Follow blockchain research across journals, conferences, and preprint repositories.
1,050 results ¡ page 14 of 44
M. Indushree, Manish Raj
No abstract is available for this record.
Randa Kamal, Ezz ElâDin Hemdan, Nawal ElâFishway
During the crisis of COVID-19, the need to stay at home has raised dramatically. In addition, the number of sick people, especially elderly persons, has increased exponentially. In such a scenario, home monitoring of patients can ensure remote healthcare at home using advanced technologies such as the Internet of Medical Things (IoMT). The IoMT can monitor and transmit sensitive health data, however, it may be vulnerable to various attacks. In this paper, an efficient healthcare security system is proposed for IoMT's applications. In the proposed system, the medical sensors can transmit sensed encrypted health data via a mobile application to the doctor for privacy. Then, three consortium blockchains are constructed for load balancing of transactions and reducing transaction latency. They store the credentials of system entities, doctor's prescriptions, and recommendations according to the data transmitted via mobile applications and the medical treatment process. Besides, cancelable biometrics are used for providing authentication and increasing the security of the proposed medical system. The investigational results show that the proposed system outperforms existing work where the proposed model consumed less processing time by values of 18%, 22%, and 40%, and less energy for processing a 200 KB file by values of 9%, 13%, and 17%. Finally, the proposed model consumed less memory usage by values of 7%, 7%, and 18.75%. From these results, it is clear the proposed system gives a very reliable and secure performance for efficiently securing medical applications.
K Shruthi, A.S. Poornima
Patient clinical information is critical information for a well-being application. Clinical information regularly assumes a significant part in illness examination and is ensnared in persuading values for instructing symptomatic techniques and altering analytic outcomes. Privacy of patient well-being reports is more significant, furthermore, subsequently, specialists have considered numerous safety efforts, counting access control, classification, and uprightness of these records. To take care of the security issue, this paper presents a high-level arrangement in light of changing over clinical information into minimized size, as a watermark before being sent on Blockchain. Along these lines, difficult tasks will be securely performed off-chain, like gathering and preprocessing patient information, while accommodation of this information is finished on an hourly premise chain. We suggest an information stream design that consolidates the IoT with blockchain using the Ethereum platform, utilizing brilliant agreements to access and store information against many assaults. The proposed model is successful in sharing and overseeing patient electronic well-being information. The tests need to be carried out on Ethereum chain arrangements on laptops, and desktops.
Yizhong Liu, Andi Liu, Yu Xia, Bin Hu ¡ 7 authors
With the emergence of the resource and equipment sharing concept, many enterprises and organizations begin to implement cross-domain sharing of devices, especially in the field of the Internet of Things (IoT). However, there are many problems in the cross-domain usage process of devices, such as access control, authentication, and privacy protection. In this paper, we make the following contributions. First, we propose a blockchain-based cross-domain authentication management system for IoT devices. The sensitive device information is stored in a Merkle tree structure where only the Merkle root is uploaded to the smart contract. Second, a detailed security and performance analysis is given. We prove that our system is secure against several potential security threats and satisfies validity and liveness. Compared to existing schemes, our schemes realize decentralization, privacy, scalability, fast off-chain authentication, and low on-chain storage. Third, we implement the system on Ethereum with varying parameters known as domain number, concurrent authentication request number, and Merkle tree leaf number. Experimental results show that our solution supports the management of millions of devices in a domain and can process more than 10,000 concurrent cross-domain authentication requests, consuming only 5531 ms. Meanwhile, the gas costs are shown to be acceptable.
Garima Misha, Bramah Hazela, Brijesh Kumar Chaurasia
Internet of Things (IoT) applications, such as e-healthcare departments have grown tremendously where devices gather patient data and instantly transmit it over a distance to servers. Despite its huge advantages, IoT in the healthcare sector has acquired little consideration, largely because of the threats of unauthorized access to private health data made possible by the weak wireless communication channel. The economic complexity of the current security protocols makes them inappropriate, hence new security protocols must be developed for resource-constrained and diverse IoT networks. This work suggests an authenticated key agreement protocol for the Internet of medical things (IoMT) that is based on zero-knowledge proofs (ZKP). The research will include the comparison between computational delays in traditional protocols and ZKP protocol. This paper provides a protocol to obtain privacy of data in IoMT environment on the basis of zero knowledge phenomenon and anonymous communication by ZKP.
Namrata Singh, Ayan Kumar Das
No abstract is available for this record.
