Blockchain Papers

Mohammadpayam Almasian, Alireza Shafieinejad

No abstract is available for this record.

R Diwakar

Distributed computing is a business and monetary model permitting the clients to use top of the line registering and stockpiling practically with insignificant foundation on their end. In current medical care frameworks, electronic clinical records (EMRs) are modernized records which contains rundown of insights about patients wellbeing. Electronic clinical records are compelling contrasted with the current traditional stockpiling approaches because of its unified stockpiling of information, it prompts weak link as patients being the genuine proprietor forget about their private and delicate EMRs. Distributed computing utilizing encryption calculation is one of the critical figure the clinical administration framework which permits the clients to get to the wellbeing subtleties of patients in the safeguarded manner. The proposed work is to fabricate an encoded admittance control structure, contrasting the different encryption calculations accessible and utilize the most ideal calculation to get the sharing of EMRs among various elements associated with the shrewd medical services framework. Keywords- Medical Care; Electronic Clinical Records

Wei Huo, Yu Yu, Kang Yang, Zhongxiang Zheng · 7 authors

The emergence of technologies such as cloud computing, big data analytics, the Internet of Things (IoT), mobile internet, artificial intelligence (AI), and blockchain has given rise to several critical security concerns, especially regarding privacy breaches.Sophisticated cryptographic algorithms and protocols, including secure multiparty computation, homomorphic encryption, zero-knowledge proof, and indistinguishability obfuscation, provide effective solutions to address these challenges.The cryptographic community has already witnessed numerous commendable efforts aimed at mitigating privacy breaches through the utilization of advanced cryptographic algorithms and protocols.This study offers a comprehensive survey of the designs and applications of such algorithms and protocols, assessing them based on their security level, module rationale, and limitations regarding security and performance.This survey acts as a valuable resource for readers seeking a thorough understanding of the latest advancements in cryptographic algorithms and protocols. It also serves to bridge the gap between the theoretical underpinnings and practical applications of these advanced cryptographic primitives.

Yi Li, Jian Shen, Sai Ji, Ying-Hsun Lai

With the rapid development of Artificial Intelligence of Things (AIoT) technology and applications, the cloud–edge computing system provides convenient and low-latency storage and decentralized computing services to reduce computing requirements in the cloud environment. However, data integrity verification is still an urgent issue researchers have widely discussed in AIoT cloud–edge computing environment. As a distributed and immutable ledger technology, blockchain provides an effective way of data verification in digital financial transactions. The research proposes a blockchain-based data integrity verification scheme to improve the data verification rate in cloud–edge computing environment. Based on the method, a detailed blockchain-based data integrity verification scheme without a trusted third party is proposed with a data upload phase and a data verification phase. The novel proposal system is built on Hyperledger Sawtooth and experimentally evaluated against two state-of-the-art systems in a simulated cloud–edge environment. The results demonstrate that the proposed scheme can efficiently verify data integrity with a high verification rate.

Farooq Sunar Mahammad, S. Sai Shreya, H. Beebe Hazeera, P. Sravani · 6 authors

Decentralized Application is majorly used for sharing the most important information of the students' among various users.Blockchain technology is used to address security concerns associated with students' credential sharing.A revolutionary blockchain-based architecture is proposed, and the application is then built as a distributed one (DApp).In order to avoid the counterfeiting of the students' credentials the features of block chain technology are more widely used.This application is used to share the credentials of the student by the college/school directly to student and those data can be used by the companies those who recruit students can directly access students' data by getting the permission from students' without any third-party involvement, this saves time and money.Ethereum framework is used to create an application in which Truffle framework is used to make the developer's life easier by creating smart contracts and has the migration and uses web3.js as it is beginner friendly.Furthermore, the results of the tests are used to analyses both costs and efficiency.

Sahil Rai, Brijesh Kumar Chaurasia, Raj Kumar Gupta, Sudeep Verma

In this paper, the utilization of non-fungible tokens (NFT) for medical services is presented. The use of technology in the healthcare and medical sectors has increased exponentially due to the epidemic. However, security, transparency, handling of medical reports, and accessibility are the main problems in the medical sector. To address the aforementioned problems, we have proposed the Hyperledger blockchain with NFTs to ensure ownership of patient records, track all related activities, and provide transparency, security, and fast accessibility. Medical data, including x-rays, test reports, prescriptions, sonography reports, etc., is represented with NFTs, which are digital assets that are stored using distributed ledger technology (DLT) with unique addresses that cannot be copied. In addition, we have also used the Inter Planetary File System (IPFS) and Pinata for secure storage and fast access with security and transparency. The results show that NFT with a private blockchain like Hyperledger is a viable solution for the healthcare system.

