Blockchain Papers

Follow blockchain research across journals, conferences, and preprint repositories.

1,374 papersLast indexed Aug 31, 2026
Search papers

Paper index

1,374 results · page 7 of 58

Clear filters
Jan 1, 2025·AHFE international
0 cites
Certificates and the security of digital health information

Christoph Jungbauer, Christian Luidold

The digitization of healthcare information has expanded access to medical data while raising concerns about its security, authenticity, and trustworthiness. This paper explores the role of digital certificates in addressing these challenges, focusing on their potential to verify the credibility of health information and protect sensitive data. It begins with a theoretical overview, emphasizing the importance of certificates in ensuring data authenticity and integrity, particularly in compliance with regulations such as the GDPR.The analysis examines current certificate models like HONcode and PIF TICK, highlighting their limitations in public awareness and practical application. Innovative technologies such as blockchain and zero-knowledge proofs are identified as promising tools for enhancing the security and traceability of health information. Blockchain’s immutability and decentralized verification capabilities, combined with patient-controlled data access via smart contracts, underscore its potential in fostering trust and compliance with privacy standards.The paper outlines essential certification requirements, including technical efficiency through machine learning, content accuracy based on scientific validation, and process transparency. Furthermore, user-centric approaches are emphasized to enhance certificate accessibility and public trust. The study also examines parallels in other industries, such as food and finance, which employ rigorous certification systems for safety and reliability.Ultimately, this research advocates for a hybrid certification model combining automated and expert-driven processes. By leveraging modern technologies and interdisciplinary practices, such a model can address the dual goals of ensuring high-quality health information and fostering user trust in the digital healthcare landscape.

Privacy, Security, and Data Protection
Law, AI, and Intellectual Property
Original source
Jan 1, 2025·Zenodo (CERN European Organization for Nuclear Research)
0 cites
The Digital Social Contract: Protecting Identity in the Age of AI

David (Daoud) Matta

Digital identity has become one of the most pressing governance challenges of the 21st century. This paper argues that digital identity is not optional but inevitable, driven by four converging forces: privacy leakage, AI synthesis, corporate capture, and geopolitical vulnerability. Drawing on political philosophy (Rousseau, Rawls, Foucault, Habermas), comparative case analysis (Estonia, India, China), and emerging technical frameworks (zero-knowledge proofs, decentralized identity), the paper analyzes the opportunities and perils of digital ID systems. It proposes a Digital Social Contract as the normative and institutional framework for governing them. The paper concludes that the decisive question is not whether digital IDs will exist, but how they will be governed — and that only a robust Digital Social Contract, grounded in democratic legitimacy, institutional accountability, and adaptive governance, can ensure that digital identity serves citizens rather than controls them.

Open access
2 source records
Cybersecurity and Cyber Warfare Studies
Security, Politics, and Digital Transformation
Privacy, Security, and Data Protection
Original source
Jan 1, 2025·IEEE Access
8 cites
IOTA-Assisted Self-Sovereign Identity Framework for Decentralized Authentication and Secure Data Sharing

Assiya Akli, Khalid Chougdali

The Internet of Things (IoT) demands robust mechanisms for secure communication and trust establishment among connected devices. Traditional Public Key Infrastructure (PKI) solutions face limitations in scalability, centralization and single points of failure. These limitations hinder their effectiveness in dynamic IoT environments. To address these challenges, this paper introduces a new decentralized authentication protocol for secure identity management and data exchange in IoT, called ISIF (IOTA-Assisted Self-Sovereign Identity Framework). This framework is based on Self-Sovereign Identity (SSI) principles and leverages Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) to enable mutual authentication without relying on centralized authorities. DIDs ensure decentralized identity management and VCs provide verifiable context-specific claims. This dual-layer approach enables robust and attribute-based authentication, which reduces the risk of unauthorized access and improving interoperability in decentralized IoT environments. ISIF employs the IOTA Tangle as a distributed ledger to manage and verify DIDs and VCs. This offers a decentralized, immutable record that supports efficient and tamper-resistant identity management. ISIF ensures that all interactions within the IoT network are securely authenticated and resilient to tampering. The experimental results show that the framework maintains efficient DID generation and VC issuance times even as network size scales, overcoming the bottlenecks inherent in PKI-based systems. Experimental results demonstrate that ISIF maintains efficient DID generation and VC issuance, even as network size scales. Experimental results show that DID generation time increases from 1.85 ms (for 50 nodes) to 10.81 ms (for 250 nodes), while VC issuance time ranges from 2.66 ms to 13.21 ms. Similarly, VC verification time increases from 3.54 ms to 22.27 ms as the network scales. Despite these increases, the overall end-to-end (E2E) delay remains low (0.16–0.33 ms), ensuring efficient real-time authentication. These findings confirm ISIF’s feasibility for large-scale IoT authentication without performance degradation. Furthermore, the IOTA Tangle’s performance in handling varied payload sizes affirms its suitability for managing block generation and retrieval in IoT, ensuring practical processing times that uphold security and decentralization.

