Blockchain Papers

Ian Mitchell, Sukhvinder Hara

No abstract is available for this record.

Hans-Georg Fill

No abstract is available for this record.

Karin Melin

This thesis aims to explore the compliance of blockchain technology and the GDPR. The GDPR was implemented for the EU member states in May 2018 with the purpose of harmonizing data protection regulation. However, the regulation is based on the notion that data is stored and processed in a centralized system. This causes an issue when it comes to distributed networks, and in particular with the distributed ledger technology (DLT), the underlying technology of blockchain. For this thesis, a literature review has been conducted to investigate the problems of GDPR compliance for blockchain projects, and what technical solutions exist to make a blockchain solution more GDPR compliant. In addition, interviews have been conducted to investigate the technical and legal perspectives on the current and future situations of regulation and technology. Compatibility problems mainly concern the immutability and transparency of a blockchain and examples of technical solutions that handle those problems can be found in the literature. Nevertheless, none of the discussed solutions are yet to guarantee full GDPR compliance. The technical and legal perspectives share ideas of the main compliance issues. However, differences such as interpretation of technical details can be identified, indicating problems to arise when regulating blockchains in the future. Further interdisciplinary work on guidelines for the GDPR is necessary for blockchain projects to be successful in complying with the regulation as well as to strengthen the technology neutrality of the GDPR.

Danning Sui, Gëzim Sejdiu, Damien Graux, Jens Lehmann

With the recent trend on blockchain, many users want to know more about the important players of the chain. In this study, we investigate and analyze the Ethereum blockchain network in order to identify the major entities across the transaction network. By leveraging the rich data available through Alethio's platform in the form of RDF triples we learn about the Hubs and Authorities of the Ethereum transaction network. Alethio uses SANSA for effcient reading and processing of such large-scale RDF data (transactions on Ethereum blockchain) in order to perform analytics e.g. finding top accounts, or typical behavior patterns of exchanges' deposit wallets and more.

David Billard

This paper proposes the use of a blockchainbased structure in order to store evidences in a digital forensics investigation. The traditional chain of evidence is augmented with properties of immutability and traceability, thanks to a cryptographic process. The blockchain is constructed by forensics experts by adding evidences through the process. Since the blockchain is immutable, it can be shared among the different parties involved in a prosecution in order to review the chain of evidence and build their case. Furthermore, the blockchain structure can be applied to other forensics fields, like drugs, firearms, NDA. This blockchain is called a Digital Evidence Inventory (DEI) and is part of a wider framework encompassing a Forensics Confidence Rating (FCR) structure, in order to give experts the ability to rate the level of confidence for each evidence and a Global Digital Timeline (GDT) to order evidence through time. The whole framework is called ‘Aldiana’.

Abdelkader Hameurlain, Roland Wagner

No abstract is available for this record.

Dongdong Yue, Ruixuan Li, Yan Zhang, Wenlong Tian · 5 authors

With the popularity of cloud storage, how to verify the integrity of data on the cloud has become a challenging problem. Traditional verification framework involves the Third Party Auditors (TPAs) which are not entirely credible. In this paper, we present a framework for blockchain-based data integrity verification in P2P cloud storage, making verification more open, transparent, and auditable. In this framework, we present Merkle trees for data integrity verification, and analyze the system performance under different Merkle trees structures. Furthermore, we develop rational sampling strategies to make sampling verification more effective. Moreover, we discuss the optimal sample size to tradeoff the conflict between verification overhead and verification precision, and suggest two efficient algorithms of order of verification. Finally, we conduct a series of experiments to evaluate the schemes of our framework. The experimental results show that our schemes can effectively improve the performance of data integrity verification.

Yunhui Long, Tanmay Gangwani, Haris Mughees, Carl A. Gunter

Privacy preserving multi-party computation has many applications in areas such as medicine and online advertisements. In this work, we propose a framework for distributed, secure machine learning among untrusted individuals. The framework consists of two parts: a two-step training protocol based on homomorphic addition and a zero knowledge proof for data validity. By combining these two techniques, our framework provides privacy of per-user data, prevents against a malicious user contributing corrupted data to the shared pool, enables each user to self-compute the results of the algorithm without relying on external trusted third parties, and requires no private channels between groups of users. We show how different ML algorithms such as Latent Dirichlet Allocation, Naive Bayes, Decision Trees etc. fit our framework for distributed, secure computing.

