Follow blockchain research across journals, conferences, and preprint repositories.
1,050 results · page 30 of 44
S. Venkata Sai Santosh, M. Kameswara Rao, P. S. G. Aruna Sri, C. H. Sai Hemantha
No abstract is available for this record.
Meng-Hsuan Fu
The Internet of Things (IoT) is built on a strong internet infrastructure and many wireless sensor devices. Presently, Radio Frequency Identification embedded (RFID-embedded) smart cards are ubiquitous, used for many things including student ID cards, transportation cards, bank cards, prepaid cards, and citizenship cards. One example of places that require smart cards is libraries. Each library, such as a university library, city library, local library, or community library, has its own card and the user must bring the appropriate card to enter a library and borrow material. However, it is inconvenient to bring various cards to access different libraries. Wireless infrastructure has been well developed and IoT devices are connected through this infrastructure. Moreover, the development of biometric identification technologies has continued to advance. Blockchain methodologies have been successfully adopted in various fields. This paper proposes the BlockMetrics library based on integrated technologies using blockchain and finger-vein biometrics, which are adopted into a library collection management and access control system. The library collection is managed by image recognition, RFID, and wireless sensor technologies. In addition, a biometric system is connected to a library collection control system, enabling the borrowing procedure to consist of only two steps. First, the user adopts a biometric recognition device for user authentication and then performs a collection scan with the RFID devices. All the records are recorded in a personal borrowing blockchain, which is a peer-to-peer transfer system and permanent data storage. In addition, the user can check the status of his collection across various libraries in his personal borrowing blockchain. The BlockMetrics library is based on an integration of technologies that include blockchain, biometrics, and wireless sensor technologies to improve the smart library.
Palak Bagga, Anil Kumar Sutrala, Ashok Kumar Das, Pandi Vijayakumar
No abstract is available for this record.
Guangsong Li, Yang Wang, Bin Zhang, Siqi Lu
Nowadays, it is still a major challenge to design a secure cross-domain authentication protocol for heterogeneous wireless networks with different security parameters. As a new technology, blockchain has attracted people’s attention because of its tamper-proof and decentralized characteristics. In this paper, we propose a cross-domain authentication and key agreement system based on smart contract of blockchains. Public keys of the nodes are managed using the smart contracts, and the system parameters are confirmed by contract query. On this basis, a cross-domain authentication and key agreement protocol is designed. In this protocol, roaming users can select temporary authentication parameters according to the system parameters of the roaming domain to complete authentication and key agreement, and users are anonymous in the process. Security of the protocol is demonstrated under the CK model, and two formal analysis tools are used to further analyze the protocol. Since the protocol does not have complex cryptographic operations and certificate verification, it has lower computational and communication overhead.
Pouyan Razmjouei, Abdollah Kavousi‐Fard, Morteza Dabbaghjamanesh, Tao Jin · 5 authors
For quite a long time, purchasers have come to depend on the convenience and security and included security that a passive vehicle immobilizer framework offers. These frameworks comprise of a Passive Entry Passive Start (PEPS) innovation, conveyed by the driver, and a Smart Key Unit (SKU), mounted in the vehicle with regards to the principal parts of these frameworks. This paper for the first time shows the cyber vulnerability of PEPS in the vehicle against the man-in-the middle attack (MITM). It enables the hacker to open and begin the vehicle, although there was still a distance between the vehicle and the key. To stop this physical cyber attack, we propose a hearty ultra-lightweight common confirmation technique dependent on the radio frequency identification (RFID) convention that cooperates with a decentralized database to verify the PEPS. A secure blockchain based on smart contract is also developed which is compatible with the mutual authentication in the vehicle. A detailed security analysis is performed on an undefined vehicle to prove the high security of the proposed communication approach when facing MITM.
Shatha J. Mohammed, Sadiq A. Mehdi
<span>Text password has long been a dominant approach to user authentication used by a huge quantity of Internet services. Web applications are now widely used for the implementation of a range of significant services. The securing of such applications has thus become a significant process. Currently the frequent use of passwords and the need for them make them more vulnerable to theft or guesswork. In the proposed research, the researcher designed an algorithm that has the ability to perform registration or to access web applications safely. The researcher designed an algorithm in the proposed research, which has the ability to securely perform registration or access web applications. The proposed idea based on the notion of Zero-knowledge proof. A complex generation of random number initiated by proposed novel 6D-Hyper chaotic system. The bottom line is that both parties (web application, user), have a secret number. These two numbers used to do the process of registration without requiring a password. Results from the research showed the importance of the proposed method by which the keys were managed and distributed in a safe and effective way.</span>
Abdullah Al-Noman Patwary, Anmin Fu, Sudheer Kumar Battula, Ranesh Kumar Naha · 6 authors
No abstract is available for this record.
