Chao Zhang, Zhong Weidong, Wang Xu An, Su Yang · 5 authors
No abstract is available for this record.
Follow blockchain research across journals, conferences, and preprint repositories.
3,460 results · page 8 of 145
Chao Zhang, Zhong Weidong, Wang Xu An, Su Yang · 5 authors
No abstract is available for this record.
Tang Zhou, Le Wang, Minxian Liang, Minhao Li
Cloud storage uses proofs of ownership to avoid redundant uploads while keeping file contents secret. Many existing schemes need extra round trips, or rely on predictable sampling. These choices reduce security when an adversary knows part of the file. We present MiS-PoW, a zero knowledge and non-interactive proof of ownership. The protocol derives a synchronized challenge seed from the existing HTTPS/TLS session. The seed binds a discretized time window and the file identifier. Both parties compute the same challenges locally, and the protocol adds no new messages. MiS-PoW samples blocks with a stratified policy without duplicates. The policy enforces coverage across partitions and reduces the advantage of contiguous knowledge and near duplicate files. The proof layer uses STARKs with simple AIR constraints. The constraints check that indices come from the seed, lie in range, are unique, and meet per partition counts. We analyze security and show seed unpredictability, resistance to replay, and bounds under partial knowledge with limited grinding. A prototype shows that verification time does not grow with file size, and proof and bandwidth costs remain modest. MiS-PoW is deployable, privacy preserving, and scalable for cloud storage.
Darshan S, Vasanthakumar S
This student propose a new methodology for academic credential verification. The system focuses on tamper resistance, transparency, and scalability-key factor for building trust among institution, employers and student Developed on block chain technology, the system creates an immutable record that can be used in order to store academic credentials that are safe to prevent any third-party modifications to ensure that their alteration is prevented to a significant extent and the fear of fraud is reduced in the system. It integrates the Interplanetary File System (IPFS) that can be used to store data in a decentralized to guarantee fast access to documents and safe guard against tampering. Biometric hashing offers individual-specific users, which increases security and prevents Fraud, and zero-knowledge proofs (zkSNARKs) prove the credentials without expressing crucial confidential data, hence strikes the equilibrium between privacy and verification. Future AI algorithms could also optimize the detection of Fraud by detecting patterns and anomalies that further enhance security and user trust. The system is set in such a way that it is flexible to integrate with the existing block chain networks with significant contributions being seen in increased accuracy in verifications, security integrity, identity confirmation and reduced fraudulent activities. Such a system is essential ultimately to establish trust and credibility in academic credentials across borders thus strengthening the credibility of educational degree.
Harsha Vardhan, Prab Hiranayachatri, Atharva Lele, Hitesh Tewari
Public Key Infrastructure (PKI) is foundational to secure digital communication, yet its traditional reliance on centralized Certificate Authorities (CAs) introduces significant risks, costs, and operational bottlenecks. This paper presents a novel, fully decentralized approach to PKI by leveraging the XRP Ledger (XRPL) blockchain for the issuance, storage, retrieval, and revocation of X. 509 certificates. The core methodology stores certificates directly within XRPL transactions using the native Memos field, offering a lightweight, immutable, and cost-effective solution without requiring modifications to the underlying protocol. To enhance certificate lifecycle management and enable native on-chain revocation, we also introduce a complementary approach that uses Non-Fungible Tokens (NFTs) to store certificate data and metadata. NFT-based storage supports features such as instant revocation through burning or flagging, and enables additional transparency and auditability. Certificate retrieval involves querying transaction history or owned NFTs, decoding and reassembling the data if chunked, and validating the reconstructed X. 509 certificate using standard tools. We implement a Python-based web application that exposes RESTful APIs for certificate lifecycle management, secure messaging, and encrypted email, demonstrating seamless integration with existing PKI-aware applications. Our evaluation shows that this architecture drastically reduces operational costs compared to traditional CAs while enhancing transparency, auditability, and resilience. This work demonstrates the feasibility and advantages of blockchain-native PKI, paving the way for scalable, trustminimized, and user-centric digital identity management.