Open access
Privacy-Preserving Technologies in Data
Advanced Authentication Protocols Security
Privacy, Security, and Data Protection
Original source
Jan 1, 2025·IEEE Transactions on Information Forensics and Security
1 cites
Trust in a Decentralized World: Data Governance From Faithful, Private, Verifiable, and Traceable Data Feeds

Meng Li, Yifei Chen, Yan Qiao, Guixin Ye · 7 authors

Blockchain technology autonomously executes smart contracts that require external data to facilitate specific applications, underscoring the necessity for Authenticated Data Feeds (ADF). Existing solutions fall short in providing genuine authentication of data, lack private and verifiable computations across multiple data sources, and overlook data traceability, rendering current systems inadequate for complex applications. We present WuKong (WK), a data governance system that offers authenticated, privately verifiable, and traceable data feeds. WK enables a server to collect faithful data through an oracle committee and to prove computation correctness in zero-knowledge proofs, and empowers legal entities to trace a leakage source conditionally. We formally define and prove the security of WK in the universal composability framework. We implement three applications that seamlessly integrate with WK. Experimental results indicate that WK effectively liberates sensitive data from distributed, untrusted, and anonymous providers, making it accessible to various services and establishing trust in a decentralized world.

Privacy-Preserving Technologies in Data
Privacy, Security, and Data Protection
Access Control and Trust
Original source
Jan 1, 2025·IEEE Transactions on Information Forensics and Security
6 cites
Bring Your Device Group (BYDG): Efficient and Privacy-Preserving User-Device Authentication Protocol in Multi-Access Edge Computing

Yan Zhang, Chunsheng Gu, Peizhong Shi, Zhengjun Jing · 6 authors

Authentication is an important security issue for multi-access edge computing (MEC). To restrict user access from untrusted devices, Bring Your Own Device (BYOD) policy has been proposed to authenticate users and devices simultaneously. However, when integrating BYOD policy into MEC authentication to improve security, issues of efficient binding and user-device conditional anonymity have not been well supported. To address these issues, we propose Bring Your Device Group (BYDG) policy by constructing efficient and privacy-preserving user-device authentication. Our core idea is to use key sequences generated by PUFs-based key derivation functions (KDFs) to not only construct efficient binding relationships, but also achieve conditional anonymity for device groups. Specifically, a flexible and secure binding method is first developed by leveraging Chinese Remainder Theorem (CRT) to bind user with device groups. Each device’s CRT modulus is derived from the key sequence to construct many-to-many user-device binding relationships, which are managed in the form of on-chain Pedersen Commitment. Moreover, we design an identity anonymizing and tracing method for device groups. The key sequence is regarded as traceable device pseudo-identities, and then inserted into the cuckoo filter to reduce the on-chain storage overhead and mitigate malicious login attempts with low costs. Based on above two methods, the combination of Pedersen Commitment and Zero-Knowledge Proof of Knowledge is used to achieve user-device authentication with conditional anonymity. The security analysis was presented to demonstrate important security properties. A proof-of-concept prototype was implemented to conduct performance evaluation and comparative analysis.

