In recent years, blockchain-related technologies and applications have gradually emerged. Blockchain technology is essentially a decentralized database maintained by the collective, and it is now widely applied in various fields. At the same time, with the growth of medical technology, medical information is becoming increasingly important in terms of patient identity background, medical payment records, and medical history. Medical information can be the most private information about a person, but due to issues such as operation errors within the network or a hacking attack by a malicious person, there have been major leaks of sensitive personal information in the past. In any case, this has become an issue worth studying to ensure the privacy of patients and protect these medical materials. On the other hand, under the current medical system, the patientās EMR (electronic medical record) cannot be searched across the hospital. When the patient attends the hospital for treatment, repeated examinations will occur, resulting in a waste of medical resources. Therefore, we propose a blockchain-based secure inter-hospital EMR sharing system in this article. Through the programmatic authorization mechanism by smart contracts, the security of EMR is guaranteed. In addition to the essential mutual authentication, the proposed scheme also provides and guarantees data integrity, nonrepudiation, user untraceability, forward and backward secrecy, and resistance to replay attack.
Cherukupalli Veda Vyasa Aditya, Rajesh Kannan Megalingam
Zero knowledge proof is a powerful cryptographic protocol that is utilized to establish data security whilst ensuring and maintaining user anonymity. ZKP has relatively less complex computational requirements as compared to the other protocols for authentication. Conventional authentication schemes are susceptible to attacks such as MiTM, IP spoofing, DoS, replay and other eavesdropping based attacks, when the data is shared across an untrusted network. This paper shows an approach to ensure authentication of a device over an untrusted network whilst maintaining and safeguarding user credentials, by using the concepts of ZKP protocol.
As the communications among the vehicles, the Road-Side Units (RSU) and the Edge Servers (ES) take place via wireless communication and the Internet, an adversary may take the opportunity to tamper with the data communicated among various entities in an Internet of Vehicles (IoV) environment. Therefore, it demands secure communication among the involved entities in an IoV-based Intelligent Transportation System (ITS) deployment. In this work, we design a new blockchain-enabled certificate-based authentication scheme for vehicle accident detection and notification in ITS, called BCAS-VADN. In BCAS-VADN, through the authentication process, each vehicle can securely notify accident related transactions to its nearby Cluster Head (CH), if an accident is detected on roads either by its own or neighbor vehicle(s). TheCHthen securely sends the transactions received from the vehicles to itsRSUand subsequently, these transactions are also received securely by theESs. TheESis responsible for preparing partial block containing transactions and Merkle tree root, and a digital signature on those information, and then forwarding to its associated Cloud Server (CS) in the Blockchain Center (BC) for complete block creation, verification and addition of the block using the designed consensus process. Due to blockchain technology usage, it is shown that BCAS-VADN is not only secure against various potential attacks, but also maintains transparency, immutability and decentralization of the information. Furthermore, a comprehensive comparative analysis reveals that BCAS-VADN achieves better security and more functionality attributes, and has low communication and computational overheads as compared to other competitive authentication schemes in IoV. In addition, the practical demonstration using the blockchain technology has been also provided.
Internet of Things (IoT) has been the most emerging technology in the last decade because the number of smart devices and its associated technologies has rapidly grown in both industrial and research prospectives. The applications are developed using IoT techniques for real-time monitoring. Due to low processing power and storage capacity, smart things are vulnerable to the attacks as existing security or cryptography techniques are not suitable. In this study, we initially review and identify the security and privacy issues that exist in the IoT system. Second, as per blockchain technology, we provide some security solutions. The detailed analysis, including enabling technology and integration of IoT technologies, is explained. Finally, a case study is implemented using the Ethererum-based blockchain system in a smart IoT system and the results are discussed.