Korn Dhampiban-udom, Natchanan Koson, Chonnawee Udompongpipat, Somchart Fugkeaw
As cloud adoption grows, Identity and Access Management (IAM) faces increasing complexity due to reliance on centralized systems controlled by Cloud Service Providers (CSPs), raising concerns over data leakage and single points of failure. This paper proposes BZET-IAM, a trust-based Single Sign-On IAM (SSO-IAM) framework built on Consortium Blockchain to support hybrid, multi-application cloud environments across domains. The system integrates Zero Trust Architecture (ZTA), Self-Sovereign Identity (SSI), and Zero-Knowledge Proofs (ZKPs) to enable dynamic, privacy-preserving authentication using verifiable claims. Trust-scores and contextual information are embedded in access tokens to support continuous verification and adaptive access control. Blockchain ensures tamper-proof, auditable authentication and authorization. Experimental results show that the proposed approach achieves lower authentication and privilege update costs under dynamic, context-aware access scenarios.
Esther Uzoka, Bisola Akeju, Olumide Kumuyi, David Excel Ozowara
The Framework for Data Governance and Compliance Across Distributed Multicloud Infrastructures provides a comprehensive model for managing data integrity, privacy, and regulatory alignment in increasingly complex hybrid and multicloud environments. As organizations adopt distributed computing to enhance scalability, resilience, and performance, they face significant challenges in maintaining consistent governance across heterogeneous platforms operated by multiple providers. This framework establishes a unified governance architecture that integrates policy-based orchestration, automated compliance auditing, and federated identity management to ensure data sovereignty, accountability, and interoperability across diverse cloud ecosystems.At its core, the framework emphasizes data classification, lifecycle management, and access control standardization. Sensitive data are categorized by regulatory requirement and security level, while dynamic policies enforce encryption, anonymization, and retention protocols in accordance with frameworks such as GDPR, HIPAA, and ISO 27001. By leveraging federated metadata catalogs and distributed ledgers, the system enables traceable data provenance and immutable audit trails across hybrid environments. A zero-trust security paradigm further ensures that all access requests are continuously verified, regardless of origin, thereby mitigating insider threats and cross-cloud vulnerabilities.The framework also integrates AI-driven compliance monitoring to detect policy violations, automate reporting, and support adaptive governance in real time. Through interoperable APIs and compliance-as-code implementations, organizations can harmonize data policies across public, private, and edge cloud resources while maintaining jurisdictional and contractual adherence.In promoting transparency and resilience, this framework underscores the importance of cross-sector collaboration among regulators, cloud providers, and enterprises. By unifying governance, security, and compliance strategies, it advances a scalable model for secure data management in distributed infrastructuresenabling innovation, regulatory trust, and sustainable digital transformation in the multicloud era.
S K Sharif, C H Saritha, P. Senthil, Madhavi Pingili · 6 authors
Every business operation worldwide adopts cloud storage solutions since cybersecurity now demands mandatory protection for data security together with integrity management while also ensuring data confidentiality. Cloud storage systems that run from one central platform remain exposed to cyberattacks that lead to two risks: system malfunctions and unapproved system access. This research delivers an unalterable data management system through the application of blockchain-based methods to distributed cloud architectures. Through the combination of smart contracts with distributed ledger technology (DLT) and cryptographic hashing capabilities in blockchain technology data protection and data integrity get enhanced in cloud systems. Research teams develop hybrid blockchain systems by combining several systems using external storage methods to solve scalability issues. Through shading technology integration with hybrid blockchain systems and off-chain storage systems fast transaction execution becomes possible. The setup of distributed control centers employing blockchain technology secures data better because it extends traditional systems by creating comprehensive visibility that detects unauthorized access attempts. Researchers have investigated how blockchain-enabled cloud storage applications protect digital data in this study.
Iflah Aijaz, Roohie Naaz Mir
Introduction: Ensuring secure and efficient identity management is crucial in an era where digital identities support numerous online services. Traditional Identity Management Systems (IDMS) face challenges such as data breaches, lack of user autonomy, and centralization risks, necessitating the exploration of decentralized alternatives. The review paper assesses blockchain-based IDMS as a potential solution, examining its benefits, challenges, and the role in improving security and privacy. Methods: This study conducts a systematic literature review of recent advancements in blockchain- based IDMS, drawing from peer-reviewed sources published between 2017 and 2024. The analysis focuses on security mechanisms, integration challenges, technological innovations, and their implications for digital identity management. Results: Blockchain-based IDMS offer many significant advantages, like enhanced security and privacy protection of identity data by the users. However, many challenges remain ahead, including the issue of scalability, interoperability with existing systems, and issues of regulatory acceptance. The advancements in this space are driven forward by recent innovations, such as zero-knowledge proofs and decentralized identifiers. Discussion: The review highlights blockchain’s transformative potential in addressing the flaws of traditional IDMS. While it offers notable improvements in privacy and user autonomy, successful real-world deployment requires overcoming technical and legal hurdles. These include adapting to existing standards and gaining acceptance among regulatory bodies. Conclusion: Blockchain technology has the potential to revolutionize digital identity management by overcoming several traditional IDMS limitations. While promising, further research is needed to overcome integration challenges and ensure regulatory compliance for real-world deployment.