Dominik T. Heber, Marco W. Groll

The purpose of the research paper is to describe how the Blockchain technology can foster traceability of electric/electronics (E/E) information artifacts in product lifecycle management (PLM) with a focus on bridging the gap between model-bases systems engineering (MBSE) and product data management (PDM). Due to automotive development includes many parties, such as original equipment manufacturers (OEMs), suppliers, and new partners, a distribution mechanism for proclamation of changed information artifacts is necessary. The approach compares MBSE methods and identifies which information artifacts created there have to be linked with PDM artifacts. Practical implications for the exchange of data in engineering collaboration with multiple partners are assessed by a first proof of concept with a Blockchain prototype tested with a supplier. The originality of this approach stems from the application of the Blockchain technology in engineering IT, a meta data model to connect MBSE and PDM, and the facilitated inclusion of engineering collaboration partners by those means.

Youssef Wehbe, Mohammed Al Za’abi, Davor Svetinović

Healthcare-related technology has been growing exponentially, from electronic healthcare records (EHRs) and personal health trackers to population health management tools. Currently, data from these sources is largely archived, analyzed separately or using only cursory integration with other data sources. In this study, we propose a coupled AI-Blockchain EHR management system. The goal is to provide a platform that leverages blockchain and artificial intelligence (AI) for (i) secure EHR management, (ii) efficient data integration, and (iii) reliable computer-aided diagnoses. A goal-oriented modeling approach with the Constrained Goal Model (CGM) is used to elicit the system requirements. Questionnaire results for a case study in Abu Dhabi, UAE served for model validation and refinement for maximizing the number of system users.

Miguel Tavares, André Guerreiro, Carlos Coutinho, Filipe Veiga · 5 authors

Businesses and organizations have for long been trying to tackle the most prominent issues regarding identity management and systems. Traditionally, the proof of trust concerning the identification of a citizen, a customer or a participant in any business or transaction consisted always in a physical evidence (e.g., a signature, fingerprint, photo or other) whose value would rely on a trusted third-party such as a notary or attorney that confirmed the veracity of that physical evidence. More recent approaches include novel types of evidence such as digital certificates, but still these have no value unless they are issued and signed by a trusted centralized third-party that confirms the authenticity of the certificate. These are then often used by businesses to identify and trace their parties and stakeholders, in a process known as "Know Your Customer" (KYC). This process is often slow and requires costly human intervention. This paper presents WalliD, a decentralized approach of a secure protocol to handle customer identification using Blockchain. The paper then shows a proof of concept workflow implementation of this protocol developed using an Ethereum Wallet.

Michael L. Gagnon, Grant Stephen

Associating the health-related records and transactions of patients with their numerous “identities” as they interact with different healthcare providers, payers, pharmacy benefit managers and other entities is an expensive and complex problem. With many years of experience addressing this issue in different healthcare systems and Health Information Exchanges (HIEs), it is apparent that there is now a compelling and relatively straightforward technical solution for this problem. Presented here is a broadly feasible and technically compelling argument for a blockchain-based approach to addressing these issues. At the same time, challenges ahead and potential strategies to address them are discussed. Keywords: Blockchain; Master Patient Index; MPI; Distributed Ledger; Patient Identity; HIE; HealthInformation Exchange

Muhammad Muzammal, Qiang Qu, Bulat Nasrulin, Anders Skovsgaard

A blockchain is a decentralised linked data structure that is characterised by its inherent resistance to data modification, but it is deficient in search queries, primarily due to its inferior data formatting. A distributed database is also a decentralised data structure which features quick query processing and well-designed data formatting but suffers from data reliability. In this demonstration, we showcase a blockchain database application platform developed by integrating the blockchain with the database, i.e. we demonstrate a system that has the decentralised, distributed and audibility features of the blockchain and quick query processing and well-designed data structure of the distributed databases. The system features a tamper-resistant, consistent and cost-effective multi-active database and an effective and reliable data-level disaster recovery backup. The system is demonstrated in practice as a multi-active database along with the data-level disaster recovery backup feature.

Utkarsh Mittal, Tom Gedeon, Sabrina Caldwell

The emergence of a "post-fact" world has seen knowledge being misinterpreted and manipulated to suit diverse purposes. Information from credible sources is often drowned out by `facts' with dubious provenance. It is not enough to simply establish knowledge provenance if this meta-data can be changed afterwards. This paper presents a possible solution using blockchains to manage knowledge provenance. The solution is modelled using a concrete example of knowledge institutions. Variations and extensions to suit other domains are suggested. Particularly, a graph based variation of the blockchain is outlined. We also discuss the impact of our model beyond technology.