Mohammad Wazid, Ashok Kumar Das, Sachin Shetty, Joel J. P. C. Rodrigues
On the basis of the Internet of Things (IoT) applications, several variants such as Internet of Energy (IoE), Internet of Vehicles (IoV), Internet of Drones (IoD), Internet of Medical Things (Internet of Health, IoMT) and Internet of Intelligent Battlefield Things (IoIBT) are developed. The smart devices involved in IoT can also utilize artificial intelligence algorithm (i.e., machine learning) to make the communication environment more effective and efficient. Intelligent Battlefield Things (IBT) communication environment is an example of that kind. It consists of smart and intelligent devices (i.e., drones), which monitor the activities of the enemies and retaliate accordingly. Hence, we need very less or negligible human involvement. IBT communication environment is very suitable for the purpose of battlefield communication (i.e., war zone, target tracking and hitting, border area surveillance and retaliation). However, IBT has certain drawbacks, because it may be vulnerable to different types of attacks, such as replay, man-in-the-middle, impersonation, data modification, data leakage attacks, etc. Therefore, it becomes essential to provide a security mechanism to secure the communication that happens in IBT environment. To achieve this purpose, we propose a secure communication framework for the blockchain of IBT environment. In addition, the benefits of applications of blockchain of IBT are discussed. The issues and challenges of blockchain of IBT environment are also highlighted. Finally, a security analysis of the proposed framework is conducted to depict its resilience against possible attacks.
In the communication environment of smart homes, personal data, control messages, and sensitive data are transmitted through wireless sensor networks (WSNs). Therefore, to prevent an invasion of privacy, communication has to be encrypted, and the data have to be stored securely. In this paper, we propose a new secure privacy-preserving authentication scheme for smart homes. We propose the concept of non-interactive chaotic zero-knowledge proof (NCZKP) and use it for our scheme to resist ephemeral secrets leakage (ESL) impersonation attack, which assures that the adversary can extract the sensitive information stored in gateway note, and use it to impersonate as a legal user. Also, the formal security analysis Random-or-real model is used to prove that our scheme is secure against different known attacks. In the end, according to the experiment, our scheme has low computation and communication costs compare with other related schemes.
While Vehicular Ad-hoc Networks (VANETs) can potentially improve driver safety and traffic mangement efficiency (e.g. through timely sharing of traffic status among vehicles), security and privacy are two ongoing issues that need to be addressed. Hence, security solutions such as conditional privacy-preserving authentication (CPPA) protocols have been proposed. However, CPPA protocols are generally far from being ready for deployment in VANETs, for example due key/certificate management limitations in PKI-based protocols or intractable private key updating in ID-based protocols. Although serveral blockchain-based CPPA (BCPPA) protocols have been proposed to mitigiate these challenges, there still exist some intractabilities such as revoking private key, or frequent interactions, or requiring an idea hardware. Thus, in this paper, we are motivated to propose a novel BCPPA protocol without these existing issues. Specifically, we present a PKI-based solution (using a typical digital signature protocol, such as ECDSA) based on Ethereum (a public blockchain), which is designed to facilitate secure communication in VANETs. In other words, we combine the blockchain technology and a key derivation algorithm to realize an effective certificate management. This reduces the need for participating vehicles to store a large number of private keys. To reduce the verification time cost, our BCPPA suppotrs replacing ECDSA with modified ECDSA for batch verification or directly adopting other PKI-based signatures with batch verification. In addition to introducing the concrete design, we also present the security requirements that our BCPPA protocol can satisfy. We then implement BCPPA in the Ethereum test network (i.e.Rinkeby) and provide simulations using VanetMobiSim and NS-2 to show its feasibility (i.e. milliseconds).
Vehicle to vehicle (V2V) communication has gained importance in recent times because of the increasing number of traffic accidents and advancements in information sharing. A secure and reliable data transfer has become important to ensure the safety and trust of vehicular network users. Because of scalability of V2V communication, proposed solutions must have low computational complexities and free from latency issues. In this paper, we utilize the channel characteristics of wireless networks in V2V communication, which are used to generate link fingerprints. By using blockchain technology, data authentication among vehicles can be achieved in real time. The proposed algorithms are used to address the time complexity and delay issues in the Internet of Vehicles (IoV), which are lightweight and provide real time adversary detection within the network. Blockchain technology is used to generate blocks in which each hash is generated and shared with corresponding vehicles. The hash itself is not generated if an adversary affects the communication among vehicles. The Pearson Correlation Coefficient is calculated for each link and it is calculated as 0.9749 when there is no adversary and 0.1282 when an adversary is introduced into the network. The time complexity is computed as low asO(1) for the network.
