S. Balasubramanium, K. Siva Sankar, M. Pallikonda Rajasekaran
Nowadays, health care data has always needed privacy and security. These healthcare data depend upon the cloud computing technology to manage and easy access for patients, health care providers and other authorized parties. But the suspicious attackers always attracted towards this healthcare data, and it automatically leads to consequences in the healthcare organization. This paper has been intended to study and surveyed how to preserve and secure health care data against suspicious attacks. The high demand for efficient storage leads to Blockchain as storage. The dominant Blockchain storage stored a large amount of health data with a shared key to encrypt the data to access it. The privacy-preserving platform technique has been implemented to curb the unauthorized users and accomplish privacy and security. Elliptic curve cryptography used for encryption purpose to encrypt the sensitive data while sharing the health data. Health care data has been considered as more sensitive so that security and user control has been accomplished by access control mode. In this survey, the cloud computing which made a mark in the field of health care organization, Blockchain a tremendous effective storage routine and the privacy-preserving scheme for authorization leads to legal user entry have been reviewed. Therefore the person who reads this survey can able to know about the secured way to access and store the sensitive information in cloud computing.
With the ever-expanding digital communications and the need for advanced interoperability and collaboration, organizations and entities need to share their digital assets. Cloud computing is now widely used for managing and storing resources. Access control is a critical issue, facing many challenges in distributed environments, including clouds. In this paper, we present a model of the cloud access control system. Our distributed model utilizes a role-based access control to enable the management of resources and the parties' access securely. We provide interoperability between multiple organizations to access shared resources using Ethereum Blockchain smart contracts and access levels for available resources. Roles define access permissions; however, unlike the traditional role-based access control model, the roles are determined according to the organizations involved' collaborative project, sometimes may not exist in any organization. They can only be created in their interactions. Finally, for evaluating its cost and time parameters. We use Ethereum smart contracts and deploy them in the Ethereum test network called Rinkby,.
Abstract Remote patient monitoring and data management have gained much popularity in recent years because of their enhanced access to lowâcost healthcare services. A cloudâbased healthcare system provides numerous solutions for collecting patient data and offers onâdemand wellâmanaged reports to patients and healthcare providers. However, it equally suffers from singleâpoint failure, security, privacy, and nonâtransparency issues with the data, impacting the continuity of the system. To resolve such concerns, this article proposes an artificial intelligence (AI)âenabled decentralized healthcare framework that accesses and authenticates Internet of Things (IoT) devices and create trust and transparency in patient healthcare records (PHR). The mechanism is based on the AIâenabled smart contracts and the conceptualization of the public blockchain network. Alongside this, the framework identifies the malicious IoT nodes in the system. The experimental analyses are performed on the realâtime test environment, and significant improvements are suggested in terms of device energy consumption, data request time, throughput, average latency, and transaction fee.
Security and privacy of patientsâ data is a major concern in the healthcare industry. In this paper, we propose a system that activates robust security and privacy of patientsâ medical records as well as enables interoperability and data exchange between the different healthcare providers. The work proposes the shift from patientâs electronic health records being managed and controlled by the healthcare industry to a patient-centric application where patients are in control of their data. The aim of this research is to build an Electronic Healthcare Record (EHR) system that is layered on the Ethereum blockchain platform and smart contract in order to eliminate the need for third-party systems. With this system, the healthcare provider can search for patientâs data and request the patientsâ consent to access it. Patients manage their data which enables an expedited data exchange across EHR systems. Each patientâs data are stored on the peer-to-peer node ledger. The proposed patient-centric EHR platform is cross-platform compliant, as it can be accessed via personal computers and mobile devices and facilitates interoperability across healthcare providers as patientsâ medical records are gathered from different healthcare providers and stored in a unified format. The proposed framework is tested on a private Ethereum network using Ganache. The results show the effectiveness of the system with respect to security, privacy, performance and interoperability.