Bonnie Lawlor

This paper offers an overview of the highlights of the NFAIS Conference, Blockchain for Scholarly Publishing, that was held in Alexandria, VA from May 15–16, 2018. The goal of the conference was to take a close look at the initiatives that have emerged as a result of the increasing global acceptance of blockchain technology. This technology, chiefly known as the foundation of Bitcoin and originally introduced as a means of securely managing cryptocurrency, has proven to have practical applications beyond finance. The basic technology is that of a distributed ledger and it is being broadly-adopted by multiple industries, including the scholarly publishing community. The capabilities of this new technology are prompting a direct exchange among stakeholders, as blockchain promises a more structured, decentralized, and immutably secure approach that has the potential to significantly impact researcher workflows - from data collection to peer review to access and published work. The technology inspires passion - there are those who believe that it will ultimately transform our lives while others are completely skeptical. The NFAIS conference provided a look at both sides of the coin (no pun intended).

Brian A. Scriber

Researchers analyzed 23 blockchain implementation projects, each tracked for design decisions and architectural alignment showing benefits, detriments, or no effects from blockchain use. The results provide the basis for a framework that lets engineers, architects, investors, and project leaders evaluate blockchain technology’s suitability for a given application. This analysis also led to an understanding of why some domains are inherently problematic for blockchains. Blockchains can be used to solve some trust-based problems but aren’t always the best or optimal technology. Some problems that can be solved using them can also be solved using simpler methods that don’t necessitate as big an investment.

Subasri Mathiyalahan, Shobana Manivannan, Mahalakshmi Nagasundaram, R. Ezhilarasie

Data integrity of outsourced data is main problem in CSP (cloud service provider). Space overhead and computation complexity are very high issue in recent PDP(Provable Data Possession) verification schemes. To overcome such issues MPDP (Mobile Provable Data Possession) schemes using hash tree data structure and Boneh-Lynn-Snacham short signature scheme have been used over decade. Data dynamics is well supported in MPDP scheme via block less verification, dynamic data operations, stateless verification, and verification out sourcing. But still there are some operations which can be performed much more efficiently in some other way than that of the two methods prescribed above. Operations in particular, data modification operations like insertion and deletion operations is somewhat difficult or in other words time consuming in hash tree data structure. In this paper, we have deployed an improved hash tree structure called MPT (Merkle Patricia Tree) for integrity checking.MPT is combination of MHT (Merkle Hash Tree) and patricia tree where each node consists of key-value pairs. As of now, MPT has been used only in block chain technology for providing authentication of transactions through Ethereum.

J.R.Q. Verkleij

The blockchain technology is a new innovation with the potential to disrupt the\nworld as we currently know it, despite several limitations and challenges to overcome.\nOne of these challenges for software producing organizations is selecting the\nright technology for their case. In this research, we haveve identified this selection\nprocess as a multi-criteria decision making problem. Based on this we have created\na Decision Support System which aids developers during the technology selection\nprocess of blockchain platforms. Contemporary solutions to this problem were only\nrather simplistic decision-trees, which struggle with complexity and adaptations.\nThe novelty of this Decision Support System lies in being a feature-based artifact\nwhich incorporates ISO Software Quality Aspects and feature prioritization based\non the MoSCoW-technique. These contemporary generic blockchain features have\nbeen gathered through nine interviews with blockchain experts. Based on prioritized\nfeatures as input, the Decision Support System gives a score for feasible solutions\n(e.g. Ethereum or Hyperledger) as result. This Decision Support System was\nevaluated in three different case-studies for organization creating blockchain-based\nsolutions. In addition to this, the artifact has been validated by a blockchain-domain\nexpert. The main difficulties and obstacles of this whole research were grounded in\nthe immaturity of the blockchain domain as a whole.

