The demands for the fairness, security, and efficiency of the supply chain have grown significantly due to the rise of globalization. However, some problems of the information flow, logistics, and capital flow in the supply chain remain a challenge, such as the information asymmetry between upstream and downstream, substandard quality of goods, difficulty in traceability, and default of payment. Therefore, this paper proposes a blockchain-based supply chain framework (SESCF), which solves the supply chain problems securely and efficiently. First, the use of blockchain and smart contracts ensures the information symmetry in the supply chain system. Second, the radio frequency identification (RFID) provides a unique identity of goods, which helps in real-time quality monitoring. Additionally, the immutability and distributed storage of the blockchain play an important role in tracking the origin of goods. Third, the efficient payment channel is used to solve the problem of payment defaults. Furthermore, simulations of smart contracts along with the security analyses are presented in this paper. We also implement a blockchain-based supply chain system (SescfDapp), which is built upon a Consortium blockchain. Large-scale experiments and detailed analysis prove the feasibility and efficiency of our proposed system.
In tracing the (robotically automated) logistics of large quantities of goods, inexpensive passive RFID tags are preferred for cost reasons. Accordingly, security between such tags and readers have primarily been studied among many issues of RFID. However, the authenticity of data cannot be guaranteed if logistics services can give false information. Although the use of blockchain is often discussed, it is simply a recording system, so there is a risk that false records may be written to it. As a solution, we propose a design in which a digitally signing, location-constrained and tamper-evident reader atomically writes an evidence to blockchain along with its reading and writing a tag. By semi-formal modeling, we confirmed that the confidentiality and integrity of the information can be maintained throughout the system, and digitally signed data can be verified later despite possible compromise of private keys or signature algorithms, or expiration of public key certificates. We also introduce a prototype design to show that our proposal is viable. This makes it possible to trace authentic logistics information using inexpensive passive RFID tags. Furthermore, by abstracting the reader/writer as a sensor/actuator, this model can be extended to IoT in general.
A wireless rechargeable sensor network was proposed to extend the lifetime of the wireless sensor network. In this article, a charger is combined together with a self-propelled vehicle to provide a more flexible result of charger deployment. The dynamic chargers path selection problem is defined and mapped into the traveling salesman problem. Four metaheuristic algorithms for Internet-of-Things (IoT) applications are designed, and the higher fitness value between the charging path and the number of dead IoT devices is achieved. However, metaheuristic approaches may spend more time on searching solutions so that many IoT devices overuse limited power and fail to be charged for a long time, leading to power exhaustion. In this article, the edge computing technique is applied to accelerate the obtainment of charging paths with the well-defined edge/centralized unit switching. Moreover, to assure the calculated path trustworthy and will not be tampered with, the blockchain technology is adopted. The proposed architecture maintains high-level information credibility while transmitting the information of charging paths within the cloud and edge. The simulation results showed that the proposed method is capable of achieving better charging efficiency and less deployment cost.
Pouyan Razmjouei, Abdollah Kavousi‐Fard, Morteza Dabbaghjamanesh, Tao Jin · 5 authors
For quite a long time, purchasers have come to depend on the convenience and security and included security that a passive vehicle immobilizer framework offers. These frameworks comprise of a Passive Entry Passive Start (PEPS) innovation, conveyed by the driver, and a Smart Key Unit (SKU), mounted in the vehicle with regards to the principal parts of these frameworks. This paper for the first time shows the cyber vulnerability of PEPS in the vehicle against the man-in-the middle attack (MITM). It enables the hacker to open and begin the vehicle, although there was still a distance between the vehicle and the key. To stop this physical cyber attack, we propose a hearty ultra-lightweight common confirmation technique dependent on the radio frequency identification (RFID) convention that cooperates with a decentralized database to verify the PEPS. A secure blockchain based on smart contract is also developed which is compatible with the mutual authentication in the vehicle. A detailed security analysis is performed on an undefined vehicle to prove the high security of the proposed communication approach when facing MITM.