Rafael Belchior, AndrĂŠ Vasconcelos, Miguel Correia, Thomas Hardjono
The emergence of blockchain interoperability is reducing the risk of investing in blockchain by avoiding vendor lock-in, leveraging interoperation, and providing migration capabilities. However, to fully unlock the internet of blockchains, it is necessary to provide enterprise interoperability mechanisms that allow service providers to comply with different regulations, e.g., data privacy regulations. Each blockchain can be reached via a gateway, allowing to interconnect value, to provide different services, and to enable self-sovereignty. To realize this vision, we propose Hermes, a fault-tolerant middleware that connects blockchain networks and is based on the Open Digital Asset Protocol (ODAP). Hermes is crash fault-tolerant by allying a new protocol, ODAP-2PC, with a log storage API that can leverage blockchain to secure logs, providing them transparency, auditability, availability, and non-repudiation. We introduce a use case benefiting from Hermes, digital cross-jurisdiction promissory notes. We show that cross-chain transactions can be achieved securely with Hermes, given that gateways are complying with legal frameworks.
Zero-knowledge succinct non-interactive argument of knowledge (zkSNARK) allows a party, known as the prover, to convince another party, known as the verifier, that he knows a private value $v$, without revealing it, such that $F(u,v)=y$ for some function $F$ and public values $u$ and $y$. There are various versions of zk-SNARK, among them, Quadratic Arithmetic Program (QAP)-based zk-SNARK has been widely used in practice, specially in Blockchain technology. This is attributed to two desirable features; its fixed-size proof and the very light computation load of the verifier. However, the computation load of the prover in QAP-based zkSNARKs, is very heavy, even-though it is designed to be very efficient. This load can be beyond the prover's computation power to handle, and has to be offloaded to some external servers. In the existing offloading solutions, either (i) the load of computation, offloaded to each sever, is a fraction of the prover's primary computation (e.g., DZIK), however the servers need to be trusted, (ii) the servers are not required to be trusted, but the computation complexity imposed to each one is the same as the prover's primary computation (e.g., Trinocchio). In this paper, we present a scheme, which has the benefits of both solutions. In particular, we propose a secure multi-party proof generation algorithm where the prover can delegate its task to $N $ servers, where (i) even if a group of $T \in \mathbb{N}$ servers, $T\le N$, collude, they cannot gain any information about the secret value $v$, (ii) the computation complexity of each server is less than $1/(N-T)$ of the prover's primary computation. The design is such that we don't lose the efficiency of the prover's algorithm in the process of delegating the tasks to external servers.
It is the most important and challenging problem to share the data safely in cloud computing. Some so-called trusted third parties may also infringe usersâ data privacy. It is an urgent problem for data owners to share data safely with the designated users rather than the third party or other users. Traditional encryption schemes utilize different keys to produce multiple encrypted copies of the same data for users. It is no longer applicable for cloud data sharing security. Attribute-based encryption can solve above problems, but it needs to rely on trusted third parties to protect the usersâ privacy. In this article, in order to address the above problems, we propose a blockchain-based ciphertext-policy attribute-based encryption scheme for cloud data secure sharing without relying on any trusted third parties. Blockchain-based ciphertext-policy attribute-based encryption scheme can protect the rights and security of data owner. Compared with existing cloud security schemes, the proposed scheme has more advantages in terms of the six aspects: (1) data owners have the authority to decide who can decrypt the data; (2) the operations of users are retained permanently, and all records are tamper-proof; (3) our proposed scheme has the characteristic of âone-to-manyâ encryption, and data is encrypted only once; (4) our scheme does not rely on any trusted third party; (5) in terms of the discrete logarithm problem and decisional q parallel-bilinear DiffieâHellman exponent problem, we prove that our proposed scheme is secure; and (6) experiment shows that our proposed scheme is more efficient than the comparative scheme.
Background/Objectives: With the rapid development of Internet technology, more and more Internet users tend to store their data and information in the cloud, and the security of the existing cloud storage system has been criticized by people, which is not conducive to protecting the data and information security of users. Therefore, how to effectively guarantee the security of cloud user data becomes more and more important. Security cloud storage system is the key to solve this problem. Methods/Statistical analysis: A secure cloud storage system is implemented for the userâs cloud data security. Its main function is: in the user login phase, the strict user identity authentication method is adopted to control the userâs access rights and prevent illegal users from logging in. Firstly, the identify authentication scheme based on zero knowledge proof is proposed. Secondly, in the user data upload stage, the user data is split. Finally, the encryption algorithm based on elliptic curve is proposed to encrypt the userâs file splitting table. Findings: The experimental results show that, in the user identify authentication stage, compared with the traditional user authentication method, the security of user identify authentication can be greatly improved by using the identify authentication method based on zero-knowledge proof. Improvements/Applications: The secure cloud storage system based on ellipse encryption developed in this thesis can realize the security of user's data by encryption while considering the efficiency of data upload and download, and has a broad application prospect.
