The Internet of Things (IoT) plays a crucial role in our daily lives. Many objects are being equipped with electronic components in order to facilitate their interconnection and integration with the Internet. Due to the growing usage of IoT devices and generated data, to ensure the reliability of the network, it is necessary to utilize scalable and effective trust management systems. This study introduces the SCoTMan model, which integrates social interactions with the capability of smart contracts for effective trust management in Social IoT (SIoT). Blockchain can enhance trust management protocols by providing a global view of data and improving the propagation of trust values. Implementing trust management algorithms in traditional decentralized architectures can be challenging, but using smart contracts can provide an efficient solution. We implemented the model on the Hyperledger Fabric platform and performed a comprehensive assessment. The model efficiently performs indirect trust computations by choosing optimized counselors and minimizing storage requirements. Multiple experiments have been carried out to assess and validate the efficiency of the model in functionality metrics such as trust convergence and success rate, as well as non-functional metrics like transaction delay, computation and communication overhead, and memory usage. We also conducted a comparative analysis to emphasize the method’s advantages over existing approaches in the literature. We introduced the Total Storage Cost metric for better comparison. The results show substantial improvements in trust convergence under limited Total Storage Cost. The proposed method demonstrates that it is possible to establish scalable trust management in the SIoT by utilizing smart contracts and social metrics.
Authentication for the Internet of Vehicles (IoV) is essential for safe IoV connection. However, because of the peculiar structure of IoV, current authentication schemes heavily rely on Road Side Units (RSUs). An excessive number of RSUs will make it difficult to synchronize updates, which will make system authentication inefficient overall and prevent the reuse of authentication results. Based on this, this paper proposes a blockchain-based secure distributed authentication scheme for IoV. First, data processing and storage are decentralized to the edge of the network to reduce the communication delay and response time with the trusted authority (TA). Second, in the IoV authentication process, smart contract technology is used to achieve automatic triggering of the authentication process, and an optimized Practical Byzantine Fault Tolerant Consensus (PBFT) algorithm is designed to add the authentication information to the blockchain ledger so that the authentication results can be reused. Finally, this paper performs formal security verification and informal security analysis using and Real-Or-Random (ROR) oracle model and AVISPA tool. In addition, this paper performs a detailed evaluation of computation overhead and communication overhead and uses SUMO for simulation verification. The security analysis and performance evaluation show that the scheme meets the security requirements of IoV while having less communication and computation overhead.
Abstract Blockchain, as a secure distributed ledger technology, has received extensive attention from academia and industry for its decentralization, comparability and traceability. This paper proposes a method for verifying data security on blockchain, and a cryptographic uploading and retrieval scheme is combined with IOTA blockchain technology. In this way, an IoT data storage and sharing model is designed to combine blockchain with IPFS. In this paper, it is found that there is a certain delay in operating on Fabric and IOTA compared to the scenarios that do not use blockchain. But Fabric has better performance in upload and download performance than IOTA. In the proposed scheme in this paper, the uploading time is stabilized between 0.8 and 1.2, and the retrieval time is stabilized between 0.43s and 0.76s, which has superior data uploading and retrieval performance than Scheme 1. Furthermore, the time to generate a key for a 50MB file is only around 1800ms, and for a 50MB file split into 6KB blocks, the time to generate a secret key is only around 36s. In this paper, when the file size reaches 5MB, the computational overhead of encryption and decryption is about 1315ms and 1283ms, respectively, and the time overhead of data consistency validation is only about 1095ms when the data block is cut into 6KB for a file of 5MB, indicating that this paper’s scheme has a lower time overhead in the generation of the secret key, encryption and decryption, and the data consistency validation. In summary, the above experiments verify the security and applicability of this paper’s scheme in data storage and verification.
Abdullah Ayub Khan, Asif Ali Laghari, Abdullah M. Baqasah, Roobaea Alroobaea · 7 authors
The robust development of the blockchain distributed ledger, the Internet of Things (IoT), and fog computing-enabled connected devices and nodes has changed our lifestyle nowadays. Due to this, the increased rate of device sales and utilization increases the demand for edge computing technology with collaborative procedures. However, there is a well-established paradigm designed to optimize various distinct quality-of-service requirements, including bandwidth, latency, transmission power, delay, duty cycle, throughput, response, and edge sense, and bring computation and data storage closer to the devices and edges, along with ledger security and privacy during transmission. In this article, we present a systematic review of blockchain Hyperledger enabling fog and edge computing, which integrates as an outsourcing computation over the serverless consortium network environment. The main objective of this article is to classify recently published articles and survey reports on the current status in the domain of edge distributed computing and outsourcing computation, such as fog and edge. In addition, we proposed a blockchain-Hyperledger Sawtooth-enabled serverless edge-based distributed outsourcing computation architecture. This theoretical architecture-based solution delivers robust data security in terms of integrity, transparency, provenance, and privacy-protected preservation in the immutable storage to store the outsourcing computational ledgers. This article also highlights the changes between the proposed taxonomy and the current system based on distinct parameters, such as system security and privacy. Finally, a few open research issues and limitations with promising future directions are listed for future research work.