Mirza Kamrul Bashar Shuhan, Tariqul Islam, Enam Ahmed Shuvo, Faisal Haque Bappy ¡ 6 authors
Over the past two decades, the popularity of messaging systems has increased both in enterprise and consumer level. Many of these systems used secure protocols like end-to-end encryption to ensure strong security features such as âfuture secrecyâ for one-to-one communication. However, the majority of them rely on centralized servers owned by big IT companies, which allows them to use their usersâ personal data. Also it allows the government to track and regulate their citizensâ activities, which poses significant threats to âdigital freedomâ. Also, these systems have failed to achieve security attributes like confidentiality, integrity, privacy, and future secrecy for group communications. In this paper, we present a novel blockchain-based secure messaging system named Quarks that overcomes the security pitfalls of the existing systems and eliminates the centralized control. We have analyzed our design of the system with security models and definitions from existing literature to demonstrate the systemâs reliability and usability. We have developed a Proof of Concept (PoC) of the Quarks system leveraging Distributed Ledger Technology (DLT), and conducted load testing on that. We noticed that our PoC system achieves all the desired attributes that are prevalent in a traditional centralized messaging scheme despite the limited capacity of the development and testing environment. Therefore, this assures us the applicability of such systems in near future if scaled up properly.
Niranjan Sahi, Anda Liang, Wyn Van Devanter, Konstantinos Oikonomou ¡ 5 authors
Patients often have their healthcare data stored in centralized systems, leading to challenges when reconciling or consolidating their data across providers due to centralized databases that store patient identities. The challenges disrupt the flow of patient care where time is sensitive for both patients and providers. Decentralized technologies have enabled a new identity modelâSelf-Sovereign Identity (SSI)âthat grants individuals the right to freely control, access, and share their own data. This work proposes a system that achieves SSI in a semi-permissioned blockchain network using an open protocol as the certificate of authority and several guidelines for securely handling transactions in the network. Open protocols like Keccak can grant access to a permission-based network such as Hyperledger Fabric. The network architecture ensures data security and privacy through mechanisms of multi-signature transactions and guidelines for storing transactions locally, making this architecture ideal for privacy-centered use cases, such as healthcare data-sharing applications. The ultimate goal is to give patients full control over their identity and other data derived from their identity within a semi-permissioned network.
StanisĹaw BaraĹski, Julian SzymaĹski, Higinio Mora
Abstract Lawyers, laboratories, auditors, and banks often need access to sensitive personal data to provide services such as genetic testing, paternity testing, STD testing, credit scoring, or legal advice. Processing such data exposes both service providers (SPs) and users to privacy risks: SPs risk violating laws like the General Data Protection Regulation (GDPR) and the Consumer Protection Act (CPA), while users risk losing their privacy. We observe that personal data is often only needed for logistical purposes like payment or communication and could be provided anonymously if suitable methods existed. To address this, we present a solution that enables services to be delivered without collecting personal data. Our protocol combines anonymous payment methods (e.g., cash, privacy-preserving cryptocurrencies), blockchain for fairness, and distributed content-addressable storage networks to deliver results. Compared to existing approaches, our protocol achieves anonymity under weaker assumptions, supports the transfer of physical materials and conflict resolution, and eliminates the need for customer interaction with a trusted arbiter in conflict-free cases-making it more practical. We analyze the protocolâs fairness and implement a prototype using Ethereum as a message board, Monero for anonymous payments, and Powergate (IPFS/Filecoin) as a decentralized storage solution.
Ashish Tomar, Niraj Gupta, Divya Rani, Sachin Tripathi
No abstract is available for this record.
Qi Xie, Zixuan Ding, Wen Tang, Debiao He ¡ 5 authors
As one of the most valuable vehicle-based Internet of Things (IoT) applications, Vehicular Ad-hoc Networks (VANETs) have received extensive attention since it was proposed. In order to ensure the safety of VANETs and improve the communication efficiency between moving vehicles and different Roadside Units (RSUs), some handover authentication protocols for VANETs have been proposed. However, the existing protocols have some problems such as excessive computation overhead, untraceable malicious messages, and the inability to resist RSU captured attacks. To solve the above problems, we propose a blockchain-based protocol to achieve Vehicle to Infrastructure (V2I) authentication, V2I handover authentication, and Vehicle to Vehicle (V2V) broadcasting authentication. The advantages of our protocol are: (1) It achieves lightweight V2I handover authentication and V2V broadcast authentication, dynamic anonymity strategy and embedding strategy of pseudo-identity and vehicle feature are used to guarantee anonymity and traceability simultaneously; (2) The announcement can be broadcasted verifiably without the help of transportation infrastructure (e.g., RSU) or the Trusted Authority (TA); and (3) The Physically Unclonable Functions (PUF) technology is used to resist RSU captured attacks. We use formal security proof under random oracle model to prove the security of the proposed protocol. Compared with related V2I handover authentication protocols, our protocol can resist RSU captured attacks and other various known attacks. The sum of first and handover authentication efficiency of our protocol is 37.93% higher than the previous most effective protocol, while maintaining the same level of communication and storage costs.
