Wondeuk Yoon, Janggwan Im, Indal Choi, Daeyoung Kim
Today, the Internet of Things (IoT) technology is applied everywhere, providing tremendous amounts of IoT service. The GS1, a non-profit international standards organization, has established standards for IoT technology. Especially, the GS1 standardized an Object Name Service (ONS) leveraging DNS's distributed and federated infrastructure, enables users to manage and discover IoT services such as the retail, food, healthcare, smart city, and so on. However, the ONS is vulnerable to the data tampering, privilege escalation, and service fault caused by DNS attacks including the man in the middle, cache poisoning, replay, hijacking, and denial of service attacks. Nowadays, IoT services are used in security-sensitive areas, such as finance and healthcare. Therefore, the security of ONS should be strengthened before causing severe problems such as data breach, economic loss, and social loss. In this paper, we propose a blockchain-based ONS with a tokenized authority called the BlockONS. The BlockONS provides strength in the data tampering and privilege escalation allowing a fault tolerance. The BlockONS consists of a content off-chain scaling, a data tampering validation method, a fault-tolerance method, and a Blockchain Token-Based Access Control (BTBAC) method. We designed the BlockONS into two parts: A BlockONS Node part manages the validation method and BTBAC model. A BlockONS Agent part manages the off-chain scaling and fault tolerance. Finally, we implemented the BlockONS leveraging a Hyperledger Sawtooth blockchain. We proved the proposed validation method, fault tolerance method, and BTBAC method through use cases and security analyses on attack situations. We deployed the BlockONS in the Daejeon city and evaluated the performance to show the feasibility of the BlockONS.
Blockchain is a decentralised, replicated, transparent and immutable data store. Blockchains are best described not as 'trustless', but on the basis of distributed trust: trusting everyone in aggregate. Consensus protocols are the heart and soul of the blockchains as they help in achieving this distributed trust. Blockchains are updated via the consensus protocols that guarantee their consistency and integrity over geographically distributed network nodes. Various algorithms can be applied to achieve a consensus based on the requirements like performance, security, scalability, consistency, and failure redundancy. Creating a global fair decentralised consensus protocol is of prime importance, in order to address above-mentioned requirements sufficiently. This paper focuses on analysing the already proposed consensus protocols adopted by popular blockchain platforms to determine their feasibility and efficiency. Parameters that are critical in evaluating blockchain consensus protocol are also discussed. This paper also analyses the hardness of achieving the fair decentralised trust with proof.
Huge storage volume is one of the main bottlenecks for the development of blockchain, so how to release the burden by optimizing the storage mechanism has become an important problem. Most of the current solutions would modify the architecture of blockchain, which weakens the characteristics of the decentralization, such as cloud storage. In this paper, a storage optimization mechanism based on residual number system is proposed to reduce the storage volume on each node. In addition, the recovery procedure of CRT-II (The new Chinese Remainder Theorem) is used to detect garbled data from devil nodes, which enable the proposed storage mechanism with strong fault tolerance capability. Both theoretical analysis and simulation results prove the effectiveness and reliability of the proposed scheme.
Blockchain frameworks enable the immutable storage of data. A still open practical question is the so called "oracle" problem, i.e. the way how real world data is actually transferred into and out of a blockchain while preserving its integrity. We present a case study that demonstrates how to use an existing industrial strength secure element for cryptographic software protection (Wibu CmDongle / the "dongle") to function as such a hardware-based oracle for the Hyperledger blockchain framework. Our scenario is that of a dentist having leased a 3D printer. This printer is initially supplied with an amount of x printing units. With each print action the local unit counter on the attached dongle is decreased and in parallel a unit counter is maintained in the Hyperledger-based blockchain. Once a threshold is met, the printer will stop working (by means of the cryptographically protected invocation of the local print method). The blockchain is configured in such a way that chaincode is executed to increase the units again automatically (and essentially trigger any payment processes). Once this has happened, the new unit counter value will be passed from the blockchain to the local dongle and thus allow for further execution of print jobs.