Due to the increase of cybercrime and security risks in computer networks as well as violations of user privacy, it is essential to upgrade the existing protection models and provide practical solutions to meet these challenges. An example of these risks is the presence of a third party between users and various services, which leads to the collection and control of large amounts of users' personal information and the possibility of their databases being misused or hacked. Blockchain technology and encrypted currencies have so far shown that a decentralized network of peer-to-peer users, along with a general ledger, can do reliable computing. So, in this article, we are going to introduce a protocol that converts the blockchain network to an automated access control manager without the presence of a third party. To this end, we designed a mutual authentication protocol to create a secure channel between the user and the service and then demonstrate its accuracy and completeness using the Gong-Nidham-Yahalom belief logic The results of our evaluations show that our proposed protocol is secure enough to be used on the blockchain network and attackers are unable to penetrate, track, impersonate, inject, misrepresent or distort information using the common attacks.
Sourav Saha, Durbadal Chattaraj, Basudeb Bera, Ashok Kumar Das
Abstract This article introduces a new consortium blockchaināenabled access control scheme in edge computing based generic Internet of Things environment (called CBACSāEIoT), where the mutual authentication among the IoT smart devices and the gateway node(s), and also among the gateway node(s) and respective edge server(s) occur. In addition, key management phase is executed among the edge server(s) and associated cloud server(s). Using the established secret keys, the entities in the network communicate securely. The data gathered securely by the gateway nodes are then used to form various types of blocks (private, public, or consortium) at the edge server(s) based on application types in the generic IoT environment. The created blocks are mined by the edge servers in order to add them in the blockchain center. A detailed security analysis including the formal security has revealed that the proposed CBACSāEIoT is robust against various potential attacks needed in the IoT environment. To further strengthen the security, the simulationābased formal security verification on CBACSāEIoT has been carried out to exhibit that CBACSāEIoT is secure against passive and active attacks. Finally, a meticulous comparative performance analysis shows that CBACSāEIoT offers superior security and supports more functionality features, and also provides less communication and computational overheads compared with existing relevant schemes.
Moses Arhinful Acquah, Na Chen, JengāShyang Pan, Hong-Mei Yang Ā· 5 authors
Biometrics, with its uniqueness to every individual, has been adapted as a security authentication feature by many institutions. These biometric data are processed into templates that are saved on databases, and a central authority centralizes and controls these databases. This form of storing biometric data, or in our case fingerprint template, is asymmetric and prone to three main security attacks, such as fake template input, template modification or deletion, and channel interception by a malicious attacker. In this paper, we secure an encrypted fingerprint template by a symmetric peer-to-peer network and symmetric encryption. The fingerprint is encrypted by the symmetric key algorithm: Advanced Encryption Standard (AES) algorithm and then is uploaded to a symmetrically distributed storage system, the InterPlanetary File system (IPFS). The hash of the templated is stored in a decentralized blockchain. The slow transaction speed of the blockchain has limited its use in real-life applications, such as large file storage, hence, the merge with IPFS to store just the hashes of large files. The encrypted template is uploaded to the IPFS, and its returned digest is stored on the Ethereum network. The implementation of IPFS prevents storing the raw state of the fingerprint template on the Ethereum network in order to reduce cost and also prevent identity theft. This procedure is an improvement of previous systems. By adopting the method of template hashing, the proposed system is cost-effective and efficient. The experimental results depict that the proposed system secures the fingerprint template by encryption, hashing, and decentralization.
Open access
Biometric Identification and Security
Advanced Steganography and Watermarking Techniques
Marsha Chikita Intania Putri, Parman Sukarno, Aulia Arif Wardana
Authentication is a method for securing an account by verifying the user identity by inputting email with a password. Two factor authentications is an authentication system that combines the first-factor authentication with the second factor. General two factor authentication by entering an email or username with a password are similar. However, two factor authentication requires additional information that must be inputted by the user. Additional information can be in the form of tokens or one-time passwords (OTP). Two factor authentications generally still uses third-party services to generate token or OTP still have vulnerable because can attacked from tokens steal through MITM and found that the generated tokens with the same value. Therefore, we propose a two-factor authentication framework based on ethereum blockchain with dApp as token generation system. Firstly, outcome from the analysis of the system, next succeeded in creating a two-factor authentication system without using third-parties. Second, token system generate up to 3164 different tokens in one second and has been collisions tested. Third, security method to protect token from MITM attack. The attacker unable to get access caused all the checking are done by dApp user authentication.
