Follow blockchain research across journals, conferences, and preprint repositories.
3,460 results · page 124 of 145
Elvira Albert, Pablo Gordillo, Albert Rubio, Ilya Sergey
No abstract is available for this record.
Roman Mühlberger, Stefan Bachhofner, Claudio Di Ciccio, Luciano García‐Bañuelos · 5 authors
No abstract is available for this record.
Mark D. Sheldon
SUMMARY Blockchain is a disruptive technology that offers advantages to the audit profession such as transparency into all transactions, an immutable ledger, and the potential for real-time auditing. However, to realize these benefits, the profession must be prepared to gain comfort over blockchains as a component of organizations' information technology infrastructure. This paper considers risks to private and permissioned blockchains through the lens of information technology general controls (ITGCs) as part of an audit of internal control over financial reporting. I discuss new ITGC areas of focus for auditors to consider, along with areas of risk that blockchain could eliminate. To help readers better understand this emerging topic, I provide illustrations, a summary table of key points, and a glossary of blockchain-related terms used throughout the paper. This paper should be viewed as a primer of ITGC considerations on blockchain audits, as more nuanced concerns will emerge as the technology evolves.
Babu Pillai, Kamanashis Biswas, Vallipuram Muthukkumarasamy
The future of distributed ledger technology such as blockchain is dependent on its ability to interact and integrate with other systems. Therefore, interoperability has become a fundamental issue that needs to be addressed. The emerging category of crypto-assets are managed and understood using different frameworks. There is, therefore, a need for a unified classification of crypto-assets. This work aims to bring some clarity to and understanding on interoperable crypto-assets and their characteristics. This paper categorizes digital crypto-assets for the purpose of implementing interoperability. The categorization of crypto-assets is based on their functionalities and their purpose. An interoperability scenario has been given for the defined crypto-asset classes.
Deepak Puthal, Saraju P. Mohanty, Priyadarsi Nanda, Elias Kougianos · 5 authors
Resource -constrained distributed systems such as the Internet of Things (IoT), edge computing and fog computing are deployed for real-time monitoring and evaluation. Current security solutions are problematic when there is a centralized controlling entity. The blockchain provides decentralized security architectures using proof-of-work (PoW). Proof-of-work is an expensive process for IoT and edge computing due to the deployment of resource-constrained devices. This paper presents a novel consensus algorithm called Proof-of-Authentication (PoAh) to replace Proof-of-Work and introduce authentication in such environments to make the blockchain application-specific. This paper implemented the Proof-of-Authentication system to evaluate its sustainability and applicability for the IoT and edge computing. The evaluation process is conducted in both simulation and real-time testbeds to evaluate performance. Finally, the process of Proof-of-Authentication and its integration with blockchain in resource-constrained distributed systems is discussed. Our proposed PoAh, while running in limited computer resources (e.g. single-board computing devices like the Raspberry Pi) has a latency in the order of 3 secs.
Yuan Zhang, Chunxiang Xu, Nan Cheng, Hongwei Li · 6 authors
We propose Chronos+, an accurate blockchain-based time-stamping scheme for outsourced data, where both the storage and time-stamping services are provided by cloud service providers. Specifically, Chronos+integrates a file into a transaction on a blockchain once the file is created, which guarantees the file's latest creation time to be the time when the block containing the transaction is appended to the blockchain. A sufficient number of consecutive blocks that are latest confirmed on the blockchain is embedded into the file at the creation time. These blocks serve as a time-dependent random seed to prove the earliest creation time, due to blockchains' chain quality property. Chronos+makes the file's timestamp corresponding to a time interval formed by the earliest and latest creation times which are derived from the heights of the corresponding blocks. Due to blockchains' chain growth property, such a height-derived timestamp can ensure that the time intervals' range is within a few minutes so as to guarantee the accuracy. We also point out potential threats towards outsourced time-sensitive files and present security analyses to prove that Chronos+is secure against these threats. Comprehensive performance evaluations demonstrate the efficiency and practicality of Chronos+.