Privacy, Security, and Data Protection
User Authentication and Security Systems
Access Control and Trust
Original source
Jan 1, 2025·International Journal of Research Publication and Reviews
4 cites
Future of Security in FinTech: Balancing User Privacy, Compliance, and Technological Advancements

Olanrewaju Olukoya Odumuwagun

The future of security in Financial Technology (FinTech) hinges on achieving a delicate balance between safeguarding user privacy, ensuring regulatory compliance, and embracing technological advancements.As FinTech continues to disrupt traditional financial systems with innovative solutions, the industry faces increasing challenges from sophisticated cyber threats, evolving privacy concerns, and stringent regulatory frameworks.This article examines the critical interplay between these elements and explores strategies for building resilient, secure, and future-ready FinTech ecosystems.The discussion begins with an analysis of current trends in FinTech security, highlighting vulnerabilities associated with digital payment systems, decentralized finance (DeFi), and third-party integrations.Advanced technologies such as artificial intelligence (AI), blockchain, and quantum cryptography are presented as transformative tools for enhancing security, with applications in fraud detection, secure transactions, and real-time threat mitigation.The importance of adopting privacy-first principles, including data minimization and encryption, is underscored as essential for building user trust.The article also delves into the complexities of complying with global regulatory standards, such as GDPR, CCPA, and PSD2, emphasizing the need for adaptive compliance strategies to accommodate rapidly evolving technologies.By analysing case studies and best practices, it provides actionable insights for FinTech firms and policymakers to address challenges while fostering innovation.Ultimately, this work envisions a future where FinTech security frameworks not only protect users but also promote transparency, inclusivity, and growth.The convergence of technology, regulation, and ethical practices will shape a secure, privacy-respecting FinTech landscape that drives global financial inclusion and trust.

Open access
FinTech, Crowdfunding, Digital Finance
Privacy, Security, and Data Protection
Blockchain Technology Applications and Security
Original source
Jan 1, 2025·Proceedings of the VLDB Endowment
1 cites
FairDAG: Consensus Fairness over Multi-Proposer Causal Design

Dakai Kang, Junchao Chen, Tien Tuan Anh Dinh, Mohammad Sadoghi

The rise of cryptocurrencies like Bitcoin and Ethereum has driven interest in blockchain database technology, with smart contracts enabling the growth of decentralized finance (DeFi). However, research has shown that adversaries exploit transaction ordering to extract profits through attacks like front-running, sandwich attacks, and liquidation manipulation. This issue affects blockchains where block proposers have full control over transaction ordering. To address this, a more fair transaction ordering mechanism is essential. Existing fairness protocols, such as Pompe and Themis, operate on leader-based consensus protocols, which not only suffer from low throughput caused by the single-leader bottleneck, but also allow adversarial block proposers to manipulate transaction ordering. To address these limitations, we propose a new framework, FairDAG, that runs fairness protocols on top of DAG-based consensus protocols. FairDAG improves protocol performance in both throughput and fairness quality by leveraging the multi-proposer design and validity property of DAG-based consensus protocols. We conducted a comprehensive analytical and experimental evaluation of two FairDAG variants - FairDAG-AB and FairDAG-RL. Our results demonstrate that FairDAG outperforms prior fairness protocols in both throughput and fairness quality.

Open access
4 source records
cs.DB
cs.CR
Blockchain Technology Applications and Security
Original source
Jan 1, 2025·Journal of Cybersecurity
43 cites
Reconciling blockchain technology and data protection laws: regulatory challenges, technical solutions, and practical pathways

Ammar Zafar

Abstract This paper thoroughly explores the complex interplay between blockchain technology and the General Data Protection Regulation (GDPR) of the European Union, alongside the substantial challenges and potential opportunities stemming from their interaction. While the challenges of decentralization and immutability in blockchain are well-documented, this paper advances the discussion by incorporating legal developments, such as evolving interpretations of joint controllership and new advisory opinions. It also evaluates emerging use cases, including blockchain integration in digital currencies like Worldcoin, highlighting contemporary compliance challenges and innovative solutions. By proposing actionable frameworks that leverage technological advancements like chameleon hashes and zero-knowledge proofs, this paper provides a forward-looking analysis of how blockchain systems can align with GDPR principles, offering theoretical insights and practical pathways for compliance. The conclusion underscores the urgent need for clear regulatory frameworks. These frameworks are crucial to enable a balanced approach that fosters innovation while ensuring robust data protection compliance, and their absence could hinder the potential impact of the research.