Zero-knowledge range proofs (ZKRPs) allow a prover to convince a verifier that a secret value lies in a given interval. ZKRPs have numerous applications: from anonymous credentials and auctions, to confidential transactions in cryptocurrencies. At the same time, a plethora of ZKRP constructions exist in the literature, each with its own trade-offs. In this work, we systematize the knowledge around ZKRPs. We create a classification of existing constructions based on the underlying building techniques, and we summarize their properties. We provide comparisons between schemes both in terms of properties as well as efficiency levels, and construct a guideline to assist in the selection of an appropriate ZKRP for different application requirements. Finally, we discuss a number of interesting open research problems.
Blockchain technology is vital in strengthening the security of private information, particularly in the healthcare sector. Its features, such as confidentiality, decentralization, security and privacy, address challenges traditional healthcare systems face, such as phishing, denial of service and identity theft attacks. In this regard, our research paper presents a security solution specifically tailored for healthcare applications. This solution integrates decentralized identity management (DIDs) for identity verification, employs the advanced ChaCha20-Poly1305 encryption algorithm to ensure data confidentiality, and utilizes a token-based mechanism for immutable record keeping. Furthermore, it incorporates a pure proof of stake (PPoS) consensus mechanism to enhance system security while optimizing efficiency. This comprehensive and scalable system showcases improvements in cost effectiveness, time efficiency of an average of 6,5 seconds and overall data protection compared to traditional approaches used in healthcare data security.
Aušrys Kilčiauskas, Antanas Bendoraitis, Eligijus Sakalauskas
One of the main trends for the monitoring and control of business processes is to implement these processes via private blockchain systems. These systems must ensure data privacy and verifiability for the entire network here denoted by ‘Net’. In addition, every business activity should be declared to a trusted third party (TTP), such as an Audit Authority (AA), for tax declaration and collection purposes. We present a solution for a confidential and verifiable realization of transactions based on the Unspent Transaction Output (UTxO) paradigm. This means that the total sum of transaction inputs (incomes) $In$ must be equal to the total sum of transaction outputs (expenses) $Ex$, satisfying the balance equation $In=Ex$. Privacy in a private blockchain must be achieved through the encryption of actual transaction values. However, it is crucial that all participants in the network be able to verify the validity of the transaction balance equation. This poses a challenge with probabilistically encrypted data. Moreover, the inputs and outputs are encrypted with different public keys. With the introduction of the AA, the number of different public keys for encryption can be reduced to two. Incomes are encrypted with the Receiver’s public key and expenses with the AA’s public key. The novelty of our realization lies in taking additively-multiplicative, homomorphic ElGamal encryption and integrating it with a proposed paradigm of modified Schnorr identification providing a non-interactive zero-knowledge proof (NIZKP) using a cryptographically secure h-function. Introducing the AA as a structural element in a blockchain system based on the UTxO enables effective verification of encrypted transaction data for the Net. This is possible because the proposed NIZKP is able to prove the equivalency of two ciphertexts encrypted with two different public keys and different actors. This integration allows all users on the Net to check the UTxO-based transaction balance equation on encrypted data. The security considerations of the proposed solution are presented.
Today, educational data, controlled centrally by educational institutions and administrative units, may be vulnerable to damage caused by natural disasters, political instability, and wars. Simultaneously, challenges arise in accessing this data for educational activities within the framework of exchange programs or lifelong learning. In the literature, there are numerous blockchain-based studies focusing on storing and sharing data in various fields. While several studies exist on blockchain applications for certification, verification, and data sharing in the education sector, a fully decentralized infrastructure has not yet been presented. To address this issue, it is proposed that data control should shift to the hands of students, who are the rightful owners of the data, rather than being solely in the hands of educational institutions. In alignment with the decentralized internet vision, Web3, public blockchain networks are considered the most suitable infrastructure for this purpose. To meet this need, a framework named PublicEduChain has been introduced within the scope of this study. PublicEduChain allows students to store their data in smart contracts created on the public Ethereum network, making it possible to share this information with any educational institution and administrative units. Educational institutions can access student data stored in smart contracts on the public Ethereum network through Learning Management System (LMS) applications and can add data to these contracts. PublicEduChain ensures that data is managed under student ownership within a fully decentralized infrastructure. The practical steps in PublicEduChain, such as creating a smart contract, logging into LMSs with Ethereum IDs, and allowing LMSs to read and write data in the student contract, are explained in detail.
Privacy and auditability have been conflicting design requirements for blockchainbased distributed ledgers since the inception of the field.As purpose-built blockchains with permissioned consensus and client access are developing in a broad and diverse range of industries, a specific form of this dichotomy is emerging: the need to audit the handling of regulated on-ledger financial assets, such as central bank digital currencies, while preserving the privacy and confidentiality of transactions as much as possible.This paper proposes a novel, privacy-preserving, noninteractive-zero-knowledge-proof-based protocol for a blockchain-based distributed ledger, to prove conformance with fundamental compliance requirements to external auditing parties.We present an extendable implementation and demonstrate the practicality of the approach.