Kai Li, Yuzhe Tang, Beom Heyn Kim, Jianliang Xu
This work presents ContractChecker, a Blockchain-based security protocol for verifying the storage consistency between the mutually distrusting cloud provider and clients. Unlike existing protocols, the ContractChecker uniquely delegates log auditing to the Blockchain, and has the advantages in reducing client cost and lowering requirements on client availability, lending itself to modern scenarios with mobile and web clients. The ContractChecker collects the logs from both clients and the cloud server, and verifies the consistency by cross-checking the logs. By this means, it does not only detects the attacks from malicious clients and server forging their logs, but also is able to mitigate those attacks and recover the system from them. In addition, we design new attacks against ContractChecker exploiting various limits in real Blockchain systems (e.g., write unavailability, Blockchain forks, contract race conditions). We analyze and harden the security of ContractChecker protocols against the proposed new attacks. For evaluating the cost, we build a functional prototype of the ContractChecker on Ethereum/Solidity. By experiments on private and public Ethereum testnets, we extensively evaluate the cost of the ContractChecker in comparison with that of existing client-based log auditing works. The result shows the ContractChecker can scale to hundreds of clients and save client costs by more than one order of magnitude.
Benoît Libert, Khoa Nguyen, Benjamin Hong Meng Tan, Huaxiong Wang
No abstract is available for this record.
Huaqun Wang, Qihua Wang, Debiao He
Remote data secure storage is of crucial importance in cloud computing. In order to check remote data integrity, an important paradigm PDP (i.e., provable data possession) is proposed. All the existing PDP schemes make use of RSA or bilinear pairings. One large file has to be divided into a great many of blocks. For example, 1T (Terabit) file has to be divided into$1.0737 \times 10^9$blocks (RSA where the length of the index is 1024 bits) or$6.8719 \times 10^9$blocks (bilinear pairings where the order of the elliptic curve is 160 bits). The huge computation cost and communication cost incurs the inefficient PDP implementation. In other words, they are not practical. In order to solve the problem, we propose a new PDP model: blockchain-based private PDP. The new concept makes use of blockchain which is the core of cryptocurrency. For the new concept, the paper formalizes its system model and security model. Then, a concrete blockchain-based private PDP scheme is designed by making use of blockchain and RSA. The proposed blockchain-based private PDP scheme is provably secure. At the same time, we also analyze its performance from two parts: theory analysis and implementation prototype. Our analysis shows that the proposed PDP scheme is secure, efficient and practical.
Bai Li, Mi Hu, Min Liu, Jingwei Wang
Blockchain is experiencing rapid development and has the full potential of revolutionizing the IoT platform in the industrial field. In this paper, a light-weighted Blockchain-based platform for IIoT is presented to address security, trust, and island connection problem in the process of IIoT ecosystem construction. BPIIoT is comprised of the on-chain network and the off-chain network. All transactions are processed in the on-chain network such as including digital signature based on access control and programmable permission. The off-chain network deals with the storage, complex data processing, and other problems that blockchain cannot solve. The smart contract is utilized as the service contract of consumers and manufacture resources, providing on-demand manufacturing service. Two smart application cases, manufacturing equipment data sharing and maintenance service sharing from smart manufacturing, are implemented to explain the smart contract for equipment maintenance service and status data sharing service throughout maintenance, repair, and operation service network by the BPIIoT.
Mary Maller, Sean Bowe, Markulf Kohlweiss, Sarah Meiklejohn
Ever since their introduction, zero-knowledge proofs have become an important tool for addressing privacy and scalability concerns in a variety of applications. In many systems each client downloads and verifies every new proof, and so proofs must be small and cheap to verify. The most practical schemes require either a trusted setup, as in (pre-processing) zk-SNARKs, or verification complexity that scales linearly with the complexity of the relation, as in Bulletproofs. The structured reference strings required by most zkSNARK schemes can be constructed with multi-party computation protocols, but the resulting parameters are specific to an individual relation. Groth et al. discovered a zk-SNARK protocol with a universal structured reference string that is also updatable, but the string scales quadratically in the size of the supported relations.<br/> <br/>Here we describe a zero-knowledge SNARK, Sonic, which supports a universal and continually updatable structured reference string that scales linearly in size. We also describe a generally useful technique in which untrusted “helpers” can compute advice that allows batches of proofs to be verified more efficiently. Sonic proofs are constant size, and in the “helped” batch verification context the marginal cost of verification is comparable with the most efficient SNARKs in the literature<br/>
Andrew Poelstra, Adam G. Back, Mark Friedenbach, Gregory Maxwell · 5 authors
No abstract is available for this record.
