominated by rapid digitalization of sensed data, the secure exchange of sensitive information poses a critical challenge across various sectors. Established techniques, particularly in emerging technologies like the Internet of Things (IoT), grapple with inherent risks in ensuring data confidentiality, integrity, and vulnerabilities to evolving cyber threats. Blockchain technology, known for its decentralized and tamper-resistant characteristics, stands as a reliable solution for secure data exchange. However, the persistent challenge lies in protecting sensitive information amidst evolving digital landscapes. Among the burgeoning applications of blockchain technology, non-fungible tokens (NFTs) have emerged as digital certificates of ownership, securely recording various types of data on a distributed ledger. Unlike traditional data storage methods, NFTs offer several advantages for secure information exchange. Firstly, their tamperproof nature guarantees the authenticity and integrity of the data. Secondly, NFTs can hold both immutable and mutable data within the same token, simplifying management and access control. Moving beyond their conventional association with art and collectibles, this paper presents a novel approach that utilizes NFTs as dynamic carriers for sensitive information. Our solution leverages the immutable NFT data to serve as a secure data pointer, while the mutable NFT data holds sensitive information protected by steganography. Steganography embeds the data within the NFT, making them invisible to unauthorized eyes, while facilitating portability. This dual approach ensures both data integrity and authorized access, even in the face of evolving digital threats. A performance analysis confirms the approach's effectiveness, demonstrating its reliability, robustness, and resilience against attacks on hidden data. This paves the way for secure data transmission across diverse industries.

S. Chidambaranathan, R. Geetha

The idea of networked personal medical devices is a component of contemporary Smart Health Systems (SHS). These gadgets offer remote observing and the exchange of wellbeing information, which enormously further develop the patient's personal satisfaction while at the same time reducing treatment expenses for both the patient and the medical care suppliers (telemedicine). For individuals' wellbeing, a cutting edge individual wellbeing record framework is fundamental. Here, there are still difficulties with information mix from different EHRs, information interoperability, and guaranteeing that admittance to information is totally under the power of the patient. Some security issues are caused by the Network. To settle these issues, we propose a novel profound learning-based framework that circuits state of the art decentralized innovations like IPFS and blockchain with wellbeing information interoperability principles and advances like FHIR's APIs. In this review, we show that correspondence between private clinical gadgets is as a matter of fact powerless to different cyber attacks. We show how an outer assailant could involve man-in-the-center, replay, bogus information infusion, and refusal of-administration assaults to block delicate wellbeing information stream by capturing the correspondence of the individual clinical gadget. We likewise suggest an Interruption Recognition Framework (IDS), GAN, to additional screen traffic on private clinical gear and spot attacks against them. Our extensive investigation shows that GAN, with an F1-score of 98 % and an accuracy of 98.7 %, can successfully and accurately recognise numerous assaults on personal medical equipment.

Junzheng Li, Zhenqi Wang, Shaopeng Guan, Youliang Cao

No abstract is available for this record.

Mandeep Gupta

The proliferation of Internet of Things (IoT) devices has ushered in a new era of connectivity, necessitating robust solutions for user authentication to address security and trust challenges. This paper explores an innovative approach to user authentication in IoT environments by leveraging the unique capabilities of Non-Fungible Tokens (NFTs) and 9NM (9NFTMANIA) tokens, with a specific focus on utilizing contract addresses. The proposed system involves the tokenization of user identities through the creation of contract addresses on blockchain networks. Each user is assigned a unique digital identity represented by an NFT or 9NM token, providing a tamper-proof association between the user and their cryptographic keys. Blockchain smart contracts are employed to manage authentication processes, dictating access control policies based on the user's contract address. The research underscores the importance of industry-wide collaboration to develop common standards for user authentication in IoT environments. By offering a comprehensive exploration of user authentication in IoT using contract address-based NFTs and 9NM tokens that are developed on Satoshi core based blockchain, this paper contributes to the advancement of secure and user-centric practices in the rapidly evolving landscape of IoT technology. The proposed framework not only enhances the overall security posture of IoT networks but also lays the foundation for a more transparent and interoperable authentication ecosystem. This paper has discussed the mechanism where web 3.0 based programming is made using Javascript, Python, ASP.NET and PHP for user authentication considering presence of smart contracts in user wallet.

Neeraj Kumar, Rifaqat Ali

No abstract is available for this record.

Anuj Kumar Singh, Sachin Kumar, Sachin Kumar

No abstract is available for this record.