Blockchain is the foundation of all cryptocurrencies, while machine learning (ML) is one of the most popular technologies with a wide range of possibilities. Blockchain may be improved and made more effective by using ML. Even though blockchain technology uses encryption to safeguard data, it is not completely reliable. Various elements, including the particular use case, the type of data, and legal constraints can determine whether it is suitable for keeping private and sensitive data. While there may be benefits, it is important to take into account possible hazards and abide by privacy and security laws. The blockchain itself is secure, but additional applications and layers are not. In terms of security, ML can aid in the development of blockchain applications. Therefore, a critical investigation is required to better understand the function of ML and blockchain in enhancing security. This study examines the current situation, evaluates the articles it contains, and presents an overview of the security issues. Despite their existing limitations, the papers included from 2012 to 2022 highlighted the importance of ML’s impact on blockchain security. ML and blockchain can enhance security, but challenges remain; advances such as federated learning and zero-knowledge proofs are important, and future research should focus on privacy and integration with other technologies.
In mobile crowdsensing (MCS), truth discovery (TD) plays an important role in sensing task completion. Most of the existing studies focus on the privacy preservation of mobile users, and the reliability of mobile users is evaluated by their weights which are calculated based on the submitted sensing data. However, if mobile users are unreliable, the submitted sensing data and their weights are also unreliable, which may influence the accuracy of the ground truths of sensing tasks. Therefore, this article proposes a privacy-preserving and reputation-based truth discovery framework named PRTD which can generate the ground truths of sensing tasks with high accuracy while preserving privacy. Specifically, we first preserve sensing data privacy, weight privacy, and reputation value privacy by utilizing the Paillier algorithm and Pedersen commitment. Then, to verify whether the reputation values of mobile users are tampered with and select mobile users that satisfy the corresponding reputation requirements, we design a privacy-preserving reputation verification algorithm based on reputation commitment and zero-knowledge proof and propose a concept of reliability level to select mobile users. Finally, a general TD algorithm with reliability level is presented to improve the accuracy of the ground truths of sensing tasks. Moreover, theoretical analysis and performance evaluation are conducted, and the evaluation results demonstrate that the PRTD framework outperforms the existing TD frameworks in several evaluation metrics in the synthetic dataset and real-world dataset.
Marie Tcholakian, Karolina Gorna, Maryline Laurent, Hella Kaffel Ben Ayed · 5 authors
Electronic Health Records (EHRs) and Medical Data are classified as personal data in every privacy law, meaning that any related service that includes processing such data must come with full security, confidentiality, privacy and accountability. Solutions for health data management, as in storing it, sharing and processing it, are emerging quickly and were significantly boosted by the Covid-19 pandemic that created a need to move things online. EHRs makes a crucial part of digital identity data, and the same digital identity trends -- as in self sovereign identity powered by decentralized ledger technologies like Blockchain, are being researched or implemented in contexts managing digital interactions between health facilities, patients and health professionals. In this paper, we propose a blockchain-based solution enabling secure exchange of EHRs between different parties powered by a self-sovereign identity (SSI) wallet and decentralized identifiers. We also make use of a consortium IPFS network for off-chain storage and attribute-based encryption (ABE) to ensure data confidentiality and integrity. Through our solution, we grant users full control over their medical data, and enable them to securely share it in total confidentiality over secure communication channels between user wallets using encryption. We also use DIDs for better user privacy and limit any possible correlations or identification by using pairwise DIDs. Overall, combining this set of technologies guarantees secure exchange of EHRs, secure storage and management along with by-design features inherited from the technological stack.
