A Blockchain Approach for Negotiating Trust in Iot by Skailer Knezevic

Total Page:16

File Type:pdf, Size:1020Kb

A Blockchain Approach for Negotiating Trust in Iot by Skailer Knezevic A Blockchain Approach for Negotiating Trust in IoT by Skailer Knezevic Bachelor of Science College of Engineering and Science Florida Institute of Technology 2017 A thesis submitted to the College of Engineering and Science at Florida Institute of Technology in partial fulfillment of the requirements for the degree of Masters of Science in Information Assurance and Cybersecurity Melbourne, Florida May, 2020 ⃝c Copyright 2020 Skailer Knezevic All Rights Reserved The author grants permission to make single copies. We the undersigned committee hereby approve the attached thesis A Blockchain Approach for Negotiating Trust in IoT by Skailer Knezevic Heather Crawford, Ph.D. Assistant Professor Computer Engineering and Sciences Committee Chair Andy Stanfield, Ph.D. Assistant Professor School of Arts and Communication Outside Committee Member Bernard Parenteau, Ph.D. Assistant Professor Computer Engineering and Sciences Committee Member Philip Bernhard, Ph.D. Associate Professor and Department Head Computer Engineering and Sciences ABSTRACT Title: A Blockchain Approach for Negotiating Trust in IoT Author: Skailer Knezevic Major Advisor: Heather Crawford, Ph.D. \The internet is no longer a web that we connect to. Instead, its a computerized, networked, and interconnected world that we live in. This is the future, and what were calling the Internet of Things."- Bruce Schneier, 2019 The Internet of Things is becoming a big part of our lives. Every year there are more devices with the capability to connect on the internet and communicate with each other. Today there are over 400 million IoT devices in the world, and this number is predicted to grow to 1.5 billion devices by 2022 [14]. It is becoming more difficult to manage all IoT devices and to know with which device to connect to request a service. In addition, a device can fail at some point or stop provid- ing a good service. There is a need to find a better way to store data about all transactions between devices to provide the basis for a way to establish the trust between devices. In this thesis, we propose a solution to use a blockchain in order to store transaction data and an algorithm that establishes trust between devices in the same network. iii Table of Contents Abstract iii List of Figures vii List of Tables ix Acknowledgments x 1 Introduction 1 1.1 Problem Statement . 1 1.2 Proposed Solution . 2 1.3 Research Question . 3 1.4 Approach . 3 1.5 Organization of the Thesis . 4 2 Background 5 2.1 What is IoT? . 5 2.2 What is blockchain? . 7 2.2.1 Types . 11 2.2.2 Consensus . 13 2.2.3 Mining . 20 iv 2.3 Cryptographic Algorithms . 23 2.4 Use of Blockchain . 24 2.5 Some Existing Blockchains . 25 2.5.1 IOTA . 25 2.5.2 Ripple . 27 2.5.3 Hyperledger Fabric . 28 2.5.4 Ethereum . 31 2.5.5 Cosmos . 32 2.5.6 Characteristic Comparison . 34 2.6 IoT Blockchain Smart Homes . 34 2.7 Summary . 38 3 Approach 39 3.1 IOTA Tangle . 39 3.2 Hyperledger Fabric . 43 3.2.1 Scenarios . 45 3.2.1.1 Scenario 1 . 45 3.2.1.2 Scenario 2 . 46 3.2.2 Algorithm and Code . 47 3.2.2.1 Blockchain Code . 47 3.2.2.2 Connecting with Hyperledger . 48 3.2.2.3 Algorithm for Establishing Trust . 48 3.2.2.4 Blockchain Structure . 51 3.3 Summary . 53 v 4 Experiments 55 4.1 Experimental Design . 55 4.2 Scenario 1 . 57 4.3 Scenario 2 . 58 4.4 Experiments . 59 4.4.1 What devices can provide a specific service? . 59 4.4.2 Which device is the best? . 60 4.4.3 New devices wants to provide a service? . 61 4.4.4 Service is provided- show transaction . 61 4.5 Summary . 62 5 Conclusion 64 5.1 Findings . 64 5.2 Results . 65 5.3 Future Work . 65 5.4 Revisit . 66 References 68 Appendix Scoring Trust 79 vi List of Figures 2.1 Merkle Tree . 9 2.2 SHA256 Hashing . 10 2.3 Cryptographic Puzzle Target . 14 2.4 Blockchain Attack . 16 2.5 Mining Power Diagram . 22 2.6 Hyperledger Fabric Connections . 29 2.7 Hyperledger Fabric Trade . 30 3.1 IOTA Layer Calculator . 41 3.2 Compass Seed . 42 3.3 Tangle JSON configuration . 42 3.4 IRI Node . 43 3.5 JavaScript File . 48 3.6 Hyperledger Fabric Blockchain . 51 3.7 Hyperledger Fabric Block . 52 4.1 New Device . 56 4.2 Transaction . 57 4.3 Adding New Device . 58 4.4 Service Providers . 59 4.5 Service Providers 2 . 60 vii 4.6 Device Recommendation . 60 4.7 Transaction . 61 viii List of Tables 2.1 Comparison of blockchains . 34 3.1 Connection Points Distribution . 49 3.2 Last Connection Points . 50 3.3 Device Make Points . 50 4.1 Querying Speed . 62 ix Acknowledgements I am extremely grateful to my advisor Dr. H. Crawford for guiding me through the whole process of writing this thesis. Her constructive criticism, insightful sug- gestions, and relentless support helped me to work hard to reach my goals. She motivated me to do better and never give up. I would like to extend my sincere thanks to my committee members Dr. A. Stan- field and Dr. B. Parenteau for their time and insightful comments. I would like to acknowledge the help of my colleague Ghassen Kilani for giving me valuable advice on doing academic research and suggesting a few research pa- pers that were referenced in this thesis. I would like to thank my parents and my brother on encouraging me to pursue my graduate degree. I would also like to extend my gratitude to my friend William Wilson for his profound belief in my abilities and keeping me motivated in moments when I was doubting myself. x Chapter 1 Introduction 1.1 Problem Statement There are around 400 million IoT devices today [9], and even smaller networks can have tens or hundreds of devices. Although the traditional database can store data about IoT devices and their transactions, designing a database to keep track of all transactions can be challenging with a large number of devices. In