Rongyue Zheng, Jianlin Jiang, Xiaohan Hao, Wei Ren · 6 authors
Building Information Modeling (BIM) is envisioned as an indispensable opportunity in the architecture, engineering, and construction (AEC) industries as a revolutionary technology and process. Smart construction relies on BIM for manipulating information flow, data flow, and management flow. Currently, BIM model has been explored mainly for information construction and utilization, but rare works pay efforts to information security, e.g., critical model audit and sensitive model exposure. Moreover, few BIM systems are proposed to chase after upcoming computing paradigms, such as mobile cloud computing, big data, blockchain, and Internet of Things. In this paper, we make the first attempt to propose a novel BIM system model called bcBIM to tackle information security in mobile cloud architectures. More specifically, bcBIM is proposed to facilitate BIM data audit for historical modifications by blockchain in mobile cloud with big data sharing. The proposed bcBIM model can guide the architecture design for further BIM information management system, especially for integrating BIM cloud as a service for further big data sharing. We propose a method of BIM data organization based on blockchains and discuss it based on private and public blockchain. It guarantees to trace, authenticate, and prevent tampering with BIM historical data. At the same time, it can generate a unified format to support future open sharing, data audit, and data provenance.
Julius Köpke, Marco Franceschetti, Johann Eder
No abstract is available for this record.
Ahaan Dabholkar, Vishal Saraswat
No abstract is available for this record.
Haiyan Wang, Jiawei Zhang
Achieving data integrity verification for large-scale IoT data in cloud storage safely and efficiently has become one of the hot topics with further applications of Internet of Things. Traditional data integrity verification methods generally use encryption techniques to protect data in the cloud, relying on trusted Third Party Auditors (TPAs). Blockchain based data integrity schemes can successfully avoid the trust problem of TPAs, however, they have to face the problems of large computational and communication overhead. To address the issues above, we propose a Blockchain and Bilinear mapping based Data Integrity Scheme (BB-DIS) for large-scale IoT data. In our BB-DIS, IoT data is sliced into shards and homomorphic verifiable tags (HVTs) are generated for sampling verification. Data integrity can be achieved according to the characteristics of bilinear mapping in the form of blockchain transactions. Performance analysis of BB-DIS including feasibility, security, dynamicity and complexity is also discussed in detail. A prototype system of BB-DIS is then presented to illustrate how to implement our verification scheme. Experimental results based on Hyperledger Fabric demonstrate that the proposed verification scheme significantly improves the efficiency of integrity verification for large-scale IoT data with no need of TPAs.
Michael Borkowski, Marten Sigwart, Philipp Frauenthaler, Taneli Hukkinen · 5 authors
Current blockchain technologies provide very limited interoperability. Restrictions with regard to asset transfers and data exchange between different blockchains reduce the usability and comfort of users, and hinder novel developments within the blockchain space. As a first step towards blockchain interoperability, we propose the DeXTT cross-blockchain transfer protocol, which can be used to record a token transfer on any number of blockchains simultaneously in a decentralized manner. We provide a reference implementation using Solidity, and evaluate its performance. We show logarithmic scalability of DeXTT with respect to the number of participating nodes, and analyze cost requirements of the transferred tokens.
Mubashar Iqbal, Raimundas Matulevičius
Although the blockchain-based applications are considered to be less vulnerable due to the nature of the distributed ledger, they did not become the silver bullet with respect to securing the information against different security risks. In this paper, we present a literature review on the security risks that can be mitigated by introducing the blockchain technology, and on the security risks that are identified in the blockchain-based applications. In addition, we highlight the application and technology domains where these security risks are observed. The results of this study could be seen as a preliminary checklist of security risks when implementing blockchain-based applications.
Ivan Tarkhanov
This study attempts to create a cryptocurrency classification metod and tool for reliability assessment from the point of view of investors and traders. The definition of the reliability of cryptocurrency and classification criteria is formulated. The following emphasizes how, using the support vector method, based on the available open data, it is possible to determine the reliability of Ethereum-based cryptocurrencies. As a result of testing, 15 reliable cryptocurrencies were identified and software was developed that allows you to collect and classify cryptocurrencies.
