P. H. T. Trung, L. K. Bang, T. D. Khoa, H. G. Khiem · 8 authors
No abstract is available for this record.
Follow blockchain research across journals, conferences, and preprint repositories.
3,460 results · page 21 of 145
P. H. T. Trung, L. K. Bang, T. D. Khoa, H. G. Khiem · 8 authors
No abstract is available for this record.
Arpad Djuraki
No abstract is available for this record.
Ayman Mohamed Mostafa, Ehab R. Mohamed, Asmaa Hanafy, Faeiz Alserhani · 8 authors
Identity management (IDM) systems in cloud computing struggle to securely manage user identities and access privileges in distributed environments. However, centralized IDM solutions come with high trust costs, single points of failure, and a need for appropriate security response. This paper proposes a novel decentralized IDM framework utilizing blockchain technology and automatic provisioning (AP) techniques to improve cloud computing’s security, scalability, and operational efficiency. The framework employs Ethereum smart contracts and role‐based access control (RBAC) to ensure secure, transparent, and automated management of user identities. Key features include support for single sign‐on (SSO), multifactor authentication (MFA), and delegated proof‐of‐stake (DPoS) consensus for secure transaction validation. Our proposed scheme utilizes the Ethereum blockchain and smart contracts for managing user access, ensuring transparent and immutable record‐keeping. The scheme introduces RBAC mechanisms to ensure precise privilege allocation and dynamic updates. The scheme also supports key IDM processes, including SSO, MFA, and lifecycle management of identities. The framework incorporates DPoS consensus to enhance security for efficient transaction validation and the prevention of fraud. To address fraudulent activities, the scheme uses machine learning to detect blockchain fraud with 99.1% accuracy, demonstrating robustness and efficiency for large‐scale cloud infrastructures.
Bora Buğra Sezer, Sedat Akleylek, Urfat Nurıyev
Blockchain technology has produced effective solutions and provides security by using cryptographic tools for various applications, attracting attention from the academic community. Therefore, researchers have taken advantage of the features of blockchain technology to increase the security of the ecosystem. Recently, as the existence of quantum computers has been felt, researchers have started to benefit from post-quantum cryptography to increase privacy and security. There has been an increase in data and asset protection in post-quantum blockchain-based solutions. To the best of our knowledge, there is no comprehensive review or taxonomy that provides a complete picture of post-quantum secure structures with privacy-preserving techniques that have the potential to be used in blockchain. This paper aims to close this gap by systematically examining these approaches and revealing the deficiencies in the existing literature and the development potential in these areas. The taxonomy examines the role of blockchain technology in post-quantum cryptography and emphasizes the potential of technologies such as zero-knowledge proof to ensure privacy in post-quantum blockchain-based systems. We also review the existing literature on addressing the performance overhead, interoperability, scalability, and security challenges in implementing post-quantum cryptography in zero-knowledge proof-enabled blockchain architectures that protect against quantum computing threats. The studies are collected from journal papers in widely used academic databases between 2018 and 2024. The studies are subjected to certain elimination criteria, and 13 studies are reviewed in detail. Our approach will facilitate discussions on future research directions by proposing the accessibility of post-quantum cryptography against quantum threats to blockchain systems and solutions to the challenges that arise in the integration phase.
João Carlos de Fraga Gião da Silva
With the growing integration of cloud computing and the increasing adoption of Internet-of-Things (IoT) devices, ensuring the integrity and privacy of data has become critical in digital systems. Data integrity is fundamental to maintain the completeness and reliability of data throughout the data lifecycle. Its importance is particularly evident in domains such as healthcare, where accurate diagnoses rely on trustworthy data. However, as systems evolve and become more complex, traditional centralised solutions often lack transparency and resilience, while resource-constrained devices make it more difficult to guarantee security and privacy. This thesis addresses these challenges by proposing a framework that integrates Distributed Ledger Technology (DLT) to support privacy-preserving data sharing and strengthen trust among system stakeholders. Based on this framework, an architecture was designed with three main modules: a middleware integrator for service interoperability, an authorisation manager for fine-grained access control, and a data integrity validator leveraging metadata anchored on a distributed ledger to ensure compliance with the General Data Protection Regulation. A proof of concept was designed and implemented using IoT devices, healthcare data, and low-resource hardware. Experimental results demonstrate that the proposed solution enables efficient data sharing and integrity validation with minimal overhead on the system. The DLT layer validated the integrity of shared data through a metadata model while preserving user privacy. Furthermore, the access control mechanism supported scalable and granular authorisation policies, and the middleware facilitated interoperability across heterogeneous stakeholders. This work contributes to new insights into the security of digital systems and provides responsible entities with a trustworthy approach for sharing data among diverse entities.