Ningbin Yang, Chunming Tang, Debiao He

The Industrial Internet of Things (IIoT) and cloud computing have developed rapidly in recent years. Many enterprises are willing to outsource lightweight devices’ industrial data via the cloud to lower manufacturing costs and enhance production efficiency. The data sharers, however, usually have concerns about the security and privacy of their data stored in cloud outsourcing systems. Traditional certificateless searchable encryption primitives are tough to realize dynamically revocable and high-efficiency decryption. Furthermore, data sharing on untrusted devices may cause a single-key exposure problem. To address these issues, we propose a blockchain-assisted secure data-sharing protocol with a dynamic multiuser keyword search (DMUKS) in IIoT, which utilizes blockchain-assisted techniques to solve a single-key exposure problem and to realize fast certificateless keyword search as well as dynamic user and key management. The proposed DMUKS scheme enjoys minor computation and communication overheads. It maintains a constant ciphertext and trapdoor query size as users increase and supports user addition and revocation. Moreover, it periodically supports key and ciphertext updating and is secure against keyword-guessing attacks under the random oracle model. The performance comparison and analysis demonstrate that it is more efficient and flexible than the existing data sharing with keyword search schemes.

Kun Hao, Junchang Xin, Zhiqiong Wang, Zhongming Yao · 5 authors

Interoperable Blockchain Database (IBD) can enable users to execute transactions for sharing data stored in various blockchains maintained by different organizations or communities in a transparent manner. However, compared to traditional distributed databases, IBD can hardly provide high-level security and scalability, which are caused by many factors, such as system architecture, consensus protocol, and interactive pattern. Among them, the consensus protocol is the most critical factor, since the credibility of consensus nodes inside the corresponding blockchains are difficult to be guaranteed. Additionally, the consensus protocol directly affects the verification efficiency for given transactions in IBD. In this paper, we formally concern the problem of secure data sharing in IBD. We present a scheme namedHybridchainto execute transactions for sharing data securely and efficiently. We first propose a novel concept namedInteroperable Consensus Group(ICG) which organizes a set of basic consensus nodes into a group, each of which is responsible for managing at least one local blockchain. Then, we present an interoperable cross-chains consensus protocol to achieve eventual consistency of blockchain transactions. We conduct extensive experiments, and the evaluation results show that our proposed approach achieves superior performance.

Zhaolong Jian, Ye Lu, Youyang Qiao, Yaozheng Fang · 8 authors

TrustZone as a trusted execution environment (TEE) has been proven to preserve the confidentiality of blockchain transactions supported by smart contracts. Despite some academic effort, TrustZone can only support limited languages for now. The lack of the corresponding execution environment for smart contracts seriously hinders blockchain applications from directly running on TrustZone. In this paper, we design the first virtual execution environment named TSC-VEE for performing Solidity smart contracts on TrustZone, to the best of our knowledge. TSC-VEE can be decomposed into fourfold: (1) an instruction set adapted to the isolation and world switching mechanism of TrustZone. (2) a runtime memory management mechanism that provides a pair of instructions with the corresponding processing mechanism to allocate and release the work memory. (3) a hybrid granularity resource analysis algorithm which computes and records the value of maximum stack height and static gas cost through bytecode pre-execution, avoiding runtime overflow and invalid computations. (4) a cross-isolation-environment prefetching approach that supports loading and storing the storage data from the normal world into the secure world on TrustZone before execution, thus avoiding switching the world state frequently at runtime. Extensive experimental results show that TSC-VEE can perform smart contracts correctly and efficiently on TrustZone. Compared with the most commonly used Ethereum client—Geth, TSC-VEE achieves execution performance improvements by$9.29\times$. We also implement the Ethereum virtual machine—evmoneon TrustZone. TSC-VEE can reduce the latency by 12.63% with our optimization techniques, and decrease the work memory footprint by 22.95% on average when executing various scale contracts.

Yi Li, Meiqin Tang

• A distributed data integrity verification method without third-party auditor is proposed. Based on the constructed hashTable, each hospital server can audit the data in a distributed manner. • A blockchain-based auditing scheme is designed for cloud-edge healthcare system, which includes the consensus protocol Proof of Auditing Frequency (PoAF) and related block structures. • The proposed scheme is evaluated against two start-of-the-art schemes in a simulated cloud-edge healthcare system and comprehensively evaluated. Cloud-edge healthcare system provides storage and computing functions at the hospital servers, bringing low latency for doctors and patients. However, hospital servers cannot be trusted and have limited computing resources. Data integrity verification for the cloud-edge healthcare system is an urgent concern. To this end, we proposed a data integrity auditing scheme based on blockchain. First, a distributed data integrity verification method without a third-party auditor is designed. The data are divided into smaller parts and hashed into a hash table. The verification tag is constructed according to the column of the hash table and secret string generated by a pseudo-random function. Then, a detailed blockchain-based data integrity auditing scheme is proposed, including Proof of Auditing Frequency and block structure. Besides, a security analysis for the common attacks is given. Finally, the proposed scheme is evaluated against two start-of-the-art schemes in a simulated cloud-edge healthcare system. The results demonstrate that the proposed scheme can verify data integrity without losing efficiency.