Xiwei Xu, H. M. N. Dilum Bandara, Qinghua Lu, Ingo Weber ¡ 6 authors
Blockchains have been applied in different domains to guarantee data integrity and provide a decentralized computational infrastructure for executing smart contracts. Multiple blockchain-related patterns have been summarized by academics and industry practitioners covering different aspects, such as engineering applications on top of a blockchain, structuring smart contracts, and security. The existence of these patterns is both helpful and challenging for designers. Helpful, as the existence of these patterns means that developers do not need to recreate solutions to common problems. Challenging, as the multitude of patterns leaves a designer confused about when to adopt or adapt patterns. In this paper, we propose a decision model that assists developers and architects in selecting appropriate patterns for blockchain-based applications. The selection is based on the characteristics of the use cases and trade-offs implicit in the patterns. We evaluated the proposed decision model based on expert opinion regarding its correctness and usefulness in guiding the architecture design and understanding the rationale of various design decisions.
The healthcare industry deals with highly sensitive data which must be managed in a secure way. Electronic Health Records (EHRs) hold various kinds of personal and sensitive data which contain names, addresses, social security numbers, insurance numbers, and medical history. Such personal data is valuable to the patients, healthcare service providers, medical insurance companies, and research institutions. However, the public release of this highly sensitive personal data poses serious privacy and security threats to patients and healthcare service providers. Hence, we foresee the requirement of new technologies to address the privacy and security challenges for personal data in healthcare applications. Blockchain is one of the promising solutions, aimed to provide transparency, security, and privacy using consensus-driven decentralised data management on top of peer-to-peer distributed computing systems. Therefore, to solve the mentioned problems in healthcare applications, in this paper, we investigate the use of private blockchain technologies to assess their feasibility for healthcare applications. We create testing scenarios using HyperLedger Fabric to explore different criteria and use-cases for healthcare applications. Additionally, we thoroughly evaluate the representative test case scenarios to assess the blockchain-enabled security criteria in terms of data confidentiality, privacy and access control. The experimental evaluation reveals the promising benefits of private blockchain technologies in terms of security, regulation compliance, compatibility, flexibility, and scalability.
Technology grows up, day to day to facilitate human beingsâ lifestyle, in order to protect them and their properties. Cloud computing is a platform that one hardware is shared by different clients in the virtual ways and works as standalone physical hardware, is accessed everywhere at any time through the internet. Security is an essential and a vital point to all customers is belonged in the same physical component. This survey paper discusses about cloud computing challenges, types of attacks, and currently solutions in the details. Furthermore, cloud security of models as application, network, and deployment and also services. Cloud security based on a distributed ledger helps the clients to operate within transparency manners and is decentralized to enhance cloud computing information security principals, cloud security requirements, cloud security control, and security design of cloud computing
The demand for blockchain and its significant application has progressed in various sectors and practice areas. A blockchain is a digital technology act as a database that is shared across a network of computers. Although the blockchain is still in the initial stage of testing, in this platform the blockchain is considered as a progressive solution such as decentralization, identity, belief, character, ownership of data, and information about choices. The demand for cloud computing networks is also progressing higher in modern technology. This paper reviewed the application of blockchain technology where data kept in securing decentralized cloud storage which guarantees data of the security and credibility of the system. In a decentralized cloud, storage data are encrypted with a cryptographic algorithm technique with a private key from a user. The benefits and performance of the recent technique and system of cryptography motivated especially in decentralized cloud storage. Decentralized cloud storage using blockchain data makes it more secure and avoids many attacking challenges and single point of failure.