In this paper we propose a blockchain-based cross-domain authentication strategy. This strategy uses the cosmos network model to enable mobile devices to reliably access external domain networks when moving across domains. Our test results prove the feasibility of this strategy and have better performance than other cross-domain authentication schemes.
Access control is one of the important security services that is essential for an Internet of Things (IoT)-enabled authorized user using his/her smart mobile device to authenticate with the trusted Hospital Authority (HA) in a hospital. After mutual authentication, a secret key is established among the user and HA for secure data transmission. The secure data (transactions) gathered by the HA from the users in the hospital is encrypted using a shared key among various trusted hospital authorities involved in the private blockchain network of hospitals. The HA of each hospital is responsible for constructing the blocks in the blockchain using the encrypted transactions because the data in healthcare application is treated as confidential and private. To deal with this important problem, we design a novel access control scheme using private blockchain technology. The proposed scheme is shown to be secure against various well-known attacks. Moreover, the proposed scheme provides better security and functionality features, and also requires low communication and computational costs as compared to relevant approaches.
Jiao Liu, Xinghua Li, Qi Jiang, Mohammad S. Obaidat Ā· 5 authors
Authentication with unlinkability is one of the critical requirements for the security of VANETs. Unlinkability prevents attackers from linking multiple messages to infer vehicular privacy. Pseudonymous authentication schemes are widely adopted to achieve unlinkable authentication. However, they need multiple interactions with a trusted third-party to update pseudonym as well as the attached information. In order to address this issue and provide effective services in distributed systems, we propose a blockchain-based unlinkable authentication protocol called BUA, where Service Manager (SM) of each domain acts as the nodes of consortium blockchain to construct a distributed system. Each SM covers a certain logical area and maintains a sequence of consistent blocks, which hold vehicular registration data. Based on the system, vehicles use homomorphic encryption to self-generate any number of pseudonyms to achieve unlinkability. Pseudonymous validity and ownership can be verified locally by each SM. Performance evaluation results of the proposed scheme show that our protocol provides stronger security with less computation and communication overhead.
Myeonghyun Kim, Sungjin Yu, Joonyoung Lee, Yohan Park Ā· 5 authors
In the traditional electronic health record (EHR) management system, each medical service center manages their own health records, respectively, which are difficult to share on the different medical platforms. Recently, blockchain technology is one of the popular alternatives to enable medical service centers based on different platforms to share EHRs. However, it is hard to store whole EHR data in blockchain because of the size and the price of blockchain. To resolve this problem, cloud computing is considered as a promising solution. Cloud computing offers advantageous properties such as storage availability and scalability. Unfortunately, the EHR system with cloud computing can be vulnerable to various attacks because the sensitive data is sent over a public channel. We propose the secure protocol for cloud-assisted EHR system using blockchain. In the proposed scheme, blockchain technology is used to provide data integrity and access control using log transactions and the cloud server stores and manages the patient's EHRs to provide secure storage resources. We use an elliptic curve cryptosystems (ECC) to provide secure health data sharing with cloud computing. We demonstrate that the proposed EHR system can prevent various attacks by using informal security analysis and automated validation of internet security protocols and applications (AVISPA) simulation. Furthermore, we prove that the proposed EHR system provides secure mutual authentication using BAN logic analysis. We then compare the computation overhead, communication overhead, and security properties with existing schemes. Consequently, the proposed EHR system is suitable for the practical healthcare system considering security and efficiency.