Product serialization aims to allocate unique serial numbers to products in a supply chain. The security challenges to product serialization are: • Valid serial numbers can be stolen and used to label fake products. Thus uniqueness of a serial number should be verifiable at any stage of its lifecycle in a supply chain. • A planned change of custody of a product in distribution can be corrupted by a few intimidatory nodes. Compliance with the planned change of custody should be verifiable. • The manufacturer and the consumer should be able to verify that perishable food products with expired shelf life are discarded. In this paper, we use blockchains to develop a product serialization method that solves the above security issues in a multi-party perishable good supply chain. Blockchains can revolutionize security and transparency in supply chains by providing a secure data-sharing platform in a multi-party environment. Although blockchains can provide a secure data storage of change of custody events of products in a supply chain, a high volume of such events poses scalability problems for blockchains. In this paper, we solve the product serialization problem using blockchain offline channels. Our solution significantly reduces the number of transactions needed to be recorded in the blockchain. We propose a secure serialization protocol to verify the authenticity of serial numbers despite not frequently engaging with the blockchain.
With the advent of Internet of Things (IoT) a slow shift is happening from manual checks of capital intensive assets such as bridges, wind turbines, etc., where bolted joint is used as a main fastening method, towards unattended Structural Health Monitoring (SHM). Numerous approaches are proposed for monitoring the looseness of bolted joint assemblies, however, the majority of them can only be used for looseness detection purposes and not viable for monitoring since these approaches contain design impracticalities, not scalable or hard to implement outside of the laboratory environment. Furthermore, remote unattended monitoring is still very much in its infancy. Thus, to solve this issue, we propose a TenSense M20, a custom designed smart sensor node for continuous remote SHM of bolted joints. Complete node design is presented. Each aspect of the design is evaluated both by simulation and practical tests. Long Range (LoRa) is used as a means of wireless communication and the network can cover 3.8 km. The results show that TenSense M20 is able to precisely track the pre-tension force of a bolted joint with the approach being robust and scalable. Several transmission scenarios are analyzed and in the worst case scenario the node is estimated to last more than 5 years powered by several LiSOCl2primary batteries. Received data is securely stored in a blockchain and is easily accessible for services targeting integration with a Smart City.
A key communication technology in smart cities and smart buildings for automation is RFID. Proving the simultaneous presence of a group of RFID-tagged objects is a practical need in many application areas within this domain. Some examples of this include vehicle fleets, smart parking, safety in public places (smart cities), security and access control (smart buildings), and asset location (supply chain system, health care industry). Security, privacy, and efficiency are central issues when designing such a grouping-proof protocol. This work is motivated by Sundaresan et al.'s grouping-proof protocol, which applies zero-knowledge techniques. In this paper, we propose a lightweight, offline, serial-dependency grouping-proof protocol. Compared to existing grouping-proof protocols, our scheme improves on efficiency, scalability, security, and communication cost. It resists well-known attacks on grouping-proofs including tag/reader impersonation, tracking, replay, desynchronization, and message integrity.