Open access
Blockchain Technology Applications and Security
Privacy, Security, and Data Protection
Ethics and Social Impacts of AI
Original source
Jan 1, 2025·Internet of Things and Cyber-Physical Systems
1 cites
UMetaBE-DPPML: Urban metaverse & blockchain-enabled decentralised privacy-preserving machine learning verification and authentication with metaverse immersive devices

Kaya Kuru, Kaya Kuru, Kaan Kuru, Kaan Kuru

It is anticipated that cybercrime activities will be widespread in the urban metaverse ecosystem due to its high economic value with new types of assets and its immersive nature with a variety of experiences. Ensuring reliable urban metaverse cyberspaces requires addressing two critical challenges, namely, cybersecurity and privacy protection. This study, by analysing potential cyberthreats in the urban metaverse cyberspaces, proposes a blockchain-based Decentralised Privacy-Preserving Machine Learning (DPPML) authentication and verification methodology, which uses the metaverse immersive devices and can be instrumented effectively against identity impersonation and theft of credentials, identity, or avatars. Blockchain technology and Federated Learning (FL) are merged in the developed DPPML approach not only to eliminate the requirement of a trusted third party for the verification of the authenticity of transactions and immersive actions, but also, to avoid Single Point of Failure (SPoF) and Generative Adversarial Networks (GAN) attacks by detecting malicious nodes. The developed methodology has been tested using Motion Capture Suits (MoCaps) in a co-simulation environment with the Proof-of-Work (PoW) consensus mechanism. The preliminary results suggest that the built techniques in the DPPML approach can prevent unreal transactions, impersonation, identity theft, and theft of credentials or avatars promptly before any transactions have been executed or immersive experiences have been shared with others. The proposed system will be tested with a larger number of nodes involving the Proof-of-Stake (PoS) consensus mechanism using several other metaverse immersive devices as a future job.

Open access
Privacy-Preserving Technologies in Data
Blockchain Technology Applications and Security
Privacy, Security, and Data Protection
Original source
Jan 1, 2025·arXiv (Cornell University)
0 cites
Hello, won't you tell me your name?: Investigating Anonymity Abuse in IPFS

Christos Karapapas, Iakovos Pittaras, George C. Polyzos, Constantinos Patsakis

The InterPlanetary File System~(IPFS) offers a decentralized approach to file storage and sharing, promising resilience and efficiency while also realizing the Web3 paradigm. Simultaneously, the offered anonymity raises significant questions about potential misuse. In this study, we explore methods that malicious actors can exploit IPFS to upload and disseminate harmful content while remaining anonymous. We evaluate the role of pinning services and public gateways, identifying their capabilities and limitations in maintaining content availability. Using scripts, we systematically test the behavior of these services by uploading malicious files. Our analysis reveals that pinning services and public gateways lack mechanisms to assess or restrict the propagation of malicious content.

Open access
3 source records
Digital and Cyber Forensics
Security and Verification in Computing
Advanced Data Storage Technologies
Original source
Jan 1, 2025·International Journal of Advanced engineering Management and Science
30 cites
Enhancing Data Security and Transparency: The Role of Blockchain in Decentralized Systems

Saad Ahmed

Blockchain technology has become a game-changer in strengthening data security and transparency within decentralized systems. This study examines its role in tackling major challenges related to data integrity, access control, and auditability, with a focus on industries like finance, decentralized finance (DeFi), and supply chain management. Using data analysis, case studies, and expert opinions, the research highlights how blockchain provides a secure, transparent, and efficient framework for digital transactions. The findings reveal that blockchain enhances security by eliminating weaknesses found in traditional centralized systems. With features like immutable record-keeping, cryptographic encryption, and decentralized control, blockchain ensures transactions remain secure, tamper-proof, and resilient against fraud and cyber threats. Additionally, its ability to maintain a shared, verifiable ledger fosters transparency and builds trust among stakeholders. Smart contracts further improve efficiency by automating processes and ensuring compliance with predefined rules. However, despite its many benefits, blockchain adoption faces hurdles such as scalability challenges, regulatory uncertainties, and integration difficulties. To overcome these barriers, the study suggests developing clear regulatory guidelines, implementing advanced scalability solutions, increasing awareness and technical training, promoting cross-industry collaboration, and adopting hybrid blockchain models that balance security with privacy. In conclusion, this research emphasizes blockchain’s potential to reshape data security and transparency across various sectors. By addressing existing challenges, blockchain can drive innovation, streamline operations, and enhance trust in digital ecosystems.

Open access
Blockchain Technology Applications and Security
Privacy, Security, and Data Protection
Privacy-Preserving Technologies in Data
Original source