Omid Mir, Daniel Slamanig, Balthazar Bauer, René Mayrhofer
Anonymous credentials (ACs) systems are a powerful cryptographic tool for privacy-preserving applications and provide strong user privacy guarantees for authentication and access control. ACs allow users to prove possession of attributes encoded in a credential without revealing any information beyond them. A delegatable AC (DAC) system is an enhanced AC system that allows the owners of credentials to delegate the obtained credential to other users. This allows to model hierarchies as usually encountered within public-key infrastructures (PKIs). DACs also provide stronger privacy guarantees than traditional AC systems since the identities of issuers and delegators can also be hidden. In this paper we present a novel DAC scheme that supports attributes, provides anonymity for delegations, allows the delegators to restrict further delegations, and also comes with an efficient construction. Our approach builds on a new primitive that we call structure-preserving signatures on equivalence classes on updatable commitments (SPSEQ-UC). The high-level idea is to use a special signature scheme that can sign vectors of set commitments, where signatures can be extended by additional set commitments. Signatures additionally include a user's public key, which can be switched. This allows us to efficiently realize delegation in the DAC. Similar to conventional SPSEQ, the signatures and messages can be publicly randomized and thus allow unlinkable delegation and showings in the DAC system. We present further optimizations such as cross-set commitment aggregation that, in combination, enable efficient selective showing of attributes in the DAC without using costly zero-knowledge proofs. We present an efficient instantiation that is proven to be secure in the generic group model and finally demonstrate the practical efficiency of our DAC by presenting performance benchmarks based on an implementation.
Aditya Pribadi Kalapaaking, Ibrahim Khalil, Mohammed Atiquzzaman
The widespread adoption of Internet of Things (IoT) devices in smart cities, intelligent healthcare systems, and various real-world applications have resulted in the generation of vast amounts of data, often analyzed using different Machine Learning (ML) models. Federated learning (FL) has been acknowledged as a privacy-preserving machine learning technology, where multiple parties cooperatively train ML models without exchanging raw data. However, the current FL architecture does not allow for an audit of the training process due to the various data-protection policies implemented by each FL participant. Furthermore, there is no global model verifiability available in the current architecture. This paper proposes a smart contract-based policy control for securing the Federated Learning (FL) management system. First, we develop and deploy a smart contract-based local training policy control on the FL participants' side. This policy control is used to verify the training process, ensuring that the evaluation process follows the same rules for all FL participants. We then enforce a smart contract-based aggregation policy to manage the global model aggregation process. Upon completion, the aggregated model and policy are stored on blockchain-based storage. Subsequently, we distribute the aggregated global model and the smart contract to all FL participants. Our proposed method uses smart policy control to manage access and verify the integrity of machine learning models. We conducted multiple experiments with various machine learning architectures and datasets to evaluate our proposed framework, such as MNIST and CIFAR-10.
Traditional Insurance, a popular approach of financial risk management, has suffered from the issues of high operational costs, opaqueness, inefficiency and a lack of trust. Recently, blockchain-enabled "parametric insurance" through authorized data sources (e.g., remote sensing and IoT) aims to overcome these issues by automating the underwriting and claim processes of insurance policies on a blockchain. However, the openness of blockchain platforms raises a concern of user privacy, as the private user data in insurance claims on a blockchain may be exposed to outsiders. In this paper, we propose a privacy-preserving parametric insurance framework based on succinct zero-knowledge proofs (zk-SNARKs), whereby an insuree submits a zero-knowledge proof (without revealing any private data) for the validity of an insurance claim and the authenticity of its data sources to a blockchain for transparent verification. Moreover, we extend the recent zk-SNARKs to support robust privacy protection for multiple heterogeneous data sources and improve its efficiency to cut the incurred gas cost by 80%. As a proof-of-concept, we implemented a working prototype of bushfire parametric insurance on real-world blockchain platform Ethereum, and present extensive empirical evaluations.
We introduce the notion of \emph{traceable mixnets}. In a traditional mixnet, multiple mix-servers jointly permute and decrypt a list of ciphertexts to produce a list of plaintexts, along with a proof of correctness, such that the association between individual ciphertexts and plaintexts remains completely hidden. However, in many applications, the privacy-utility tradeoff requires answering some specific queries about this association, without revealing any information beyond the query result. We consider queries of the following types: a) given a ciphertext in the mixnet input list, whether it encrypts one of a given subset of plaintexts in the output list, and b) given a plaintext in the mixnet output list, whether it is a decryption of one of a given subset of ciphertexts in the input list. Traceable mixnets allow the mix-servers to jointly prove answers to the above queries to a querier such that neither the querier nor a threshold number of mix-servers learn any information beyond the query result. Further, if the querier is not corrupted, the corrupted mix-servers do not even learn the query result. We first comprehensively formalise these security properties of traceable mixnets and then propose a construction of traceable mixnets using novel distributed zero-knowledge proofs (ZKPs) of set membership and of a statement we call reverse set membership. Although set membership has been studied in the single-prover setting, the main challenge in our distributed setting lies in making sure that none of the mix-servers learn the association between ciphertexts and plaintexts during the proof. We implement our distributed ZKPs and show that they are faster than state-of-the-art by at least one order of magnitude.