Hongzhi Li, Dezhi Han
Accurate and complete educational records are a valuable asset for people. In recent years, educational records have been digitized. However, there are still two key challenges that have not been resolved. One is to achieve secure and privacy-preserving storage of educational records, while another concern how to realize the sharing of educational records and ensure the security of the sharing process. In this paper, we propose EduRSS, a blockchain-based storage and sharing scheme for educational records is proposed, which combines blockchain, storage servers, and cryptography techniques to create a reliable and safe environment. In our proposal, the blockchain technology is used to ensure the security and reliability of data storage, while the smart contracts on the blockchain are used to regulate the process of storage and sharing. More precisely, the off-chain storage servers store the original educational records in encrypted form, while the hash information of the records is stored on the blockchain. The off-chain records are anchored periodically with the hash information on the blockchain to ensure the security of data storage. Cryptography techniques are utilized to handle records encryption and messages digital signature. To assess the effectiveness of EduRSS, we designed and tested a proof of concept of this scheme. The relative security analysis shows that EduRSS is safe and has a lower computational cost than that of the CP-ABE and the MA-CPABE schemes.
Keundug Park, Dae Kyung Kim, Heung Youl Youm
No abstract is available for this record.
Fei Tang, Shuai Ma, Yong Xiang, Changlu Lin
In traditional electronic health records (EHRs), medical-related information is generally separately controlled by different hospitals and thus it leads to the inconvenience of information sharing. Cloud-based EHRs solve the problem of information sharing in the traditional EHRs. However, cloud-based EHRs suffer the centralized problem, i.e., cloud service center and key-generation center. This paper works on creating a new EHRs paradigm which can help in dealing with the centralized problem of cloud-based EHRs. Our solution is to make use of the emerging technology of blockchain to EHRs (denoted as blockchain-based EHRs for convenience). First, we formally define the system model of blockchain-based EHRs in the setting of consortium blockchain. In addition, the authentication issue is very important for EHRs. However, existing authentication schemes for blockchain-based EHRs have their own weak points. Therefore, in this paper, we also propose an authentication scheme for blockchain-based EHRs. Our proposal is an identity-based signature scheme with multiple authorities which can resist collusion attack out of N from N-1 authorities. Furthermore, our scheme is provably secure in the random oracle model and has more efficient signing and verification algorithms than existing authentication schemes of blockchain-based EHRs.
David Derler, Kai Samelin, Daniel Slamanig, Christoph Striecks
Blockchain technologies recently received a considerable amount of attention. While the initial focus was mainly on the use of blockchains in the context of cryptocurrencies such as Bitcoin, application scenarios now go far beyond this. Most blockchains have the property that once some object, e.g., a block or a transaction, has been registered to be included into the blockchain, it is persisted and there are no means to modify it again. While this is an essential feature of most blockchain scenarios, it is still often desirable-at times it may be even legally required-to allow for breaking this immutability in a controlled way.
Xinyu Li, Jing Xu, Xiong Fan, Yuchen Wang · 5 authors
Proof-of-stake blockchain protocols are becoming one of the most promising alternatives to the energy-consuming proof-of-work protocols. However, one particularly critical threat in the PoS setting is the well-known long-range attacks caused by secret key leakage (LRSL attack). Specifically, an adversary can attempt to control/compromise accounts possessing substantial stake at some past moment such that double-spend or erase past transactions, violating the fundamental persistence property of blockchain. Puncturable signatures provide a satisfying solution to construct practical proof-of-stake blockchain resilient to LRSL attack, despite of the fact that existent constructions are not efficient enough for practical deployments. In this paper, we provide an in-depth study of puncturable signatures and explore its applications in the proof-of-stake blockchain. We formalize a security model that allows the adversary for adaptive signing and puncturing queries, and show a construction with efficient puncturing operations based on the Bloom filter data structure and strong Diffie-Hellman assumption. The puncturing functionality we desire is for a particular part of message, like prefix, instead of the whole message. Furthermore, we use puncturable signatures to construct practical proof-of-stake blockchain protocols that are resilient to LRSL attack, while previously the forward-secure signature is used to immunize this attack. We implement our scheme and provide experimental results showing that in comparison with the forward-secure signature, our construction performs substantially better on signature size, signing and verification efficiency, significantly on key update efficiency.