Mwaheb S. Almadani, Suhair Alotaibi, Hada Alsobhi, Omar Khadeer Hussain ¡ 5 authors
No abstract is available for this record.
Haytham Khalil, Khalid Elgazzar
Phone of Things (PoT) is a new paradigm in IoT that has been recently coined in the literature. PoT provides a framework for leveraging the ubiquitous phone network assets and infrastructure by making them part of the IoT architecture to manage and control IoT gadgets. PoT proposes a lightweight SIP-based messaging protocol, which we call tSIP, that we can map to its corresponding original SIP protocol messages with the help of a proxy (i.e., the PoT gateway). tSIP facilitates communication between resource-constrained smart objects and the communication server using mature phone technologies with abstractions that people are already familiar with. In this context, the paper proposes a lightweight decentralized registration and authentication mechanism based on blockchain technology for smart gadgets in the PoT system to facilitate their association with the communication server. The proposed mechanism provides a secure, trustless, and scalable environment for PoT without requiring high-end communication servers, affecting the existing SIP-based VoIP architecture, or mandating trust in third-party entities. The proposed mechanism uses the Ethereum blockchain and smart contracts to implement a programmatic, immutable access control mechanism to administer the association of IoT devices with the communication server. As a proof of concept, we provide a prototype implementation of the proposed mechanism using a private blockchain due to its privacy characteristics, fast transaction processing, and cost-effectiveness. We conduct a feasibility study of the proposed mechanism and a security analysis. The analysis demonstrates that the proposed mechanism complies with the security standards of the SIP protocol and fits the constraints of embedded smart objects.
Siddhant Thapliyal, Shubham Singh, Mohammad Wazid, Devesh Pratap Singh ¡ 5 authors
Smart healthcare technology is transforming from the traditional healthcare system in every manner conceivably. Smart healthcare provides several advantages over the existing approaches. However, it suffers from healthcare data security and privacy issues. As the Internet attackers may get access to sensitive healthcare data through the use of various types of cyber attacks. In this paper, an architecture of a blockchain-enabled secure smart health monitoring system has been presented (in short, it is called as BSSHM). BSSHM consists of various health data monitoring sensors, i.e., temperature, heartbeat, etc., which monitor the real time health data of the different patients. The healthcare data of the patients can be transmitted to the connected health servers in a secure way, where this data can be stored securely for its various uses. The formal security verification of the proposed BSSHM is also done through the widely-accepted Scyther tool. It has been proved that BSSHM is able to defend various potential attacks.
Fengqun Wang, Jie Cui, Qingyang Zhang, Debiao He ¡ 6 authors
In edge-assisted cross-domain Industrial Internet of Things (IIoT), blockchain-based authentication is an effective way to build cross-domain trust and secure cross-domain data. However, existing authentication schemes still have serious challenges in terms of efficiency and security. In this paper, we propose a blockchain-based lightweight message authentication scheme. First, to address efficiency challenges, we build a blockchain-enabled edge-assisted lightweight authentication framework. This framework uses edge servers to assist smart devices in achieving cross-domain authentication and effectively reduce redundant interactions between entities. Second, to resolve the security challenges, we design a lightweight message authentication algorithm for cross-domain IIoT. The algorithm guarantees message security with low computational overhead and is suitable for multi-receiver cross-domain IIoT. The security proof and analysis demonstrate that the proposed scheme is secure under the random oracle model and can resist various attacks. The performance evaluation shows that our proposed scheme is superior in terms of computation and communication overhead when compared with other related schemes.