Due to the growing use of cloud services and the possible hazards involved with storing and processing sensitive data in remote locations, data security is a crucial concern in cloud computing. This literature review analyses the state of the art in data security research for cloud computing and emphasises the major discoveries, difficulties, and recommendations for the future. Encryption, access control, network security, physical security, security monitoring, data segregation, backup and disaster recovery, compliance, and safe development practises are just a few of the data security-related topics included in the assessment. The study notes that a problem is the size and quantity of the body of literature as well as the requirement to stay up with the continuously changing area. The need for thorough coverage, evaluation of source quality and reliability, and overcoming language and accessibility challenges are also mentioned as drawbacks. The review goes into further detail on issues including time limits, subjectivity in selection and interpretation, information overload, and integration and synthesis of findings. It is recommended that future research in data security for cloud computing put a particular emphasis on advanced encryption methods, secure data sharing and collaboration, privacy-preserving methods, cloud forensics, threat intelligence, machine learning, security assurance and auditing, blockchain and distributed ledger technologies, as well as user awareness and education. Data security in cloud computing may be further reinforced to secure sensitive data and guarantee the reliability of cloud services by solving these issues and making progress in the sector.
An Electronic Health Record (EHR) is an electronic, official health record that contains a systematic collection of health information of a patient, which is maintained by a healthcare provider. EHRs have always been considered as the technology that has the potential to revolutionize healthcare, however, there are some drawbacks that prevents healthcare institutions from adopting them, and patients from supporting them. The main concerns are patients' privacy and their data security, numerous data breaches of hospitals have caused the loss of patients' EHRs. Multiple solutions have been proposed to allow the patients to take control of their EHR data access, but a secure, and private system that would allow for flawless sharing of EHRs does not exist. In this paper, a hybrid distributed system architecture that addresses these drawbacks is proposed. The proposed system utilizes the decentralized systems data storage model in a centralized system to allow for the high data reproducibility and availability of decentralized systems, while allowing for the high security by authorization and authentication of centralized systems; it also utilizes the blockchain which allows for security, patients pseudo-anonymity, patients' EHRs usage consent requirement, and eventual consistency of data among peers, while keeping a ledger of all shared EHRs among healthcare providers.
Vankamamidi S. Naresh, Sivaranjani Reddi, V. V. L. Divakar Allavarpu
Summary The rapid increase in health care data breaches with the existing centralized systems emphasizes a decentralized health care system while ensuring reliability, privacy, security, and trust. Further, to ensure trust in the medical community, scientist, and pharmaceutical, it is essential to improve the quality of health care data management. In this direction, we proposed a blockchainâbased decentralized privacyâpreserving EMR management (DPEM), which can ensure accountability and integrity. We propose a fourâlayered framework for DPEM consisting of a data preparation layer, access control and security layer, data sharing layer, and data storage layer with the objectives: (i) To provide privacyâpreserving in DPEM, we propose a new elliptic curveâbased content extraction signature (ECâCES) through which patients can exclude EMR's sensitive information to eradicate leakage of privacy information in the data sharing process. (ii) To provide secure data sharing, blockchain smart contracts are used to define the predefined access permissions of the patients. (iii) To provide secure storage, we use a cloud facility to store actual EMRs, and consortium blockchain is used to store respective indexes of EMRs so that the data leakages of EMRs could be optimized and simultaneously, indexes in consortium blockchain will take care the integrity of EMRs. (iv) To provide access control in data sharing, we adopted ciphertextâpolicy attributeâbased encryption (CPâABE) access control policy to empower the owners of data to secure the cloud storage and give access to authorized users through the encrypted link to the cloud storage with access control policies blinded. Finally, the security analysis demonstrates that DPEM is an optimized way of achieving EMRs secure data sharing.