Ruchika Dungarani, Dhruv Patel, Nachiket Patel, Hrutva Doshi · 6 authors
Blockchain has emerged as a promising technology for enabling decentralized, tamper-evident, and auditable data sharing among multiple untrusted parties. However, practical deployments in distributed computing environments face a persistent trade-off between scalability and privacy. Public blockchain networks often expose transactional metadata, compromising confidentiality, while privacy-preserving blockchains—such as those leveraging zero- knowledge proofs (ZKPs)—typically suffer from reduced throughput and increased latency due to the computational overhead of proof generation and verification. Similarly, scalability-enhancing techniques like Layer- 2 rollups, sharding, and state channels often provide minimal privacy guarantees, leaving sensitive metadata vulnerable to inference attacks. This paper proposes a privacy-preserving and scalable blockchain architecture designed specifically for secure data sharing in distributed systems, such as federated cloud platforms, healthcare data networks, IoT ecosystems, and inter-bank settlements. The architecture integrates Layer-2 zero- knowledge rollups with a modular Layer-1 settlement layer (Ethereum or Hyperledger Fabric), decentralized storage (IPFS/Filecoin), and fine-grained access control mechanisms. By batching transactions off-chain, generating succinct ZK proofs for validity, and committing only aggregate proofs and state roots to the base chain, the system achieves both confidentiality and high throughput. The architecture is deployed in a Kubernetes-orchestrated environment, enabling horizontal scaling, automated failover, and comprehensive observability through Prometheus, Grafana, and Jaeger. A prototype implementation demonstrates a throughput improvement of up to$5.8 \times$over baseline privacypreserving blockchains, with latency remaining within acceptable limits for distributed applications. Our evaluation framework compares the proposed design against three baselines— Layer-1 only, Layer-1 + privacy, and Layer- 1 + scalability—and includes metrics such as throughput, latency, cost, privacy efficacy, and fault tolerance. The results indicate that combining privacy-preserving Cryptography with scalable rollup architectures is both feasible and beneficial for real-world distributed systems, offering a compelling pathway toward secure, high-performance blockchain applications.
Showkot Hossain, Wenyi Tang, Changhao Chenli, Haijian Sun · 8 authors
Healthcare data sharing is fundamental for advancing medical research and enhancing patient care, yet it faces significant challenges in privacy, data ownership, and interoperability due to fragmented data silos across institutions and strict regulations (e.g., GDPR, HIPAA). Patients possess distributed records across multiple hospitals, each maintaining autonomous databases. Access to consolidated records by secondary entities mandates explicit patient consent while ensuring strict isolation between multi-tenant datasets, requiring fine-grained access control across organizational boundaries. Existing solutions exhibit critical limitations: blockchain-based databases lack robust fine-grained cryptographic enforcement of dynamic access policies, while TEE-enhanced systems suffer from synchronization overhead and poor scalability in distributed deployments. To bridge these gaps, we propose MtDB, a novel decentralized database architecture addressing secure data sharing in multi-tenant database ecosystems. MtDB employs blockchain for metadata coordination and sharing, IPFS for distributed data addressing, a universal SQL query interface for data access, and Intel SGX for integrity-protected query execution with enforced access control. We provide an open-source implementation demonstrating MtDB’s capabilities for secure, patient-centric healthcare data sharing while preserving ownership and enforcing policies. Experimental results show MtDB achieves 35 milliseconds query latency for indexed queries over 400M multi-tenant medical records while maintaining cryptographic security guarantees, with only 1.2–1.3× performance overhead compared to non-secure baselines.