Wenbo Ruan, Jia Liu, Yuanfang Chen, M N Islam · 5 authors
The Internet of Vehicles (IoV) enables vehicles to share data that help vehicles perceive the surrounding environment. However, vehicles can spread false information to other IoV nodes; this incorrect information misleads vehicles and causes confusion in traffic, therefore, a vehicular trust model is needed to check the trustworthiness of the message. To eliminate the spread of false information and detect malicious nodes, we propose a double-layer blockchain trust management (DLBTM) mechanism to objectively and accurately evaluate the trustworthiness of vehicle messages. The double-layer blockchain consists of the vehicle blockchain and the RSU blockchain. We also quantify the evaluation behavior of vehicles to show the trust value of the vehicle's historical behavior. Our DLBTM uses logistic regression to accurately compute the trust value of vehicles, and then predict the probability of vehicles providing satisfactory service to other nodes in the next stage. The simulation results show that our DLBTM can effectively identify malicious nodes, and over time, the system can recognize at least 90% of malicious nodes.
The Internet of Things (IoT), which allows computers from different settings to connect and cooperate on a same activity while ensuring better levels of privacy and safety for some of the connected equipment, must manage the whole process as manufacturing procedures grow considerably more complex. Some well-liked things that solve important issues and provide third-party security. Since the problem is still open, privacy and security must come first. According to this research, Mengers identification, a unique and potent security technique made possible by blockchain, would foster confidence in a variety of industries. In this instance, access control carries out security. To allow authentication across linked devices while protecting device privacy, the Mengers authenticating mechanism is defined. Before delivering keys to linked parties, an appropriate path must first be established. The findings show improved performance during the verification process when the simulation is run in the simulation environment.
Rashmi, Sanjay Sood, Tarun Prashar, M Shravan · 6 authors
Blockchain technology can be used to enhance data privacy in human resource management by providing a secure, decentralized platform for storing and sharing employee data. This allows for secure access to sensitive information, such as personal identification and employment history, while maintaining the privacy of that information by preventing unauthorized access. Additionally, blockchain can be used to track and verify the accuracy of employee data, reducing the risk of errors or fraud. However, it is important to note that while blockchain can provide enhanced security and privacy, it still relies on proper implementation and maintenance to ensure that data remains protected.
Blockchain technology has demonstrated to be extremely efficient at processing distributed transactions in a secured manner. It consists of a wide range of applications. B. To handle smart contacts and Bitcoin cash. Blockchain systems may allow automatic data exchange and thinking about, resulting in increased effectiveness and lower costs. This is made possible by the adoption of contract technology and decentralized ledgers. Additionally, blockchain technologies can enhance integrity and security of data, enabling more precise and reliable analysis of information. Ethereum along with information science integration may make it easier to create decentralized apps, opening up novel industries and income sources. However, there are still issues with adaptability, interconnection, and complexity in the combination of blockchain technology and data science. For this type of technology to achieve all of its potential advantages, it is imperative that studies and advancements in this field persist. Blockchain applications for data science are currently being investigated. This essay examines how blockchain technology is used in cybersecurity and data science.
The exposure of the real location of vehicles in the positioning service may lead to the disclosure of the important information of users. There are few comprehensive studies on the privacy security and delay of the vehicle positioning service, and less consideration is given to the combination of satellite network, UAV network and ground network to ensure vehicle positioning service More reliable, longer lasting and more flexible. We consider the application of anonymous privacy protection technology to reduce the leakage risk of real vehicle location and the deployment delay, and proposes the location privacy protection architecture of the Internet of Vehicles under the Space-Air-Ground Integrated Network (SAGIN), roadside service units (RSU) act as ground receiving devices. We propose a fast clustering K-anonymity privacy-preserving algorithm to reduce the time complexity of the K-anonymity algorithm while the probability of the real vehicle location being found does not exceed 1/K, and proposing evaluation-rating combined trust model to solve the problems of non-trust of the requesting vehicle and the cooperative vehicle during the construction of the anonymous area of the K-anonymity algorithm. Applying blockchain technology to store vehicle location privacy data, distributed ledger and fast Byzantine fault tolerance consensus mechanisms ensure that stored data cannot be tampered with while speeding up deployment. Simulation experiments indicate that our scheme is better than some existing studies in terms of time delay and safety, and can identify malicious vehicles with fast speed and high accuracy.