Rahaf Adam Alnuaimi, Ranem Khaled Almasalmeh, Sarah Adel Baker, Maryam Nasser Alsaiaari ¡ 5 authors
In this paper, we aim to solve critical issues organizations face during attendance monitoring. Conventional log-in systems fail to effectively ensure successful attendance monitoring, and challenges such as user manipulation, social distancing making biometric devices obsolete, and other issues arise. To address these challenges, we propose a two-factor authentication system based on distance and face recognition. The system incorporates advanced geo-tracking tools and technologies with web3 features and double-factor authentication using face recognition technologies and accompanying distance monitoring devices and tools. Our system provides secure, adaptive, and advanced log-ins for employees and attendance monitoring for employers. The proposed system is scalable by simply accompanying more distance-tracking devices with no additional support systems required. It is a smart, user-friendly, and effective log-in system designed to optimize resource and time allocation for any organization. Compared to other two-factor authentication systems, our system is faster, more secure, and does not require central devices. It is also more friendly and flexible, offering a viable solution for maintaining a safe environment and easing procedures for employees and managers.
Sonali Patwe, Sunil B. Mane
Metaverse technology comprises of a virtual world and physical world running in parallel. Metaverse is evolving day by day and has many applications across domains. In this paper, we focus on the Education domain and especially student training related use cases such as inter-disciplinary research, field visits, campus exchange programs, remote learning, virtual trainings, etc. In such user scenarios, multiple virtual and physical worlds come together in metaverse using technologies like Virtual Reality (VR), Augmented Reality (AR), Mixed Reality (MR), and Extended Reality (XR). In such Metaverse environments, avatars, users, and devices interact with one another. While interacting, they use the conventional centralized architecture for authentication and identity management. Due to its centralized nature, such architectures are susceptible to various authentication security issues such as impersonation, identity interoperability, mutual authentication, replay, server spoofing, etc. For the student training related use cases, Avatars are moving across multiple Edu-verses. There are certain decentralized solutions proposed in the literature for the authentication and identity management for Avatars. But they come with their own limitations. Also, none of them talk about the authentication interoperability across verses. In this paper, Blockchain is proposed as a solution for the secure and interoperable authentication and identity management for the authentication of Avatars and users for the student training use cases.
Hung-Ming Sung, Timothy Chen, Hung-Chun Tseng, Beatrice Prayogo ¡ 6 authors
We propose a hybrid system to utilize non-fungible tokens for event ticketing. By adding an intermediate database, we enjoy blockchain benefits such as fraud prevention and higher transparency over the secondary market while ensuring reasonable redemption speed. Furthermore, the additional step after ticket redemption is to verify through the smart contract whether the ticket holderâs signature is included, preventing event organizers from marking the ticket as used without the holderâs consent.
Awaneesh Kumar Yadav, An Braeken, Mika Ylianttila, Madhusanka Liyanage
The metaverse, which consists of several universes called verses, is predicted to be the Internet of the future. Recently, this idea has received a lot of discussions, but not enough attention has been paid to the security concerns of these virtual worlds. Primarily when the user and platform server communicate with each other and share sensitive information using the public channel, any attacker can capture the message and can perform various types of attacks such as privacy attack, violation of perfect forward secrecy, impersonation attack, ephemeral secret leakage attack and traceability attack. Therefore, there is impelling need to design an authentication protocol for the metaverse environment that can secure the communication between the user and the platform server. Taking this into account, we designed a zero-knowledge proof authentication protocol based on blockchain for the metaverse environment. The security of the designed protocol is verified through the Burrows-Abadi-Needham (BAN) logic, Scyther tool, and Automated Validation of Internet Security Protocols and Applications (AVISPA) tool. The outcome of the security verification demonstrates that the designed metaverse authentication protocol mitigates all the attacks mentioned above. Moreover, we evaluated the performance of the designed metaverse authentication protocol in terms of computational, communication, storage costs, and energy consumption and compared it with existing metaverse authentication protocols, showing good results taking into account the additional security strength.
Fengmei Chen, Bin Zhao, Yilong Gao, Wenyin Zhang
No abstract is available for this record.