La technologie des registres distribués blockchain a perturbé et révolutionné le monde en introduisant un système transactionnel décentralisé traditionnel permettant l'échange de devises et de données de manière sécurisée. Le suivi de la chaîne d'approvisionnement est un domaine qui pourrait grandement bénéficier de cette avancée. Actuellement, les chaînes d'approvisionnement centralisées souffrent d'un manque de transparence et de contrôle des stocks pour vérifier la qualité des produits traités et éviter des problèmes tels que la contrefaçon. Le processus de gestion de la chaîne d'approvisionnement traditionnel insuffisant pour localiser un produit tout au long du processus de développement et de transport et conduit à la nécessité de réorganiser la manière de gérer la traçabilité des biens de consommation. Cette thèse tente d'évaluer la faisabilité de l'utilisation d'une chaîne d'approvisionnement avec un système de registres distributés IOTA pour des applications IoT. Pour valider le concept, une chaîne logistique pharmaceutique est mise en œuvre pour obtenir des données de capteurs de température, d'humidité et GNSS à partir d'un microprocesseur à faible puissance et à faible coût pour stocker et envoyer de manière fiable et sécurisée des données et les envoyer à une nouvelle structure de chaîne de blocs. Nous en faisons la démonstration avec un CC2650 SensorTag en tant que dispositif de systèmes intégrés, le X-NUCLEO-GNSS1A1 pour le module de positionnement et un Raspberry Pi 3, proxy IOTA, pour mesurer le temps, l’énergie et l’efficacité de la création de transactions et le calcul du \guillemotleft proof of work \guillemotright. Nous analysons également les résultats de l'expérience et discutons des avantages et des inconvénients de la mise en œuvre
Purpose There is great interest in blockchain in the supply chain yet there is little empirical research to support the consideration of the technology. Ferdows (2018) calls for research aimed at learning from pioneers in the field and Gartner points out that the interest in blockchain holds similarities to the interest surrounding RFID 15 years ago. As a result, there may be opportunities to leverage insights from RFID research to inform the consideration of blockchain. The purpose of this paper is to explore how the Reyes et al. (2016) framework for the implementation of RFID may inform the consideration of blockchain in the supply chain. Design/methodology/approach A two-stage approach is used to explore RFID implementation considerations from the Reyes et al. (2016) RFID implementation framework, using an initial exploration of managers interested in blockchain using a focus group and a survey and to more in depth explore three case companies pioneering blockchain. Findings Several RFID implementation considerations can inform the consideration of blockchain but there are also differences in considering blockchain. A framework is developed that details considerations found to be relevant by implementation stage. Originality/value This paper adds to the limited amount of empirical research on blockchain in the supply chain and advances research beyond the consideration of use cases into the exploration of actual implementation of blockchain in the supply chain. The decision framework developed both leverages and nuances findings from RFID research and can inform managerial decision making. It also adds to research a multi-stage approach to implementation and uncovers rich opportunity to further learn from pioneers.
Marcel Müller, Sandro Rodriguez Garzon, Martin Westerkamp, Zoltán Lux
In today's logistics processes, inter-organizational delivery services with strict end-to-end service level agreements lack transparent and trustful mechanisms to keep track of deliveries beyond organizational limits. Clearly traceable responsibility based on ownership without the possibility to circumvent penalties for violations of SLAs based on end-to end monitoring is needed. In this paper, we propose to let all organizations that are involved in the delivery of high value parcels mutually confirm handovers between organizations via a common distributed ledger. Smart sensors within parcels are used to immutably log violations of end-to-end service level agreements that are difficult to be detected by a visual check of the packaging during a handover. This concept of an inter-organizational distributed tracking system does not only increase transparency but it enables logistics organizations to rely on shared information when it comes to conflicts with respect to inter-organizational deliveries. The proposed approach offers more fine grain and holistic monitoring results than previously proposed concepts involving distributed ledgers and smart sensors.
Srinivas Jangirala, Ashok Kumar Das, Athanasios V. Vasilakos
Secure real-time data about goods in transit in supply chains needs bandwidth having capacity that is not fulfilled with the current infrastructure. Hence, 5G-enabled Internet of Things (IoT) in mobile edge computing is intended to substantially increase this capacity. To deal with this issue, in this article, we design a new efficient lightweight blockchain-enabled radio frequency identification (RFID)-based authentication protocol for supply chains in 5G mobile edge computing environment, called lightweight blockchain-enabled RFID-based authentication protocol (LBRAPS). LBRAPS is based on bitwise exclusive-or (XOR), one-way cryptographic hash and bitwise rotation operations only. LBRAPS is shown to be secure against various attacks. Moreover, the simulation-based formal security verification using the broadly-accepted Automated Validation of Internet Security Protocols and Applications (AVISPA) tool assures that LBRAPS is secure. Finally, it is shown that LBRAPS has better trade-off among its security and functionality features, communication and computation costs as compared to those for existing protocols.