Akshatha N Kudtharkar, Neha S Bidarkundi, P Geethika, Laxmi Kamoji · 6 authors

Accessing clo!ud resources requires critical security controls as there will be tracking of all the access attempts made by the users to access the resources from the system both legitimate as well as illegal. Traditional cloud-based systems are centralized and dependent on a single third party. This results in single-point failure and lacks data access control and privacy. Blockchain facilitates decentralized data management. Blockchain specifically allows construction of access control methods by using smart contract. To provide reliable and secure access control, we propose a decentralized system whose access is based on the attributes of the user with the help of a smart contract. Attribute-based access control allows subject and object attributes to be included in authorization decisions. Policies for each user are defined. The user’s attributes have to match with the policies in order to access the resources. It also authenticates end users requesting access to cloud resources. The performance evaluation of the proposed access control mechanism is carried out using Ethereum blockchain platform in terms of transaction latency, gas consumption and false positive rate.

M. A. Poltavtseva, E. B. Aleksandrova, Vadim S. Shmatov, P. D. Zegzhda

No abstract is available for this record.

Petar Radanliev

<p>The first cryptocurrency was invested in 2008/09, but the Blockchain-Web3 concept is still in its infancy, and the cyber risk is constantly changing. Our cybersecurity should also be adapting to these changes to ensure security of personal data and continuation of business for organisations. This review paper starts with a comparison of existing cybersecurity standards and regulations from the National Institute of Standards and Technology (NIST) and the International Organization for Standardization (ISO) - ISO27001, followed by a discussion on more specific and recent standards and regulations, such as the Markets in Crypto-Assets Regulation (MiCA), Committee on Payments and Market Infrastructures and the International Organisation of Securities Commissions (CPMI-IOSCO), and more general cryptography and post-quantum cryptography, in the context of cybersecurity. These topics are followed up by a review of recent technical reports on cyber risk/security and a discussion on cloud security questions. Comparison of Blockchain cyber risk is also performed on the recent EU standards on cyber security, including European Cybersecurity Certification Scheme (EUCS) – cloud, and additional US standards – The National Vulnerability Database (NVD) Common Vulnerability Scoring System (CVSS). The study includes a review of Blockchain endpoint security, and new technologies e.g., IoT. The research methodology applied is a review and case study analysing secondary data on cybersecurity. The research significance is the integration of knowledge from the United States (US), the European Union (EU), the United Kingdom (UK), and international standards and frameworks on cybersecurity that can be alighted to new Blockchain projects. The results show that cybersecurity standards are not designed in close cooperation between the two major western blocks - US and EU. In addition, while the US is still leading in this area, the security standards for cryptocurrencies, internet-of-things, and blockchain technologies have not evolved as fast as the technologies have. The key finding from this study is that although the crypto market has grown into a multi-trillion industry, the crypto market has also lost over 70% since its peak, causing significant financial loss for individuals and cooperation’s. Despite this significant impact to individuals and society, cybersecurity standards and financial governance regulations are still in their infancy.</p>

Udit Mishra, Rajni Gupta, Juhi Gupta

No abstract is available for this record.

Ruiqi Jin

Ring Confidential Transactions (RingCT) is a protocol associated with the privacy-focused cryptocurrency Monero and is used to hide the transaction amount from the third party while still providing the confidentiality of the hide transaction. With the Pederson commitment scheme, ring signature, and other cryptographic constructions, RingCT plays a major role in making the transactions of Monero private. As a privacy coin, Monero has the unique property of fungibility in the cryptocurrency market from the protocols implemented. These protocols provided opportunities and challenges for its future. In this paper, the version of the protocol implemented in Monero is first inspected, including the commitment to zero and the range proof. Then, two critical cryptographic constructions used by RingCT 2.0, the accumulator and the signature of knowledge, are introduced. Finally, the influence of RingCT and other privacy features and the current situation of privacy coin is discussed.

Mengyao Li

Ethereum digital signatures have been found to make progress, but there has yet to be a consensus regarding their significance and process. Using digital signatures in Ethereum ensures the security of users' money and the Safety of their transportation. Elliptic Curve Digital Signature Algorithm (ECDSA), private key, and public key play an important role here. This paper analyzes the details of Ethereum's Digital Signature based on existing information. First, it explained the general background information about Ethereum. Send explain the ERC-20. ERC-20 are digital assets that represent value. They could become more compatible with the new standard and allow other features. Then digital signatures are explained in detail. This part included ECDSA, private key, and public key. ECDSA is the most critical algorithm during the production process. Private and public keys are the key features to ensure Safety. The last part is the Keystore file system. Using the Keystore file system, users can secure their private keys for their cryptocurrency wallets. To access their account, the user must have a password generated by them. The unencrypted files, on the other hand, create a vulnerability in the key store, which is exposed by these unencrypted files. Once an attacker obtains the user's unencrypted key, he cannot only take control of the account but also sign transactions on behalf of the user.