Hongxia Zhang, Xingshu Chen, Xiao Lan, Hongjian Jin · 5 authors
No abstract is available for this record.
Salman Shamshad, Minahil, Khalid Mahmood, Saru Kumari · 5 authors
No abstract is available for this record.
Teng Hu, Xiaolei Liu, Weina Niu, Kangyi Ding · 6 authors
Abstract As blockchain is increasingly valued, the application of blockchain and its security has become a research hotspot. Not only that, more and more ordinary users are paying attention to the blockchain and beginning to trade commodities in cryptocurrencies. The blockchain wallet is a program for users to manage and stores their private keys. Furthermore, the private key is the user’s unique credential to the cryptocurrency in the blockchain. But for now, blockchain wallets are only using passwords to authenticate users, which poses a potential risk to private key security. To mitigate this risk, this paper proposes a continuous authentication approach based on user mouse behavioral biometrics. The approach was experimentally shown to be able to authenticate once per second with an average FAR and FRR of 6.92% and 6.18%, respectively.
Fariba Ghaffari, E. Bertin, Julien Hatin, Noël Crespi
As the first step in preserving system security, Authentication and Access Control (AAC) plays a vital role in all businesses. Recently, emerging the blockchain and smart contract technology has attracted significant scientific interest in research areas like authentication and access control processes. In the context of authentication and access control, blockchain can offer greater data and rule confidentiality and integrity, as well as increasing the availability of the system by removing the single point of failure in the procedure. To categorize and find the most important open problems in this research area, having a comprehensive review is crucial. To the best of our knowledge, for the first time in this survey, we aim to describe the current state of the art in deploying blockchain and smart contracts specifically in authentication and access control. Following an introduction to AAC and blockchain technology, we present a brief background of distributed ledger technology, access control and authentication. To offer a clearer understanding of the state of the art, we propose taxonomy to categorize the existing methods based on their type, application environment and their justification for exploiting blockchain. For the conclusion of the paper, we examined the advantages and disadvantages of the proposed method in different contexts like security, resource consumption and privacy. Also we discussed about the future work.
Tian‐Fu Lee, Hongze Li, Yi-Pei Hsieh
No abstract is available for this record.
Muhammad Tahir, Muhammad Sardaraz, Shakoor Muhammad, Muhammad Saud Khan
Blockchain and IoT are being deployed at a large scale in various fields including healthcare for applications such as secure storage, transactions, and process automation. IoT devices are resource-constrained, have no capability of security and self-protection, and can easily be hacked or compromised. Furthermore, Blockchain is an emerging technology with immutability features which provide secure management, authentication, and guaranteed access control to IoT devices. IoT is a cloud-based internet service in which processing and collection of user’s data are accomplished remotely. Smart healthcare also requires the facility to provide the diagnosis of patients located remotely. The smart health framework faces critical issues such as data security, costs, memory, scalability, trust, and transparency between different platforms. Therefore, it is important to handle data integrity and privacy as the user’s authenticity is in question due to an open internet environment. Several techniques are available that primarily focus on resolving security issues i.e., forgery, timing, denial of service and stolen smartcard attacks, etc. Blockchain technology follows the rules of absolute privacy to identify the users associated with transactions. The motivation behind the use of Blockchain in health informatics is the removal of the centralized third party, immutability, improved data sharing, enhanced security, and reduced overhead costs in distributed applications. Healthcare informatics has some specific requirements associated with the security and privacy along with the additional legal requirements. This paper presents a novel authentication and authorization framework for Blockchain-enabled IoT networks using a probabilistic model. The proposed framework makes use of random numbers in the authentication process which is further connected through joint conditional probability. Hence, it establishes a secure connection among IoT devices for further data acquisition. The proposed model is validated and evaluated through extensive simulations using the AVISPA tool and the Cooja simulator, respectively. Experimental results analyses show that the proposed framework provides robust mutual authenticity, enhanced access control, and lowers both the communication and computational overhead cost as compared to others.
Wei Feng, Zheng Yan, Laurence T. Yang, Qinghua Zheng
Mobile crowdsourcing (MCS) has become an effective data collection method due to its mobility, low cost, and flexibility. However, since centralized MCS confronts severe security and privacy risks in reality, many researchers are devoted to building a decentralized MCS system based on blockchain. Despite the effectiveness of these schemes, they fail to offer anonymous authentication on the trust of MCS nodes, although privacy is a main concern in MCS and trust plays an important role in a series of MCS activities, such as worker selection and truth discovery. Nevertheless, anonymous authentication on trust is not a trivial issue since trust evaluation usually conflicts with anonymity, which is a necessary privacy requirement in an open MCS environment. To tackle this problem, we leverage Intel software guard extension (SGX) and propose a scheme to anonymously authenticate trust with trustworthy trust evaluation in a blockchain-based MCS system. The scheme employs an SGX-enabled cloud server to periodically alter user public/private key pairs and mix newly altered keys among a number of faked keys in order to ensure unlinkability. Besides, we consider the unique features of MCS and work out a novel trust evaluation method by aggregating both subjective feedback and objective behaviors. Finally, we conduct several analyses and experiments to illustrate its security and efficiency.