Sabbir M. Saleh, Nazim H. Madhavji, John Steinbacher
Security is becoming a pivotal point in cloud platforms. Several divisions, such as business organisations, health care, government, etc., have experienced cyber-attacks on their infrastructures. This research focuses on security issues within Continuous Integration and Deployment (CI/CD) pipelines in a cloud platform as a reaction to recent cyber breaches. This research proposes a blockchain-based solution to enhance CI/CD pipeline security. This research aims to develop a framework that leverages blockchain's distributed ledger technology and tamper-resistant features to improve CI/CD pipeline security. The goal is to emphasise secure software deployment by integrating threat modelling frameworks and adherence to coding standards. It also aims to employ tools to automate security testing to detect publicly disclosed vulnerabilities and flaws, such as an outdated version of Java Spring Framework, a JavaScript library from an unverified source, or a database library that allows SQL injection attacks in the deployed software through the framework.
Mohammed A. Aleisa
This research introduced a new novel “Unified Quantum-Resilient Blockchain-Zero-Knowledge Proofs Privacy Authentication Framework (QBC-ZKPAF)” to upgrade the IoT environments with greater security. To enable privacy-preserving authentication, access control, and secure communication, the framework integrates blockchain technology with Zero Trust Architecture (ZTA) and post-quantum cryptography. A hybrid Reinforcement-Lattice Blockchain KeyGen for quantum-resilient key generation, Deep Q-Network Multi-Factor Secure Key (DQN-MFSK) for dynamic selection of keys, and Zero-Knowledge Proof for privacy-preserving signatures are employed to achieve secure IoT settings. This architecture entails data privacy and confidentiality, auditability and traceability, and withstanding evolving threats, including potential threats in terms of quantum attacks. It then uses blockchain technology for recording unalterable data of identity and access management while Zero-Knowledge Proofs (ZKP) ensures authentication and verification without revealing sensitive information. By decentralizing identity management and enabling multi-factor authentication, QBC-ZKPAF provides robust security and privacy solutions for IoT networks. The experimental results demonstrate the model’s effectiveness with 98% privacy preservation, 700 TPS throughput, 0.7 J energy consumption, 0.98 quantum resilience, and 96% access control effectiveness, making it highly suitable for modern IoT and blockchain applications.
Yuwei Xu, Hailang Cai, J Chen, Qiao Xiang · 6 authors
No abstract is available for this record.
William Villegas-Ch, Rommel Gutierrez, Alexandra Maldonado Navarro, Aracely Mera-Navarrete
The Internet of Things (IoT) expansion has exposed connected devices to significant security vulnerabilities, particularly in terms of authentication and authorization. Traditional solutions, such as centralized servers or Proof of Work (PoW)–based blockchain, are unfeasible due to the resource limitations of IoT devices, such as their low processing capacity and dependence on batteries. This study proposes a lightweight blockchain system based on a simplified Proof of Stake (PoS) consensus mechanism designed to optimize energy consumption and improve resilience to attacks in IoT networks. The system implements a hierarchical network topology that improves data propagation and transmission times, significantly reducing latency compared to distributed topologies. In addition, it uses lightweight cryptographic algorithms such as ECDSA for authentication and AES-128 for authorization, ensuring transaction security without compromising the efficiency of IoT devices. The results show that the system reduces energy consumption by 54% compared to PoW solutions in high-load scenarios while maintaining an average latency below 30 ms. Furthermore, the system achieved a 92.5% attack detection rate under low malicious load, demonstrating its effectiveness in high-threat environments. This work offers a scalable and efficient solution that optimizes security and performance in IoT networks, opening new possibilities for its application in critical infrastructures and real-time sensor networks.
Rahul Pitale, Kapil Tajane, Vaidehi Bhonge, Vijay Chaure · 6 authors
No abstract is available for this record.
Christoph H.-J. Braun, Tobias Käfer
No abstract is available for this record.