Alexandr Kuznetsov, Alex Rusnak, Anton Yezhov, Dzianis Kanonik · 6 authors
Blockchain technology has emerged as a revolutionary tool in ensuring data integrity and security in digital transactions. However, the current approaches to data verification in blockchain systems, particularly in Ethereum, face challenges in terms of efficiency and computational overhead. The traditional use of Merkle Trees and cryptographic hash functions, while effective, leads to significant resource consumption, especially for large datasets. This highlights a gap in existing research: the need for more efficient methods of data verification in blockchain networks. Our study addresses this gap by proposing an innovative aggregation scheme for Zero-Knowledge Proofs within the structure of Merkle Trees. We develop a system that significantly reduces the size of the proof and the computational resources needed for its generation and verification. Our approach represents a paradigm shift in blockchain data verification, balancing security with efficiency. We conducted extensive experimental evaluations using real Ethereum block data to validate the effectiveness of our proposed scheme. The results demonstrate a drastic reduction in proof size and computational requirements compared to traditional methods, making the verification process more efficient and economically viable. Our contribution fills a critical research void, offering a scalable and secure solution for blockchain data verification. The implications of our work are far-reaching, enhancing the overall performance and adaptability of blockchain technology in various applications, from financial transactions to supply chain management.
Blockchain technology has emerged as a transformative solution to enhancing data security, privacy, and transparency, especially in cloud computing environments. As cloud computing continues to grow in popularity for its flexibility, scalability, and cost-effectiveness, its reliance on centralized data management systems creates significant security vulnerabilities. Blockchain, a decentralized and distributed ledger technology, offers an innovative approach to mitigate these concerns by providing immutable and transparent data transactions. This paper examines the integration of blockchain technology with cloud computing, exploring its role in revolutionizing data security, privacy, and transparency. Through case studies and research findings, the paper evaluates the potential benefits and challenges of adopting blockchain for securing cloud infrastructures, improving service integrity, and fostering trust in cloud environments.
Marisol García‐Valls, Alejandro M. Chirivella-Ciruelos
The lack of sufficient guarantee about the authenticity of running smart contracts is a major entry barrier to blockchain networks. By authenticity,we refer to the smart contract ownership or provenance; this implies perfect matching between a published source-code and the corresponding running version of a given smart contract. Block verifiers are services that check the provenance authenticity of the logic contained in blockchain networks. Nevertheless, as a block verifier is an external verification service, it consumes time to use it; and the derived overhead may not comply with temporal requirements of time-sensitive domains like cyber-physical systems. Such systems require that the temporal cost of using external services is assessed prior to the final system deployment. To the best of our knowledge, there are no previous contributions on the determination of the temporal cost of the smart-contract provenance verification process. This paper presents the design and implementation of a middleware that assesses the temporal overhead of accessing the verification services; the middleware is hosted in the global ledger and runs the verification services over large sets of smart contracts. Our contribution is validated by providing an implementation on a real blockchain network, employing actual smart contract verifier logic, and analysing the temporal behavior of the overall system operations to comply with the time-sensitive requirements of cyber-physical systems.
Mark Philip M. Sy, Rufo I. Marasigan, Enrique D. Festijo
The attractiveness of distributed ledger technology as a platform for the implementation of digitalized inter-organizational business processes stems from its inherent ability to handle the lack of trust and transparency between organizations. A blockchain is a classification of distributed ledgers that contains blocks, involving list of data connected by cryptography. Every block has a timestamp, a cryptographic hash of the previous block, and a few transaction details. It is commonly used for financial transactions in the case of Bitcoin and Ethereum, popularly known as cryptocurrencies. However, other than this use-case, implementing it in traditional information systems is explored in this paper. The study used Hyperledger Fabric (HLF) to create a permissioned network that supports a distributed ledger, smart contracts (chaincode) and various participants who invoke the transactions on the ledger. Several functions is embedded in the chaincode design as deemed necessary in the analysis of educational verification process of higher educational institutions (HEI). For this scenario, blockchain was believed to be appropriate to address trust, security, privacy, and transparency concerns because this technology prevents data or transactions from being altered once they are saved in a blockchain database. Since it creates an irreversible record, it practically becomes impossible to alter. Any changes to the database provide consistency and completeness by requiring new data blocks to be added to the current chain of blocks in chronological sequence. The blockchain network was interacted upon through Application Programming Interfaces (API). The performance assessment confirmed that the chaincode is working and the functions work as expected. Numerous readings of the response time and the payload size were recorded and kept as results for the endpoint testing of the chaincode. It can be assumed that using blockchain to improve the drawbacks of centralized and/or traditional information systems is viable.