Much of the excitement around blockchain is mainly due to promising applications in the financial sector. However, many also believe in the technologyâs potential to disrupt non-financial sectors and applications, including supply chains, energy, e-voting, healthcare, and education. The application of blockchain within the education sector is expected to make improvements to academic transcripts, credentials, digital libraries, and student records. Research in this domain is rapidly increasing, and current reviews summarize the proposed improvements. On the other hand, the analysis undertaken has remained at a general level that lacks the depth required to cover diverging proposals that have emerged. This review focuses on the application of blockchain for academic transcripts. The aim is to find, among the proposed models, converging aspects that resolve common challenges and may lead to a universally accepted de-facto standard. Furthermore, since academic institutions will serve as oracles to the particular blockchain applications, a discussion on their trustworthiness will be outlined to explore if the proposed applications efficiently address the oracle problem. The outcome of this review highlights the need for a standardized approach built on a public blockchain to promote faster adoption and acceptance. Furthermore, oracles should be incentivized in order for the system to be sustainable, while their identities and activities should be known and identifiable.
Ayman Alkhalifah, Alex Ng, Paul Watters, A. S. M. Kayes
In Ethereum blockchain, smart contracts are immutable, public, and distributed. However, they are subject to many vulnerabilities stemming from coding errors made by developers. Seven cybersecurity incidents occurred in Ethereum smart contracts between 2016 and 2018, which led to financial losses estimated to be over US$ 289 million. Reentrancy vulnerability was the cause of two of these incidents, and the impacts went far beyond financial loss. Several reentrancy countermeasures are available, which are based on predefined patterns that are used to prevent vulnerability exploitation before the deployment of a smart contract; however, several limitations have been identified in these countermeasures. Motivated by all these issues, the objective of this article is to help developers improve the cybersecurity of smart contracts by proposing a solution that calculates the difference between the contract balance and the total balance of all participants in a smart contract before and after any operation in a transaction that changes its state. Proof-of-concept implementations show that this solution can provide a detection and prevention mechanism against reentrancy attacks during the execution of any smart contract.
Ahmed Raza Rajput, Qianmu Li, Milad Taleby Ahvanooey
Blockchain technology is the most trusted all-in-one cryptosystem that provides a framework for securing transactions over networks due to its irreversibility and immutability characteristics. Blockchain network, as a decentralized infrastructure, has drawn the attention of various startups, administrators, and developers. This system preserves transactions from tampering and provides a tracking tool for tracing past network operations. A personal health record (PHR) system permits patients to control and share data concerning their health conditions by particular peoples. In the case of an emergency, the patient is unable to approve the emergency staff access to the PHR. Furthermore, a history record management system of the patient's PHR is required, which exhibits hugely private personal data (e.g., modification date, name of user, last health condition, etc.). In this paper, we suggest a healthcare management framework that employs blockchain technology to provide a tamper protection application by considering safe policies. These policies involve identifying extensible access control, auditing, and tamper resistance in an emergency scenario. Our experiments demonstrated that the proposed framework affords superior performance compared to the state-of-the-art healthcare systems concerning accessibility, privacy, emergency access control, and data auditing.
Mohammad Madine, Khaled Salah, Raja Jayaraman, Yousof Al-Hammadi ¡ 6 authors
Blockchain technology has the potential to revolutionize industries by offering decentralized, transparent, data provenance, auditable, reliable, and trustworthy features. However, cross-chain interoperability is one of the crucial challenges preventing widespread adoption of blockchain applications. Cross-chain interoperability represents the ability for one blockchain network to interact and share data with another blockchain network. Contemporary cross-chain interoperability solutions are centralized and require re-engineering of the core blockchain stack to enable inter-communication and data sharing among heterogeneous blockchain networks. In this paper, we propose an application-based cross-chain interoperability solution that allows blockchain networks of any architecture type and industrial focus to inter-communicate, share data, and make requests. Our solution utilizes the decentralized applications as a distributed translation layer that is capable of communicating and understanding multiple blockchain networks, thereby delegating requests and parameters among them. The architecture uses incentivized verifier nodes that maintain the integrity of shared data facilitating them to be readable by the entities of their network. We define and describe the roles and requirements of major entities of inter-operating blockchain networks in the context of healthcare. We present a detailed explanation of the sequence of interactions needed to share an Electronic Medical Record (EMR) document from one blockchain network to another along with the required algorithms. We implement the proposed solution with Ethereum-based smart contracts for two hospitals and also present cost and security analysis for the cross-chain interoperability solution. We make our smart contracts code and testing scripts publicly available.