Shang Gao, Tianyu Zheng, Yuming Guo, Zhe Peng · 5 authors
No abstract is available for this record.
Mandeep Kumar, Bhaskar Mondal
No abstract is available for this record.
Jayapriya Jayabalan, N. Jeyanthi
Healthcare systems face challenges in ensuring robust security, achieving scalable operations, and maintaining optimal efficiency, mainly attributable to the inherent constraints of conventional centralized architectural frameworks. These traditional systems have limitations that compromise healthcare delivery, affecting patient care quality, data integrity, and operational effectiveness. This research proposes a hybrid blockchain framework that integrates Hyperledger Fabric, Ethereum, and the Interplanetary File System (IPFS) to enable secure, scalable, and interoperable healthcare data management. Testing with simulated healthcare data across three institutional nodes demonstrated a significant 64% reduction in data retrieval time compared to traditional systems while maintaining exceptional 99.8% uptime reliability. Chainlink oracles serve as sophisticated bridges for cross-chain communication, securely transmitting data between blockchain networks while preserving complete data integrity. The framework ensures HIPAA and GDPR compliance through advanced AES-256 encryption protocols, immutable audit trails, and patient-controlled access mechanisms. The implementation results conclusively demonstrate that the hybrid model improves data security and interoperability while reducing operational costs by approximately 37% compared to current centralized solutions. This research establishes the transformative potential of hybrid blockchain frameworks in revolutionizing healthcare data environments by providing technically viable and economically efficient solutions to manage sensitive medical information.
Shota Tokuda, Shohei Kakei, Yoshiaki Shiraishi, Shoichi Saito
No abstract is available for this record.
Lyudmila Kovalchuk, M. Yu. Kuznetsov, A. A. Shumskaya
The splitting attack is one of the most important attacks on the blockchain, first of all for Proof-of-Work and Proof-of-Stake consensus protocols. Currently, there are no explicit analytical formulas for evaluating its success probability, which causes some distrust in blockchain technologies. In this paper, for a simplified (but still not simple) model of a splitting attack, the recurrent formulas allowing the evaluation of the exact values of the probability that an attacker will be able to build a branch of a given length are obtained. The correctness of these formulas is verified through numerical examples using the Monte Carlo method by constructing estimates with a specified confidence level and relative error. Keywords: blockchain, Proof-of-Stake, splitting attack, stakeholder, timeslot, slotleader, recursive formulas, Monte Carlo method.
Migyeong Kim, Youngjin Kim
As blockchain technology evolves to support a wide range of Web3 services, seamless interoperability between heterogeneous blockchain platforms has emerged as a key technical challenge. Existing studies mainly address interoperability in homogeneous environments, often neglecting critical platform-specific factors such as consensus mechanisms, asset models, and block generation parameters. Additionally, current standards by ISO and ITU-T define architectural frameworks but fall short in offering practical guidance for real-world implementation. This paper introduces a practical gateway-based interoperability framework designed to support dynamic and policy-driven interactions across diverse blockchain networks. The proposed architecture decouples interoperability logic from blockchain-specific interfaces, enabling modular scalability and flexible integration. Interoperability policies are defined with respect to consensus trust levels, transaction types, and asset compatibility to ensure atomicity and consistency in cross-chain operations. To validate the approach, we implemented a cross-chain asset transfer scenario between Hyperledger Fabric and Hyperledger Besu (Private Ethereum). The case study demonstrates high success rates, low latency, and consistent data integrity, confirming the framework’s practical applicability in Web3 environments. Future work will explore enhanced support for asynchronous execution, trust-based transaction control, and regulatory compliance in cross-jurisdiction blockchain interactions.
Govardhan Reddy Annapureddy
Blockchain has toured the technological world as a revolutionary platform powering safe and secured storing of information across many sectors including digital currency and supply systems. This paper discusses the potential of this technology and the essential role it plays in the management of data integrity and security in distributed systems. It starts with a brief discussion of the key concepts of blockchain namely decentralization, the ledger is not controlled by the parties to the transaction or by any third party, immutability of records on the blockchain, the records on a blockchain cannot be tampered with once they have been put on the blockchain, and transparency, everybody can see the record but cannot influence it. The paper then looks at how these principles improve data security and data integrity as compared to centralized approach. Besides, it also looks at some of the drawbacks and possible limitations of blockchain about data consistency and protection again also giving scenarios that support its efficiency.