Zhuo Liu
This paper proposes Atomic Ownership Blockchains (AOB), a novel blockchain architecture designed to address scalability and decentralization challenges in distributed ledger systems. AOB introduces an approach where each atomic object is represented by an independent blockchain, potentially allowing for horizontal scaling and enhanced security. The system stores only ownership transfer records, which may enable parallel transaction processing and improved throughput. By eliminating traditional mining and voting mechanisms, AOB aims to mitigate certain security risks while proposing an implicit consensus mechanism for resolving forks. The AOB architecture could potentially support the digitization of real-world assets and enable decentralized applications involving shared or fractional ownership. This paper presents the theoretical framework of AOB, discussing its potential advantages and outlining areas for future research and empirical validation. Practical implementation and rigorous testing are necessary to fully assess its viability and impact on digital ownership paradigms.
Ηλίας Δρίτσας, Μαρία Τρίγκα, Phivos Mylonas
Privacy-Preserving Record Linkage (PPRL) integrates sensitive datasets from independent parties without exposing personal identifiers. Although secure multi-party computation (SMC) and homomorphic encryption ensure strong privacy, they suffer from high computational costs and poor scalability. Encoding-based methods, such as Bloom filters, are lightweight but face quality issues at scale owing to saturation and blocking inefficiencies. This study proposes a scalable, modular PPRL framework for distributed platforms. It combines Bloom filter encoding, Hamming-based locality-sensitive hashing (LSH), and Dice similarity within a MapReduce pipeline on a Hadoop distributed file system (HDFS). The system supports decentralized end-to-end linkage under semi-honest or covert adversarial models. Experiments on datasets with$100,000-500,000$records show linear scalability,$7.2 \times$speedup over cryptographic baselines, and recall degradation linked to filter saturation. A regression model captures the execution-candidate volume relationship, thereby aiding system tuning. The framework supports high-throughput, regulation-compliant linkages for healthcare, finance, and public sector use.
Alexander Sprogø Banks, Ali Jalooli
Healthcare IoT systems must balance the need for continuous monitoring with strong guarantees of privacy and trust. We present ProofHealth, a zero-knowledge proof–based framework that shifts verification to the edge by generating zk-SNARKs on smartphones. In this design, wearable data is encrypted and accompanied by proofs that ensure only valid submissions are admitted to cloud storage, even on untrusted networks. We implement and evaluate ProofHealth under varying batch sizes, measuring latency, throughput, and proof size. Results show batching significantly improves per-sample efficiency while proof sizes remain constant at sub-kilobyte scale, enabling lightweight communication suitable for constrained devices. This demonstrates the practicality of proof-at-the-edge healthcare monitoring and establishes ProofHealth as a novel approach to secure and privacy-preserving health data collection.
L. Naveenkumar, S H Manjula
No abstract is available for this record.
Xiangyun Tang, Lidu Lou, Rui Peng, Tao Zhang · 9 authors
Vehicle Edge Computing (VEC) has emerged as a crucial element in modern vehicular computing systems, enhancing data processing efficiency between vehicles and nearby infrastructure, reducing latency, and improving the overall performance of intelligent transportation systems. However, VEC faces challenges, such as data inequality and privacy concerns, which may impede accurate data processing and decision-making across various components (e.g., vehicles, traffic signals, and roadside units). Existing studies attempt to address these challenges by relying on centralized servers to process cross-vehicle data. However, this approach introduces vulnerabilities, including single points of failure and potential performance bottlenecks. Moreover, many current methods overlook the need for data verifiability alongside privacy and security, thus complicating the traceability of data sources in vehicular environments. In this paper, we propose a verifiable, privacy-preserving cross-vehicle protocol based on relay chains, utilizing blockchain's distributed ledger technology to facilitate transparent and secure information sharing among vehicle edge nodes. Through tamper-proof bookkeeping and automated smart contracts, the protocol significantly enhances the efficiency and security of VEC. The relay chain functions as the central framework, employing homomorphic encryption and distributed private key technology to enable confidential data sharing and verifiable access to business-critical information across nodes. This solution effectively tackles the pressing challenges of privacy protection, reliability, and data traceability within current VEC systems. To enhance practicality, the protocol adopts a non-iterative and lightweight design, enabling efficient data exchange and low-latency cross-chain interaction in heterogeneous VEC systems. We demonstrate the feasibility and effectiveness of our protocol through extensive experimental data supported by theoretical analysis. The results show that the proposed protocol achieves competitive performance in computation cost, encryption latency, and cross-chain throughput, especially under increasing key sizes and node densities, confirming its efficiency and scalability in real-world vehicular deployments.