Fatemeh Stodt, Christoph Reich
The Industrial Internet of Things (IIoT) holds significant potential for improving efficiency, quality, and flexibility. In decentralized systems, there are no trust-based centralized authentication techniques, which are unsuitable for distributed networks or subnets, as they have a single point of failure. However, in a decentralized system, more emphasis is needed on trust management, which presents significant challenges in ensuring security and trust in industrial devices and applications. To address these issues, industrial blockchain has the potential to make use of trustless and transparent technologies for devices, applications, and systems. By using a distributed ledger, blockchains can track devices and their data exchanges, improving relationships between trading partners, and proving the supply chain. In this paper, we propose a model for cross-domain authentication between the blockchain-based infrastructure and industrial centralized networks outside the blockchain to ensure secure communication in industrial environments. Our model enables cross authentication for different sub-networks with different protocols or authentication methods while maintaining the transparency provided by the blockchain. The core concept is to build a bridge of trust that enables secure communication between different domains in the IIoT ecosystem. Our proposed model enables devices and applications in different domains to establish secure and trusted communication channels through the use of blockchain technology, providing an efficient and secure way to exchange data within the IIoT ecosystem. Our study presents a decentralized cross-domain authentication mechanism for field devices, which includes enhancements to the standard authentication system. To validate the feasibility of our approach, we developed a prototype and assessed its performance in a real-world industrial scenario. By improving the security and efficiency in industrial settings, this mechanism has the potential to inspire this important area.
Sawanya Rattanabunno, Warodom Werapun, Jakapan Suaboot, Tanakorn Karode ¡ 5 authors
Ethereum, one of the most popular cryptocurrencies, allows for anonymous transactions and is frequently used for money laundering and scams. Although advanced scammers are hard to trace as they use sophisticated coin-mixing techniques, we argue that many generic scams only involve amateurs who manually mix transactions to avoid police detection. To counter this, centralized exchanges require users to go through Know-Your-Customer (KYC) processes before exchanging tokens for fiat currency. This paper extends the anti-money laundering further by proposing An EOA Identity Tracing System (AITS), which traces the flow of crypto tokens from the thief wallet to the exchange and backtracking from the KYCâs identities to the thiefâs real identity. The proposed AITS also aids investigators with the token-transferring graph that is useful for off-chain investigation. The experimental results on the 1,045 thievesâ transactions recorded over 290 days reveal behaviors that the scammers used to evade police detection.
Sabine Houy, Philipp Schmid, Alexandre Bartel
Cryptocurrencies are gaining prominence among individuals and companies alike, resulting in the growing adoption of so-called cryptocurrency wallet applications, as these simplify transactions. These wallets are available in a myriad of different forms and specifications. All of them are susceptible to various ways the attacker can exploit the vulnerabilities and steal money from victims. Cryptocurrency wallets create a unique field as they combine features of password managers, banking applications, and the need to keep their users and their transactions anonymous. We collect the findings from previous literature to provide an overview of the different attack surfaces, possible countermeasures, and further research. Existing literature focused on one of the features mentioned before, while we considered all of them. Our systematic study shows that there is a considerable variety of attack vectors, which we have divided into six subcategories, (i) Memory and Storage, (ii) Operating Systems, (iii) Software Layer, (iv) Network Layer, (v) Blockchain Protocol, and (vi) Others. We have found a large gap between the possible countermeasures and their actual adoption. Therefore, we provide a list of possible directions for future research to tackle this gap.
Wanxin Li, Collin Meese, Hao Guo, Mark Nejad
Platooning technologies enable trucks to drive cooperatively and automatically, providing benefits including less fuel consumption, greater road capacity, and safety. To establish trust during dynamic platooning formation, ensure vehicular data integrity, and guard platoons against potential attackers in mixed fleet environments, verifying any given vehicleâs identity information before granting it access to join a platoon is pivotal. Besides, due to privacy concerns, truck owners may be reluctant to disclose private vehicular information, which can reveal their business data to untrusted third parties. To address these issues, this is the first study to propose an aggregated zero-knowledge proof and blockchain-empowered system for privacy-preserving identity verification in truck platooning. We provide the correctness proof and the security analysis of our proposed authentication scheme, highlighting its increased security and fast performance. The platooning formation procedure is re-designed to seamlessly incorporate the proposed authentication scheme, including the 1st catch-up and cooperative driving steps. The blockchain performs the role of verifier within the authentication scheme and stores platooning records on its digital ledger to guarantee data immutability and integrity. In addition, the proposed programmable access control policies enable truck companies to define who is allowed to access their platoon records. We implement the proposed system and perform extensive experiments on the Hyperledger platform. The results show that the blockchain can provide low latency and high throughput, the aggregated approach can offer a constant verification time of 500 milliseconds regardless of the number of proofs, and the platooning formation only takes seconds under different strategies. The experimental results demonstrate the feasibility of our design for use in real-world truck platooning.