Dr. Emily R. Johnson
With the exponential growth of e-commerce and digital financial services, ensuring privacy in online transactions has become a critical concern. Cryptographic techniques offer robust solutions to protect sensitive user data, maintain confidentiality, and prevent unauthorized access during online financial exchanges. This paper reviews key cryptographic mechanisms such as end-to-end encryption, zero-knowledge proofs, homomorphic encryption, and secure multi-party computation that enhance privacy in online transactions. Additionally, it discusses the challenges in implementing these solutions at scale and their implications for regulatory compliance and user trust. The study concludes by outlining future research directions and best practices to balance privacy with usability in online financial ecosystems.
Umi Chotijah, Ilham Teguh Prayudha, Achmad Rifki
This study explores the development of a blockchain-based e-certificate system designed for secure and transparent credential management at the Muhammadiyah University of Gresik. Leveraging private blockchain technology, the system addresses the challenges of certificate forgery and unauthorized alterations by ensuring data immutability and integrity. Through the implementation of a distributed ledger, the platform facilitates seamless issuance, verification, and storage of e-certificates. The methodology encompasses system design using the waterfall model, including stages of requirement analysis, system design, implementation, integration, and testing. Smart contracts are utilized to automate certificate verification processes, enhancing efficiency and reliability. The research findings demonstrate that the blockchain-based system not only secures the certification process but also streamlines operations by eliminating intermediaries. This innovative approach holds promise for broader applications in academic institutions and beyond, offering a scalable solution for secure document management. Future studies may expand its applicability across diverse industries.
Naren Swamy Jamithireddy
Decentralized finance (DeFi) technologies, when integrated with enterprise systems, create an opportunity to fully automate payment processes within ERP systems. This research develops and tests a smart contract-based cryptocurrency payment gateway framework with SAP ERP systems focusing on the FI, MM, and SD modules. Incorporating blockchain wallets, programmable transaction logic, and modular APIs enables SAP systems to independently manage multi-chain and multi-currency crypto payment initiation, confirmation, and reconciliation across multiple chains and currencies. The payment gateway minimizes payment delay, manual processing, and expenses in comparison to traditional fiat gateways utilizing smart contracts for payment validation, tokenization, and invoice reconciliation. Testing under real SAP transactional simulations on Quorum-based testnets showed an about 62% increase in reconciliation speed, 48% decrease in average cost per transaction, and 92% accuracy in volatile token conflict detection—during token volatility periods—resulting in errors. This study contributes to the development of frameworks for decentralized payment systems within ERP infrastructures, advancing the design and ERP enterprises aimed at achieving seamless interoperability, auditability, and comprehensive control over digital assets with SAP ecosystems.
Kundu Chen, Jie Luo
No abstract is available for this record.
Yuanyuan Liu
This research provides a detailed analysis of multi-factor authentication (MFA) in Zero-Trust Architecture (ZTA).It focused the discussion on current practices and critical challenges encountered, sharing some insights into the future direction by finding "gaps.""The field of Cyber security is a constantly changing environment.From the beginning of "trust but verify," it has gradually changed to "always verify, never trust."In this case, MFA becomes a key and effective measure to enhance confidentiality in ZTA.ZTA requires that all entities within the system must verify their identities on an ongoing basis, often using MFA.With the widespread use of telecommuting, cloud services, and the Internet of Things, the demand for identity authentication is also increasing.The MFA uses multiple authentication steps to enhance security and trust in the system.However, implementing and applying MFA in the ZTA environment has not been smooth sailing.Some schemes directly affect the popularity of MFA in their implementation, such as poor user experience, complex integration, and poor scalability.The author first reviewed some of the existing MFA programs to get to the root cause and try to fix the problem.By analyzing these typical cases, best practices are found, and strategies for improvement are proposed.The aim is to promote a balance between ease of use and security in MFA.Finally, through literature review and case studies, as well as the exploration of emerging technologies such as adaptive MFA and zero-knowledge proof, The author explore some new approaches to improve the ease and efficiency of MFA in ZTA systems.
Γεώργιος Σπαθούλας, Angeliki Katsika, Georgios Kavallieratos
No abstract is available for this record.