Srinath Setty, Sebastian Angel, Trinabh Gupta, Jonathan Lee

This paper introduces Spice, a system for building verifiable state machines (VSMs). A VSM is a request-processing service that produces proofs establishing that requests were executed correctly according to a specification. Such proofs are succinct (a verifier can check them efficiently without reexecution) and zero-knowledge (a verifier learns nothing about the content of the requests, responses, or the internal state of the service). Recent systems for proving the correct execution of stateful computations--Pantry [25], Geppetto [34], CTV [30], vSQL [83], etc.--implicitly implement VSMs, but they incur prohibitive costs. Spice reduces these costs significantly with a new storage primitive. More notably, Spice's storage primitive supports multiple writers, making Spice the first system that can succinctly prove the correct execution of concurrent services. We find that Spice running on a cluster of 16 servers achieves 488-1167 transactions/second for a variety of applications including inter-bank transactions [27], cloud-hosted ledgers [28], and dark pools [63]. This represents an 18,000-685,000× higher throughput than prior work.

Alexander Mense, Leandros Athanasiadis

The characteristics of the "blockchain" technology and especially its decentralized nature lead to the notion of neutrality, censorship resistance, and absolute truths, which makes the concept interesting for many different domains, such as finance, supply chain management, or the energy sector - of course also for the healthcare area (eHealth). Blockchains also offer the possibility for well-known access points for a distributed system with easy to use and simple to integrate programming interfaces, which makes it interesting as a central point for electronic healthcare data exchange in a distributed environment. This paper presents a concept for integrating and sharing distributed personal healthcare records based on smart contracts implemented on an Ethereum blockchain.

Siwan Noh, Youngho Park, Chur Sur, Sang Uk Shin · 5 authors

privacy. An exposure of personal medical records causes damage to the finance, etc. Sometimes, it could put patient's life in danger. To achieve secure data sharing between institutions, many studies use cloud storage to store medical records. However, many studies suppose that cloud service providers were trustworthy. These systems required a key establishment with the cloud service providers and all the access logs are governed by cloud service providers. Patients should ask cloud service providers to check these access logs. However, it can be forged by cloud service providers during the request process. In this paper, we propose blockchain based medical records management system for secure data sharing. In order to share securely, we use proxy re-encryption scheme. Also, we use blockchain technology to audit access logs without modification.

Bert-Jan Butijn, Damian A. Tamburri, Willem‐Jan van den Heuvel

In recent years, the UK railway industry has struggled with the effects of poor integration of data across ICT systems, particularly when that data is being used across organizational boundaries. Technical progress is being made by the industry towards enabling data sharing, but an open issue remains around how the costs of gathering and maintaining pooled information can be fairly attributed across the stakeholders who draw on that shared resource. This issue is particularly significant in areas such as Remote Condition Monitoring, where the ability to analyse the network at a whole-systems level is being blocked by the business cases around the purchase of systems as silos. Blockchains are an emerging technology that have the potential to revolutionize the management of transactions in a number of industrial sectors. This chapter will address the outstanding issues around the fair attribution of costs and benefits of data sharing in the rail industry by proposing blockchains as a forth enabler of the rail data revolution, alongside ESB, ontology, and open data.

Shreekanth M. Prabhu

Governance and Social Change are ongoing processes. In this work we attempt to develop a framework for good governance to catalyze social change. Zachman did pioneering work to define a framework for Enterprise architecture. It is a comprehensive ontology that guides information architecture. Here we evaluate Zachman framework for its applicability to achieve good governance. In addition, we draw on concepts from Unified Foundational Ontology to extend our framework. We also look at applying Balanced Score-Card approach for the governance scenario. In addition we also see how information management framework can inter-operate with models like theory of change and Bartels' theory of separations. We also evaluate the use of distributed global ledger protocols/methods such as Block-chain, Paxos and Raft to manage the state change in governance related information.

Jonathan Bell, Thomas D. LaToza, Foteini Baldmitsi, Angelos Stavrou

The scientific community is facing a crisis of reproducibility: confidence in scientific results is damaged by concerns regarding the integrity of experimental data and the analyses applied to that data. Experimental integrity can be compromised inadvertently when researchers overlook some important component of their experimental procedure, or intentionally by researchers or malicious third-parties who are biased towards ensuring a specific outcome of an experiment. The scientific community has pushed for "open science" to add transparency to the experimental process, asking researchers to publicly register their data sets and experimental procedures. We argue that the software engineering community can leverage its expertise in tracking traceability and provenance of source code and its related artifacts to simplify data management for scientists. Moreover, by leveraging smart contract and blockchain technologies, we believe that it is possible for such a system to guarantee end-to-end integrity of scientific data and results while supporting collaborative research.