Jingchao Zheng, Ang Gao, Shuguang Li
Traditional information system auditing faces severe challenges in data integrity verification and audit transparency. Manual sampling methods are not only inefficient but also vulnerable to data tampering attacks. This paper proposes a blockchain-based auditing framework that integrates SHA-256 hash chains, ECDSA digital signatures, and zero-knowledge proofs to establish a cryptographically secure and tamper-proof auditing environment. The framework employs a three-layer architecture: the data integrity layer uses hash chains to ensure audit records are immutable; the authentication layer uses digital signatures to verify the non-repudiation of evidence; and the privacy layer implements zero-knowledge proofs to protect sensitive data. To verify the framework’s effectiveness, a comprehensive experiment was conducted on a private Ethereum network with five verification nodes, processing 10,000 to 100,000 audit records. The experimental results show a significant performance improvement. Efficiency is improved by $65 \%$, data processing throughput reaches 500 records/second with a response latency of less than 2 seconds, and the average time for hash calculation and digital signature verification is 0.8 milliseconds and 1.2 milliseconds, respectively. Data integrity verification efficiency is improved by $78 \%$ compared with traditional methods, and reliability reaches $99.99 \%$. Comparative experiments show that compared with traditional database-centric auditing systems, the proposed system improves processing throughput by $178 \%$, and reduces manual reconciliation time from 2.5 hours to near real-time. This solution provides a practical, efficient and scalable method for auditing next-generation information systems in enterprise environments.
RUI PEDRO FERREIRA MENDONÇA
The growing digitalization of sectors such as education, healthcare, and public administration has driven Device-as-a-Service (DaaS) models. In the Portuguese educational context, the "Escola Digital" program is a clear example of this transformation, scaling the distribution and remote management of devices. With the massification of computer systems, risks of theft, misuse, and unauthorized configurations arise, exacerbated by profiles with low digital literacy (e.g., primary school students). Therefore, an agile and secure mechanism is needed to prevent or mitigate these issues before the operating system boots. Despite several proposals in the literature for device management and protection, existing solutions typically operate after boot, leaving a window open for attackers to exploit. This dissertation addresses this gap by introducing a UEFI module capable of querying and validating (cryptographically) the device’s state on a blockchain infrastructure before boot, reducing the attack surface and simplifying operational response. This dissertation investigates the feasibility of integrating a component into the UEFI firmware capable of communicating with a blockchain infrastructure to enhance device security and control during pre-boot. Specifically: (i) design a module that interacts with the blockchain before the operating system boots; and (ii) explore cryptographic mechanisms to verify the authenticity and integrity of received information.A UEFI module (EDK II) that queries the blockchain to obtain device status and enforce pre-boot lock/unlock policies is proposed and prototyped. The solution utilizes lightweight cryptographic mechanisms (authentication and anti-replay) and a key management and temporal lease scheme. The evaluation considers the impact on boot time, network latency, and on-chain cost. The results demonstrate technical feasibility, with modest boot overhead and reliable enforcement of control policies before the operating system boots.
Ruiteng Zhang, Pingbin Luo, Qiong Huang
No abstract is available for this record.
Soufiane Ben Othman, Gyanendra Kumar
The Internet of Medical Things (IoMT) transforms healthcare by enabling real-time monitoring of patient vitals, such as heart rate and glucose levels, but faces significant challenges in securing sensitive data against cyber threats and ensuring reliability in resource-constrained wearable devices, like low-power biosensors with limited computational capacity. The rise of quantum computing, particularly Shor algorithm, threatens to break traditional cryptographic methods (e.g., RSA, ECC) within 5–10 years by efficiently solving their underlying mathematical problems, endangering patient data confidentiality. Post-quantum cryptography (PQC), such as lattice-based schemes, offers resilience but demands high computational resources, challenging IoMT scalability. Unlike other PQC IoMT frameworks, such as those using NTRU, which prioritize computational simplicity but lack advanced privacy mechanisms, Q-PRADAX pioneers a secure, adaptive data aggregation framework, integrating Ring-LWE-based PQC for quantum-resilient confidentiality, compact zk-SNARK proofs for tamper-proof verification of patient vitals, and adaptive clustering for enhanced network reliability and scalability. Evaluated using OMNeT + + 6.0.3 with INET 4.5, Q-PRADAX achieves 94.5% diagnostic accuracy on ECG datasets, 100% tampering detection, and 99.9% packet delivery across 1000 devices in its Baseline scenario, with a security latency of 12.2 ms/packet and energy consumption of 0.38 mJ/packet on ARM Cortex-M4 devices (200 mAh). Outperforming existing IoMT solutions in security and fault tolerance, Q-PRADAX establishes a global standard for a secure, patient-centric IoMT ecosystem, redefining reliable healthcare delivery.