Kun Hao, Junchang Xin, Zhiqiong Wang, Keyan Cao · 5 authors
Outsourced data, as significant service offered by the cloud service provider (CSP), can effectively facilitate the data owner (DO) overcoming the storage limitations on massive data. To ensure the availability of data, DO usually outsources the data replications to multiple CSPs (multi-CSPs) and utilizes a third party metadata management (TPMM) to dominate the metadata of the corresponding replications. However, during the outsourced procedures, DO can hardly confirm the confidence of the TPMM who may take some malicious behaviors to affect the reliability of data. Thus, DO inevitably faces data security issues caused by the over-reliance on the semi-trusted TPMM to manage the metadata of replications. In this paper, we focus on the problem of reliable outsourced data service among multi-CSPs in untrusted environment, that is, how to reliably store and verify the metadata of the data replications in untrusted multi-CSPs environment. To address the problem, we use the novel blockchain technology as a medium to build a trusted outsourced service platform. Moreover, we fully consider the innovative characteristics of blockchain including decentralized architecture, redundancy storage, collective maintenance, and tamper resistant to ensure the data cannot be changed maliciously. We first design a blockchain-based outsourced service framework for storing data replications in untrusted environment, which contains three key layers, that is, storage layer, verification layer, and blockchain layer. Then, we devise a novel concept of verification peer (VP) for maintaining metadata stored by a form of blockchain, and each of which holds the entire blockchain locally to prevent metadata from being maliciously tampered with. Finally, based on the proposed model, we introduce a collaborative algorithm invoked by VPs to store and verify the metadata of replications. We present a completed analysis and conduct extensive experiments on multi-CSPs scenario. The evaluation results demonstrate that our proposed approach achieves superior performance.
Many Internet users employ a multitude of online services. Many services require the same data to be entered and users enter it repeatedly. Instead of entering information for every new service a user wants to use, we propose a system that allows users to simply share a set of information with any service they want to use. The information is entered once and stored in a distributed storage system. Users can easily share the data with any service provider, in order to use a service. Our proposed system makes use of the distributed ledger, provided by blockchains, to manage access rights. By taking the data away from the service providers, the personal data is also protected against unwanted data leaks.
With the emergence of large scale data collection from Internet of Things and mobile devices, the notion of trust is now an increasingly important aspect of the next generation of data processing systems. We propose a blockchain enabled relational storage system that supports immutable transactions and temporal snapshots. By embedding blockchains in relational tables, the database stores trust related information in a tamper proof fashion, making the data provenance provably verifiable. To support large query workloads, we further propose an optimization algorithm that determines the best temporal snapshots to materialize in order to minimize the total time cost of answering a given query workload. Experimental evaluation shows that our materialized snapshot approach improves the performance of large analytical query workloads by as much as 50 times.
We propose a token-based blockchain system that streamlines abstractions into a universal token structure. In the proposed system, each token has an identity that enables the implementation of specific rollbacks and governance that make 51% attacks unprofitable. Because the token-based bookkeeping method only verifies and updates the ownership within each transaction, the proposed system supports parallel expansion and cross-chain transactions without limit. The flexible authority management mechanism of the proposed system is regulatory-friendly, as the intensity of supervision and governance can be adapted to accommodate different application scenarios.
Blockchain architecture in Smart Pedagogy offers valuable social propositions like trust, identity, transparency, immutability, smart contracts and disintermediation. There are multiple practices how to record learners' achievements and present learning transcripts where the most common practices are university issued diplomas and vendor issued certificates. There are social networks which allow users to publish their learning achievements for possible stakeholders; however, the common problem is to verify if published diplomas and certificates are valid.
Chaoyang Li, Gang Xu, Yuling Chen, Haseeb Ahmad · 5 authors
Blockchain technology has become a research hotspot in recent years with the prominent characteristics as public, distributed and decentration. And blockchain-enabled internet of things (BIoT) has a tendency to make a revolutionary change for the internet of things (IoT) which requires distributed trustless consensus. However, the scalability and security issues become particularly important with the dramatically increasing number of IoT devices. Especially, with the development of quantum computing, many extant cryptographic algorithms applied in blockchain or BIoT systems are vulnerable to the quantum attacks. In this paper, an anti-quantum proxy blind signature scheme based on the lattice cryptography has been proposed, which can provide user anonymity and untraceability in the distributed applications of BIoT. Then, the security proof of the proposed scheme can derive that it is secure in random oracle model, and the efficiency analysis can indicate it is efficient than other similar literatures.
Jan 1, 2019·Proceedings of the ... Annual Hawaii International Conference on System Sciences/Proceedings of the Annual Hawaii International Conference on System Sciences
Leonardo Maria De Rossi, Nico Abbatemarco, Gianluca Salviotti
The increasingly need for companies to keep a high level of synchronization globally and the advent of new technologies are pushing more and more to move decision-making and operational power from the centre of organizations to their edges. The blockchain could be the key technology to make this change possible. However, there is no bridge yet capable of shortening the still long distance between this new technological phenomenon and today's business realities. Our work aims precisely at this goal; we propose a framework of blockchain models to help practitioners understanding and potentially implement new solutions based on this technological paradigm. In particular, we have developed an ontology that helps to identify and clarify in detail what are the concepts and structures revolving around this technology, and built a continuum of blockchain architectural solutions, ranging from a classic centralized IT architecture to one completely distributed within a public ecosystem.