This paper presents a novel approach to securing IoT devices by leveraging DDoS Open Threat Signaling (DOTS) architecture on a Blockchain framework. Like many areas of the information technology domain, IoT sensors are also prone to attacks but on a larger scale. There are millions of devices being connected to a central domain to provide different types of services. Since these low-powered IoT devices have constrained technical requirements with less computational capabilities, they lack the capacity to judge their behavior as benign or malignant. IoT relies heavily on the higher level of intelligent nodes to decide on their status. An IoT Controller/Edge server handles the registration and the limited management of devices. Since traditional security is unable to protect the IoT environment sufficiently, we present a Blockchain-based DDoS detection approach to secure and mitigate such attacks in the IoT environment. Our test setup includes dataset from four sensors over two months. These values were tested using a threshold calculation against the variation of temperature, humidity, pressure, and wind direction on that day to find out whether an IoT sensor is under a DDoS attack. Our results show how DOTS can help in detection of attack when mapped on IoT edge computing.
May 1, 2020Ā·2020 IEEE 6th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing, (HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS)
With the rapid development of economic globalization, cooperation between countries, between enterprises, has become a key factor whether country and enterprises can make great economic progress. In these cooperation processes, it is necessary to trace the source of business data or log data for auditing and accountability. However, multi-party enterprises participating in cooperation often do not trust each other, and the separate accounting of the enterprises leads to isolated islands of information, which makes it difficult to trace the entire life cycle of the data. Therefore, there is an urgent need for a mechanism that can establish distributed trustworthiness among multiparty organizations that do not trust each other, and provide a tamper-resistant data storage mechanism to achieve credible traceability of data. This work proposes a data traceability platform architecture design plan for supply chain management based on the multi-disciplinary knowledge and technology of the Fabric Alliance chain architecture, perceptual identification technology, and cryptographic knowledge. At the end of the paper, the characteristics and shortcomings of data traceability of this scheme are evaluated.
Morampudi Mahesh Kumar, Munaga V. N. K. Prasad, U. S. N. Raju
Multiābiometric systems have been widely accepted in various applications due to its capability to solve the limitations of unimodal systems. Directly storing the biometric templates into a centralised server leads to privacy concerns. In the past few years, many biometric authentication systems based on homomorphic encryption have been introduced to provide security for the templates. Most of the existing solutions rely on an implication of the assumption that the server is āhonestābutācuriousā. Therefore, the compromise of server results into the entire system vulnerability and fails to provide the integrity. To address this, we propose a novel multiāinstance iris authentication system, BMIAE to deal with malicious attacks over the transmission channel and at the untrusted server. BMIAE encrypt the iris templates using ElGamal encryption to guarantee confidentiality and Smart contract running on a Blockchain helps to achieve the integrity of templates and matching result. BMIAE also addresses the limitations of using Blockchain for biometrics like privacy and expensive storage. To check the effectiveness and robustness, BMIAE has experimented on CASIAāV3āInterval, IITD and SDUMLAāHMT iris databases. Experimental results show that BMIAE provides improved accuracy, and eliminates the need to trust the centralised server when compared to the stateāofātheāart approaches.
Open access
Biometric Identification and Security
User Authentication and Security Systems
Advanced Steganography and Watermarking Techniques
Jie Xu, Kaiping Xue, Hangyu Tian, Jianan Hong Ā· 6 authors
More and more users are eager to obtain more comprehensive network services without revealing their private information. Traditionally, in order to access a network, a user is authorized with an identity and corresponding keys, which are generated and managed by the network operator. All users' personally identifying information are centralized stored by the network operator. However, this approach makes users lose the control of their personally identifying information. Users are concerned about who can access these sensitive data and whether they have been compromised. In this paper, we propose a blockchain-based identity management and authentication scheme for mobile networks, where users' identifying information are controlled by the users themselves. Our scheme let users generate their self-sovereign identities (SSIs) and corresponding public keys and private keys. The private key used to authenticate the user's identifying information is only known to the user. We use blockchain to record SSIs and public keys of legitimate user, and adopt chameleon hash to delete illegal users' information on the blockchain, while keeping the block head unchanged. Furthermore, other service providers can obtain the user's SSI and public key and authenticate users by querying the blockchain. Experimental results confirm that our scheme can greatly reduce the revocation overhead and communication overhead.