Jhansy Archana Vasigani, M. Vivekanandan, Subhankar Ghatak
No abstract is available for this record.
Ayushman Sharma, Praveen Bohara, Manish Tiwari, Maad M. Mıjwıl · 6 authors
No abstract is available for this record.
Rini Hardiyanti, Amil Ahmad Ilham, Ady Wahyudi Paundu
This research proposes the use of AES-256-CBC encryption, decentralized storage using Interplanetary File System (IPFS), and CID hash logging into the Ethereum. The system was tested using files of 5, 10, 15 and 100 MB, and shows that the encryption-decryption process has no significant impact on system performance. The security evaluation resulted 6 out of 7 test scenarios successfully prevented data theft, manipulation, and duplication after using attack simulations such as reply attacks, bit-flipping, Man-in-the-Middle (MITM), and Brute Force attacks. The total cost for logging CID hashes to Ethereum was $0.00913-0.01080$ ETH. Although throughput performance and execution time are volatile in both proposed and comparison system, the proposed system is superior in terms of system security and cost efficiency, making it feasible to use for e-learning content protection.
D V Sheela
This study explores the design and implementation of a blockchain-based system to enhance trust, transparency, and security in academic credentialing. Motivated by the growing distrust in centralized institutions and the inefficiencies of traditional credential verification processes, the research leverages the immutability, decentralization, and transparency of blockchain to develop a tamper-proof mechanism for academic record storage and validation. Using the Ethereum Sepolia test network and real-world student performance data from the Open University Learning Analytics Dataset (OULAD), the system securely issues, verifies, and revokes academic credentials through a custom smart contract developed in Solidity. Each credential is hashed using SHA-256 to ensure student privacy while enabling public, real-time verification. The implementation was conducted in a Google Colab environment using Web3.py and Infura, with batch processing mechanisms and a Web3 interface for seamless interaction. Empirical results reveal performance patterns across modules and highlight opportunities for academic intervention. The system not only demonstrates operational feasibility but also offers a scalable, interoperable, and ethical framework for higher education institutions to combat credential fraud and enhance institutional accountability. Future work will focus on privacy-enhancing cryptographic integrations and decentralized identity standards to further solidify blockchain’s role in education.
Yerlan Kistaubayev, Francisco Liébana‐Cabanillas, Aijaz A. Shaikh, Galimkair Mutanov · 6 authors
It has been recognized that Blockchain technology contributes to environmentally sustainable development goals (SDGs). It has emerged as a disruptive innovation capable of transforming various economic and social sectors significantly. This conceptual paper is driven by the need to explore how blockchain, specifically a consortium-based Ethereum architecture, can be integrated into higher education institutions to ensure data sovereignty, integrity, and verifiability while adhering to legal and ethical standards such as GDPR. We propose a multi-layered blockchain-based model for Kazakhstan’s Unified Platform of Higher Education (UPHE). This model employs hybrid on-chain/off-chain data storage, smart contract automation, and a Proof-of-Authority consensus mechanism to address system limitations, including data centralization and inadequate verification of academic credentials. Empirical simulations using Blockscout and Ethereum-compatible tools demonstrate the model’s feasibility and performance. This paper contributes to the growing discussion on educational blockchain applications by presenting a scalable, secure, and transparent architecture that aligns with institutional governance and Environmental, Social, and Governance (ESG) principles. It also supports the objectives of UN SDG 4 (i.e., Quality education) by fostering trust, transparency, and equitable access to verifiable educational credentials.