This paper proposes an approach to enhance traceability in Pharma supply chain using Internet of Things (IoT) edge devices and Blockchain. Traditional supply chain systems have gaps exploited by anti-social elements to distribute counterfeit medicines and devices. Blockchain ensures source to consumer traceability and tracking which helps to improve efficiency in the industry by ensuring consumer protection, building trust and improving quality of service.
Nicholas Kolokotronis, Konstantinos Limniotis, Stavros Shiaeles, Romain Griffiths
Blockchain is a disruptive technology that has been characterised to be the next big thing and has already gained a broad recognition by experts in diverse fields. In this paper, we consider possible use cases and applications of the blockchain for the consumer electronics (CE) industry and its interplay with the Internet of things. Instead of discussing how the blockchain can revolutionise the supply chain, we focus on how it could be employed for enhancing the security of networked CE devices. This work is motivated by the large number of recent attacks that use easily hackable devices as a weaponry. Towards this direction, privacy and data protection aspects of blockchain solutions are also presented and are linked to regulatory framework provisions. Information on existing blockchain solutions is also provided.
Open access
2 source records
cs.CR
Blockchain Technology Applications and Security
Physical Unclonable Functions (PUFs) and Hardware Security
BACKGROUND: An efficient inventory control system would help optimize the use of resources and eventually help improve patient care. OBJECTIVES: The study aimed to find out the surgical consumables using always, better, and control (ABC) and vital, essential, and desirable (VED) technique as well as calculating the lead time of specific category A and vital surgical consumables. METHODS: This was a descriptive, record-based study conducted from January to March 2016 in the surgical stores of the All India Institute of Medical Sciences, New Delhi. The study comprised all the surgical consumables which were procured during the financial year 2014-2015. Stores ledger containing details of the consumption of the items, supply orders, and procurement files of the items were studied for performing ABC analysis and calculating the lead time. A list of surgical consumables was distributed to the doctors, nursing staff, technical staff, and hospital stores personnel to categorize them into VED categories after explaining them the basis for the classification. RESULTS: ABC analysis revealed that 35 items (14%), 52 items (21%), and 171 items (69%) were categorized into A (70% annual consumption value [ACV]), B (20% ACV), and C (10% ACV) category, respectively. In the current study, vital items comprised the majority of the items, i.e., 73% of the total items and essential (E) category of items comprised 26% of all the items. The average internal, external, and total lead time was 17 days (range 3-30 days), 25 days (range 5-38) and 44 days (range 18-98 days), respectively. CONCLUSIONS: Hospitals stores need to implement inventory management techniques to reduce the number of stock-outs and internal lead time.
Previous research studies mostly focused on enhancing the security of radio frequency identification (RFID) protocols for various RFID applications that rely on a centralized database. However, blockchain technology is quickly emerging as a novel distributed and decentralized alternative that provides higher data protection, reliability, immutability, transparency, and lower management costs compared with a conventional centralized database. These properties make it extremely suitable for integration in a supply chain management system. In order to successfully fuse RFID and blockchain technologies together, a secure method of communication is required between the RFID tagged goods and the blockchain nodes. Therefore, this paper proposes a robust ultra-lightweight mutual authentication RFID protocol that works together with a decentralized database to create a secure blockchain-enabled supply chain management system. Detailed security analysis is performed to prove that the proposed protocol is secure from key disclosure, replay, man-in-the-middle, de-synchronization, and tracking attacks. In addition to that, a formal analysis is conducted using Gong, Needham, and Yahalom logic and automated validation of internet security protocols and applications tool to verify the security of the proposed protocol. The protocol is proven to be efficient with respect to storage, computational, and communication costs. In addition to that, a further step is taken to ensure the robustness of the protocol by analyzing the probability of data collision written to the blockchain.