Shipra Ravi Kumar, Mukta Goyal

No abstract is available for this record.

Changjin Zhang

Blockchain is a decentralized, shared ledger that aggregates blocks of data in a factual data structure in chronological order using a chain structure. Two hundred sixty thousand tokens, or 98% of the around 2.5 million smart contracts in Ethereum network, are ERC-20 tokens. The ERC20 standard specifies constructors for token contracts that establish and initialize the contract state. The Ethereum wallet and Ethereum decentralized, centralized applications can access tokens through these standard interfaces. Security vulnerabilities in ERC-20 have drawn a lot of attention lately in recent years. This paper summarizes some basic security vulnerabilities and suggests avoiding multiple withdrawal attacks. Tokens can be used to support dApps, access blockchain services, trade, and obtain voting rights. Various tokens exist depending on their properties and use cases, including governance, utility, security, transaction, and platform tokens. Tokens can be sorted as fungible tokens and non-fungible tokens. Tokens that can be fungible are identical, divisible, and can be instead of money. Non-fungible tokens have a single owner and are unique.

Edoardo Marangone, Claudio Di Ciccio, Daniele Friolo, Eugenio Nerio Nemmi · 6 authors

Multi-party business processes rely on the collaboration of various players in a decentralized setting. Blockchain technology can facilitate the automation of these processes, even in cases where trust among participants is limited. Transactions are stored in a ledger, a replica of which is retained by every node of the blockchain network. The operations saved thereby are thus publicly accessible. While this enhances transparency, reliability, and persistence, it hinders the utilization of public blockchains for process automation as it violates typical confidentiality requirements in corporate settings. In this paper, we propose MARTSIA: A Multi-Authority Approach to Transaction Systems for Interoperating Applications. MARTSIA enables precise control over process data at the level of message parts. Based on Multi-Authority Attribute-Based Encryption (MA-ABE), MARTSIA realizes a number of desirable properties, including confidentiality, transparency, and auditability. We implemented our approach in proof-of-concept prototypes, with which we conduct a case study in the area of supply chain management. Also, we show the integration of MARTSIA with a state-of-the-art blockchain-based process execution engine to secure the data flow.

Qizhi Zhang, Yale He, Ruilin Lai, Zhihao Hou · 5 authors

No abstract is available for this record.

Abigail Akosua Addobea, Qianmu Li, Isaac Amankona Obiri, Jun Hou

No abstract is available for this record.

Authors unavailable

Everything is digitalized in the digital age, including the SSLC, HSC, and academic certificates, which are sent to students and digitalized at educational establishments. Students have difficulty maintaining their degree credentials. Organizations and institutions find it difficult and time-consuming to verify certificates. By storing the certificate in the Blockchain system, our proposal will aid in its security. Advanced certificates are first made from the paper certificates. The certificate's hash code esteem is made utilizing the turbulent calculation. From that point onward, the confirmations are saved in Blockchain. Moreover, these certificates are confirmed through the versatile application.

Amaal Zakzouk, Ayman El‐Sayed, Ezz El‐Din Hemdan

No abstract is available for this record.

N. Sangeeta, Seung Yeob Nam

Closed-circuit television (CCTV) cameras and black boxes are indispensable for road safety and accident management. Visible highway surveillance cameras can promote safe driving habits while discouraging moving violations. According to CCTV laws, footage captured by roadside cameras must be securely stored, and authorized persons can access it. Footages collected by CCTV and Blackbox are usually saved to the camera’s microSD card, the cloud, or hard drives locally but there are concerns about security and data integrity. These issues may be addressed by blockchain technology. The cost of storing data on the blockchain, on the other hand, is prohibitively expensive. We can have decentralized and cost-effective storage with the interplanetary file system (IPFS) project. It is a file-sharing protocol that stores and distributes data in a distributed file system. We propose a decentralized IPFS and blockchain-based application for distributed file storage. It is possible to upload various types of files into our decentralized application (DApp), and hashes of the uploaded files are permanently saved on the Ethereum blockchain with the help of smart contracts. Because it cannot be removed, it is immutable. By clicking on the file description, we can also view the file. DApp also includes a keyword search feature to assist us in quickly locating sensitive information. We used Ethers.js’ smart contract event listener and contract.queryFilter to filter and read data from the blockchain. The smart contract events are then written to a text file for our DApp’s keyword search functionality. Our experiment demonstrates that our DApp is resilient to system failure while preserving the transparency and integrity of data due to the immutability of blockchain.