This paper proposes a zero-knowledge proof data transaction verification algorithm, aiming to solve the problem that buyers cannot verify data in advance in blockchain-based data transactions. The algorithm combines zero-knowledge proof technology with blockchain to verify a portion of the data in advance. Buyers can specify the data segment to be verified without disclosing other information to ensure their interests. By verifying the data in advance, it is beneficial to promote trust between the two parties and achieve transactions. In practical tests, the verification algorithm of this paper is deployed in the blockchain through smart contracts. The seller sends the data segment and proof to the buyer, and the buyer verifies the data locally. Algorithm analysis and experimental results show that the algorithm performs well in security, efficiency, and has certain practicality and promotion value.
In order to study the standard security access authentication mechanism of intelligent sensing terminals of massive power Internet of Things, In order to study the standard secure access authentication mechanism of intelligent sensing terminal of massive power Internet of Things, a new privacy protection method widely used in block chain is proposed to prove identity. The traditional power IoT cloud-side interaction security access MQTT protocol still has a lot of room for adaptation and optimization. First, the proposed non-interactive zero-knowledge proof identity authentication method reduces the time of traditional standard secure access authentication process; Second, it reduced the computing resources consumed in a large number of intelligent sensors access authentication. The comparison results show that, the access authentication time of this method is 30% <mml:math xmlns:mml="http://www.w3.org/1998/Math/MathML" alttext="\sim" display="inline" overflow="scroll"> <mml:mo>∼</mml:mo> </mml:math> 50% less than that of the traditional secure access authentication process. The computing resources consumed during authentication are reduced by 20% to 30% compared with traditional security and secrecy mechanisms.
With the rapid development of Internet of Vehicles (IoV), particularly the introduction of Mobile Edge Computing (MEC), vehicles can efficiently share data with one another. However, edge computing nodes are vulnerable to various network attacks, posing security risks to data storage and sharing. Moreover, the presence of abnormal vehicles during the sharing process poses significant security threats to the entire network. To address these issues, this paper proposes a novel reputation management scheme, which proposes an improved multi-source multi-weight subjective logic algorithm. This algorithm fuses the direct and indirect opinion feedback of nodes through the subjective logic trust model while considering factors such as event validity, familiarity, timeliness, and trajectory similarity. Vehicle reputation values are periodically updated, and abnormal vehicles are identified through reputation thresholds. Finally, blockchain technology is employed to ensure the security of data storage and sharing. By analyzing real vehicle trajectory datasets, the algorithm is proven to effectively improve the differentiation and detection rate of abnormal vehicles.
To ensure the success of energy transition and achieve the target of reducing the carbon footprint of energy systems, the management of energy systems needs to be decentralized. Public blockchains offer favorable features to support energy sector democratization and reinforce citizens' trust, such as tamper-proof energy data registration and sharing, decentralization, transparency, and support for peer-to-peer (P2P) energy trading. However, in blockchain-based P2P energy markets, transactional data are public and accessible, which raises privacy concerns related to prosumers' energy profiles while lacking scalability and featuring high transactional costs. In this paper, we employ secure multi-party computation (MPC) to assure privacy on a P2P energy flexibility market implementation in Ethereum by combining the prosumers' flexibility orders data and storing it safely on the chain. We provide an encoding mechanism for orders on the energy market to obfuscate the amount of energy traded by creating groups of prosumers, by splitting the amount of energy from bids and offers, and by creating group-level orders. The solution wraps around the smart contracts-based implementation of an energy flexibility marketplace, assuring privacy features on all market operations such as order submission, matching bids and offers, and commitment in trading and settlement. The experimental results show that the proposed solution is effective in supporting P2P energy flexibility trading, reducing the number of transactions, and gas consumption with a limited computational time overhead.