Rekha Goyat, Gulshan Kumar, Mamoun Alazab, Mauro Conti · 8 authors
Internet of Things (IoT) composed of large number of sensing devices with a variety of features applicable for various applications. In such scenarios, due to low data handling capabilities, limited storage, and security aspects, it is quite challenging to protect networks against illegal information access and utilizes storage efficiently. Though researchers provide various solutions for security and data storage, but a few solutions are appropriate for wireless sensor networks (WSNs)-enabled IoTs. Therefore, a blockchain-based decentralized framework integrated with authentication and privacy-preserving schemes is developed for the secure communication in WSNs-enabled IoTs. Registration, certification, and revocation process are employed for the communication with sensor nodes and base station (BS) in a cloud computing environment. In this scheme cluster heads forward the collected information to the BS. Consequently, BS records all the key parameters on the distributed blockchain and large data is forwarded to clouds for the storage. The revoked certificates of all malicious nodes are eliminated from blockchain by BS. The performance of the proposed scheme is scrutinized in terms of detection accuracy, certification delay, computational, and communicational overheads. The simulated results, comparative analysis, and security validation support the superiority of the proposed solution over the existing approaches.
M. Vivekanandan, V. N. Sastry, U. Srinivasulu Reddy
No abstract is available for this record.
Abbas Yazdinejad, Reza M. Parizi, Ali Dehghantanha, Hadis Karimipour · 6 authors
There is currently widespread use of drones and drone technology due to their rising applications that have come into fruition in the military, safety surveillance, agriculture, smart transportation, shipping, and delivery of packages in our Internet-of-Things global landscape. However, there are security-specific challenges with the authentication of drones while airborne. The current authentication approaches, in most drone-based applications, are subject to latency issues in real time with security vulnerabilities for attacks. To address such issues, we introduce a secure authentication model with low latency for drones in smart cities that looks to leverage blockchain technology. We apply a zone-based architecture in a network of drones, and use a customized decentralized consensus, known as drone-based delegated proof of stake (DDPOS), for drones among zones in a smart city that does not require reauthentication. The proposed architecture aims for positive impacts on increased security and reduced latency on the Internet of Drones (IoD). Moreover, we provide an empirical analysis of the proposed architecture compared to other peer models previously proposed for IoD to demonstrate its performance and security authentication capability. The experimental results clearly show that not only does the proposed architecture have low packet loss rate, high throughput, and low end-to-end delay in comparison to peer models but also can detect 97.5% of attacks by malicious drones while airborne.
Sarang Chaudhari, Michael Clear, Philip Bradish, Hitesh Tewari
Uniquely identifying individuals across the various networks they interact with on a daily basis remains a challenge for the digital world that we live in, and therefore the development of secure and efficient privacy preserving identity mechanisms has become an important field of research. In addition, the popularity of decentralised decision making networks such as Bitcoin has seen a huge interest in making use of distributed ledger technology to store and securely disseminate end user identity credentials. In this paper we describe a mechanism that allows one to store the COVID-19 vaccination details of individuals on a publicly readable, decentralised, immutable blockchain, and makes use of a two-factor authentication system that employs biometric cryptographic hashing techniques to generate a unique identifier for each user. Our main contribution is the employment of a provably secure input-hiding, locality-sensitive hashing algorithm over an iris extraction technique, that can be used to authenticate users and anonymously locate vaccination records on the blockchain, without leaking any personally identifiable information to the blockchain.
Walter Tiberti, Alessio Carmenini, Luigi Pomante, Dajana Cassioli
Wireless Sensor Networks (WSNs) are nowadays used in a variety of applications, to monitor relevant quantities often in large and harsh environments, thanks to their flexibility and versatility. Unfortunately, the nature of the wireless communication channel exposes WSN nodes to security risks. Conventional security countermeasures cannot be applied to the WSN nodes due their resource limitations. In this paper, we propose a lightweight blockchain approach to contrast the physical or logical tampering of WSN nodes. We validate our approach through experiments showing the performance impact and the storage footprint due to the use of the proposed blockchain anti-tampering technique. The proposed approach appears to be suitable in the context of WSNs, although the overhead generated by the blockchain depends on the number of nodes in the WSN.