Lei Xu, Lin Chen, Zhimin Gao, Yanling Chang · 6 authors
Maritime transportation plays a critical role for the U.S. and global economies, and has evolved into a complex system that involves a plethora of supply chain stakeholders spread around the globe. The inherent complexity brings huge security challenges including cargo loss and high burdens in cargo inspection against illicit activities and potential terrorist attacks. The emerging blockchain technology provides a promising tool to build a unified maritime cargo tracking system critical for cargo security. However, most existing efforts focus on transportation data itself, while ignoring how to bind the physical cargo movements and information managed by the system consistently. This can severely undermine the effectiveness of securing cargo transportation. To fulfill this gap, we propose a binding scheme leveraging a novel digital identity management mechanism. The digital identity management mechanism maps the best practice in the physical world to the cyber world and can be seamlessly integrated with a blockchain-based cargo management system.
A key communication technology in smart cities and smart buildings for automation is RFID. Proving the simultaneous presence of a group of RFID-tagged objects is a practical need in many application areas within this domain. Some examples of this include vehicle fleets, smart parking, safety in public places (smart cities), security and access control (smart buildings), and asset location (supply chain system, health care industry). Security, privacy, and efficiency are central issues when designing such a grouping-proof protocol. This work is motivated by Sundaresan et al.'s grouping-proof protocol, which applies zero-knowledge techniques. In this paper, we propose a light, improved version of an offline serial-dependency grouping-proof protocol. Compared to existing grouping-proof protocols, our scheme improves on efficiency, scalability, security, and communication cost. It resists well-known attacks on grouping-proofs including tag/reader anonymity, tracking, forward security, replay, forgery, and message integrity.
This paper is executing a food menu function for customer to search as well as upload food in sequence. Nowadays, mobile devices with wireless technologies have appeared into the humanity industry in particularly restaurants with the development of food ordering system. Most of the restaurants are used in the manual ordering system, which is involving papers and pen. In this method has can be very slow and can occur in error in noting down the users orders. Additionally, large numbers of peoples are needed to use the online ordering system. It is more helpful and reduces the users waiting time. In this work presents the customer has been creating the registration he/she then the password will be generated. The user can create the account and login into the system and show the restaurant food menu details. Select the food item from the menu. Adding the customer data will be updated and delete the food orders from the menu bar. Update the cost of product details and update the additional information like photo, description etc. If the customer no need item remove all items from the current order and to show the payment details as well as type the location from the mobile. Finally, the notification SMS can be received from the mobile and view the place order. The existing supply chain method is not efficient enough to take care of the food safety at every stage. Due to in efficiencies in the food supply chain, food industry faces countless challenges.But the rising distributed ledger technology; block chain can improve the food safety by connecting multiple stakeholders like farmers, processors, retailers, as well as consumers.
The paper discusses the possibility of combining RFID and Blockchain technology to more effectively prevent counterfeiting of products or raw materials, and to solve problems related to production, logistics and storage. Linking these technologies can lead to better planning by increasing the transparency and traceability of industrial or logistical processes or such as efficient detection of critical chain sites.
Most of the existing RFID based ownership transfer protocols are in need of TTP or require reader to reader communication in a centralized system. In the post supply chain, the products are to be tracked to prove their originality in a distributed environment. This paper aims to provide a verifiable ownership transfer of products attached with an RFID tag using blockchain technology to address various security requirements. The proposed protocol consists of two phases; in the first phase the buyer commits to buy the product and in the second phase actual ownership is transferred from the seller to the buyer. Analysis of the proposed protocol is carried out and it shows that our protocol is relatively better than the existing related schemes with respect to security requirements.
Since radio frequency identification (RFID) technology has been used in various scenarios such as supply chain, access control system and credit card, tremendous efforts have been made to improve the authentication between tags and readers to prevent potential attacks. Though effective in certain circumstances, these existing methods usually require a server to maintain a database of identity related information for every tag, which makes the system vulnerable to the SQL injection attack and not suitable for distributed environment. To address these problems, we now propose a novel blockchain-based mutual authentication security protocol. In this new scheme, there is no need for the trusted third parties to provide security and privacy for the system. Authentication is executed as an unmodifiable transaction based on blockchain rather than database, which applies to distributed RFID systems with high security demand and relatively low real-time requirement. Analysis shows that our protocol is logically correct and can prevent multiple attacks.