Abstract The rise of 5G technology has driven the development of edge computing. Computation offloading is the key and challenging point in edge computing, which investigates offloading resource-intensive computing tasks from the user side to the cloud or edge side for processing. More consideration needs to be given to load balancing, user variability, and the heterogeneity of edge facilities in relevant research. In addition, most of the research around edge collaboration also revolves around cloud-side collaboration, which pays relatively little attention to the collaboration process between edge nodes, and the incentive and trust issues of the collaboration process need to be addressed. In this paper, we consider the impact of the user demand variability and the edge facility heterogeneity, then propose a method based on Vickrey-Clarke-Groves (VCG) auction theory to accommodate the edge demand response (EDR) process where the number of users and service facilities do not match. The method makes users’ bidding rules satisfy the Nash equilibrium and weakly dominant strategy, which can improve the load balancing of edge nodes, has positive significance in improving the edge resource utilization and reducing the system energy consumption. In particular, combined with blockchain, we further optimize the incentive and trust mechanism of edge collaboration and consider three scenarios: no collaboration, internal collaboration, and incentive collaboration. We also consider the impact of the user task’s transmission distance on the quality of experience (QoE). In addition, we illustrate the possible forking attack of blockchain in collaborative edge computing and propose a solution. We test the performance of the proposed algorithm on a real-world dataset, and the experimental results verify the algorithm’s effectiveness and the edge collaboration’s necessity.
Federated learning (FL) allows multiple parties to cooperatively learn a federated model without sharing private data with each other. The need of protecting such federated models from being plagiarized or misused, therefore, motivates us to propose a provable secure model ownership verification scheme using zero-knowledge proof, named FedZKP. It is shown that the FedZKP scheme without disclosing credentials is guaranteed to defeat a variety of existing and potential attacks. Both theoretical analysis and empirical studies demonstrate the security of FedZKP in the sense that the probability for attackers to breach the proposed FedZKP is negligible. Moreover, extensive experimental results confirm the fidelity and robustness of our scheme.
With the widespread attention and application of artificial intelligence (AI) and blockchain technologies, privacy protection techniques arising from their integration are of notable significance. In addition to protecting privacy of individuals, these techniques also guarantee security and dependability of data. This paper initially presents an overview of AI and blockchain, summarizing their combination along with derived privacy protection technologies. It then explores specific application scenarios in data encryption, de-identification, multi-tier distributed ledgers, and k-anonymity methods. Moreover, the paper evaluates five critical aspects of AI-blockchain-integration privacy protection systems, including authorization management, access control, data protection, network security, and scalability. Furthermore, it analyzes the deficiencies and their actual cause, offering corresponding suggestions. This research also classifies and summarizes privacy protection techniques based on AI-blockchain application scenarios and technical schemes. In conclusion, this paper outlines the future directions of privacy protection technologies emerging from AI and blockchain integration, including enhancing efficiency and security to achieve a more comprehensive privacy protection of privacy.
Raúl Casanova-Marqués, Joaquín Torres-Sospedra, Jan Hajný, Michael K. Gould
The increasing popularity of wearable-based Collaborative Indoor Positioning Systems (CIPSs) has led to the development of new methods for improving positioning accuracy. However, these systems often rely on protocols, such as iBeacon, that lack sufficient privacy protection. In addition, they depend on centralized entities for the authentication and verification processes. To address the limitations of existing protocols, this paper presents a groundbreaking contribution to the field of wearable-based CIPSs. We propose a decentralized Attribute-based Authentication (ABA) protocol that offers superior levels of privacy protection, untraceability, and unlinkability of user actions. Unlike existing protocols that rely on centralized entities, our approach leverages decentralized mechanisms for authentication and verification, ensuring the privacy of user location data exchange. Through extensive experimentation across multiple platforms, our results demonstrate the practicality and feasibility of the proposed protocol for real-world deployment. Overall, this work opens up new avenues for secure and privacy-preserving wearable-based CIPSs, with potential implications for the rapidly growing field of Internet of Things (IoT) applications.