Aram Jivanyan, Tigran Mamikonyan
The one-out-of-many proof is a cryptographic zero-knowledge construction enabling the prover to demonstrate knowledge of a secret element among the given public list of cryptographic commitments opening to zero. This method is relying on standard Decisional Diffie-Hellman security assumptions and can result in efficient accountable ring signature schemes [4] and proofs of set memberships [5] with a signature size smaller than all existing alternative schemes relying on standard assumptions. This construction also serves as a fundamental building block for numerous recent blockchain privacy protocols including Anonymous Zether [1], [2], Zerocoin [3], Lelantus [11], Lelantus-MW [9], Triptych [14] and Triptych-2 [15]. In this work, we introduce a new method of instantiating one-out-of-many proofs which reduces the proof generation time by an order of magnitude. Our approach still results in shorter proofs comprised of only a logarithmic number of commitments and does not compromise the highly efficient batch verification properties endemic to the original construction.
Seongho Hong, Heeyoul Kim
An identity management including authentication and authorization in a network environment is a critical security factor. Various models for identity management have been developed continually, from the silo model to the federated model and to the recently introduced self-sovereign identity (SSI) model. In particular, SSI makes users manage their own information by themselves independently of any organizations. SSI utilizes the newly emerged blockchain technology and many studies of it are in progress. However, SSI has not had wide public use because of its low compatibility and inconvenience. This is because it involves an unfamiliar user experience and an immature process. To solve this problem, this paper proposes a new blockchain-based SSI model that complies with the popular and mature standard of OAuth 2.0. Using blockchain, the proposed model secures users’ data sovereignty where users can use and control their own information in a decentralized manner, instead of depending on a specific monopolistic service-providers. Users and clients who are familiar with the existing OAuth can easily accept the proposed model and apply it, which makes both usability and scalability of the model excellent. This paper confirmed the feasibility of the proposed model by implementing it and a security analysis was performed. The proposed model is expected to contribute to the expansion of both blockchain technology and SSI.
Anusha Vangala, Ashok Kumar Das, Neeraj Kumar, Mamoun Alazab
Agriculture is a vital area for the sustenance of mankind engulfing manufacturing, security, traceability, and sustainable resource management. With the resources receding expeditiously, it is of utmost significance to innovate techniques that help in the subsistence of agriculture. The growth of Internet of Things (IoT) and Blockchain technology as two rapidly emerging fields can ameliorate the state of food chain today. This paper provides a rigorous literature review to inspect the state-of-the-art development of the schemes that provide information security using blockchain technology. After identifying the core requirements in smart agriculture, a generalized blockchain-based security architecture has been proposed. A detailed cost analysis has been conducted on the studied schemes. A meticulous comparative analysis uncovered the drawbacks in existing research. Furthermore, detailed analysis of the literature has also revealed the security goals towards which the research has been directed and helped to identify new avenues for future research using artificial intelligence.
Jacopo Grecuccio, Edoardo Giusto, Fabio Fiori, Maurizio Rebaudengo
Recently, the interest around the Blockchain concept has grown faster and, as a consequence, several studies about the possibility of exploiting such technology in different application domains have been conducted. Most of these studies highlighted the benefits that the use of the blockchain could bring in those contexts where integrity and authenticity of the data are important, e.g., for reasons linked to regulations about consumers’ healthcare. In such cases, it would be important to collect data, coming in real-time through sensors, and then store them in the blockchain, so that they can become immutable and tamper-proof. In this paper, the design and development of a software framework that allows Internet-of-Things (IoT) devices to interact directly with an Ethereum-based blockchain are reported. The proposed solution represents an alternative way for integrating a wide category of IoT devices without relying on a centralized intermediary and third-party services. The main application scenario for which the project has been conceived regards food-chain traceability in the Industry 4.0 domain. Indeed, the designed system has been integrated into the depiction of a use case for monitoring the temperature of fish products within a warehouse and during the delivery process.
Yuki Hasegawa, Hiroshi Yamamoto
This article proposes a new data management platform using blockchain that contributes to verify the integrity of the real-world data obtained from the IoT (Internet of Things) devices (e.g., camera, smart meter, smartphone) deployed on the real world. The existing blockchain-based platform guarantees the integrity of only the data registered inside the blockchain but does not detect the situation that the data is tampered and/or spoofed outside the blockchain. The proposed platform is designed based on the characteristic of the IoT system that the real-world data is continuously generated from the origin IoT device and there may exist various sensing devices (e.g., smartphone, sensor node) in the vicinity of the origin device. In the integrity verification mechanism, the origin device requests the surrounding devices to cooperate to verify the integrity of the real-world data. The tendency of the real-world data of the origin device should be almost the same as the data generated by the cooperator devices if the data tampering/spoofing did not occur. Therefore, by comparing the real-world data generated by the origin and the cooperator devices on the blockchain, the proposed platform verifies the integrity of the real-world data on the whole part of the IoT system.