addition, tra- ditional databases are often susceptible to attacks such as SQL injection, denial of service (DOS), and privilege escalation, where an attacker can permanently change or delete data inside the database [32]. With the invention of Bitcoin blockchain in 2008 [54], the possibility of storing data differently than in the traditional database and making the data immutable emerged. By making the data immutable, Bitcoin has for a goal to preserve the integrity of data. Another issue that emerged with a large number of IoT devices is that it is hard to know which device to trust in the network. It gets increasingly hard to know 1 from which device to request the service or exchange information. There is an assumption that devices that are connecting trust each other, and often when a new device joins the network and tries to request a service, a requester is presented with multiple options, but a little to no information about the device from which it is requesting a service. Usually, a requester can only see the names of other devices that network admin or owners of that device gave to it, and it can be changed. Another issue is when there are multiple devices that provide the same service, it is hard to pick which one to use. Therefore, there is a need for a solution that can store data about every transaction and allow devices to use that data in making a decision from which device to request a service, and the data needs to be resistant to cyber-attacks. 1.2 Proposed Solution Often blockchains that are used for IoT devices have only functionality to record transactions between devices and store them in a blockchain. We propose using a blockchain for storing information about devices and transactions between devices and using the data for negotiation of the trust between devices. Our solution allows the requester to query data from a blockchain about another device such as which devices provide the service that device needs. What device among those devices is most trustworthy? This solution will help devices to decide which device they can trust the most. This will also allow devices to choose between multiple service providers. 2 1.3 Research Question In this thesis, we answer to what degree we can store and retrieve information about IoT devices on a blockchain. Can this information be used to answer such as how frequently does one device provide the requested service? How often that device provides a service to the requester? Can a new device that is entering the IoT space provide or request a service? 1.4 Approach We use a blockchain called Hyperledger Fabric to store device and transaction data on a blockchain. Our algorithm takes into account the number of times that device provided any service as well as how many times that device provided the requested service. The algorithm also checks for the number of times the device provided service to the requester. Furthermore, the last time the device provided this service as well as year when the device was made and hardware requirements checks. All devices are scored based on those parameters, and the device with the highest score is suggested as the recommended device. In case that there is more than one device with the same score, the device with a higher number of transactions is suggested. Thus, our approach provides a method by which devices can search for devices that provide the service that they need.
Recommended publications
  • Evaluating Inclusion, Equality, Security, and Privacy in Pseudonym Parties and Other Proofs of Personhood
    Identity and Personhood in Digital Democracy: Evaluating Inclusion, Equality, Security, and Privacy in Pseudonym Parties and Other Proofs of Personhood Bryan Ford Swiss Federal Institute of Technology in Lausanne (EPFL) November 5, 2020 Abstract of enforced physical security and privacy can address the coercion and vote-buying risks that plague today’s E- Digital identity seems at first like a prerequisite for digi- voting and postal voting systems alike. We also examine tal democracy: how can we ensure “one person, one vote” other recently-proposed approaches to proof of person- online without identifying voters? But the full gamut of hood, some of which offer conveniencessuch as all-online digital identity solutions – e.g., online ID checking, bio- participation. These alternatives currently fall short of sat- metrics, self-sovereign identity, and social/trust networks isfying all the key digital personhood goals, unfortunately, – all present severe flaws in security, privacy, and trans- but offer valuable insights into the challenges we face. parency, leaving users vulnerable to exclusion, identity loss or theft, and coercion. These flaws may be insur- mountable because digital identity is a cart pulling the Contents horse. We cannot achieve digital identity secure enough to support the weight of digital democracy, until we can 1 Introduction 2 build it on a solid foundation of digital personhood meet- ing key requirements. While identity is about distinguish- 2 Goals for Digital Personhood 4 ing one person from another through attributes or affilia- tions, personhood is about giving all real people inalien- 3 Pseudonym Parties 5 able digital participation rights independent of identity, 3.1 Thebasicidea.
    [Show full text]
  • Applicability and Appropriateness of Distributed Ledgers Consensus Protocols in Public and Private Sectors: a Systematic Review
    Received February 13, 2019, accepted February 27, 2019, date of publication March 21, 2019, date of current version April 13, 2019. Digital Object Identifier 10.1109/ACCESS.2019.2904181 Applicability and Appropriateness of Distributed Ledgers Consensus Protocols in Public and Private Sectors: A Systematic Review A. SHAHAAB 1, B. LIDGEY2, C. HEWAGE 1, AND I. KHAN1 1Cardiff School of Technologies, Cardiff Metropolitan University, Cardiff, CF5 2YB, U.K. 2Companies House, Cardiff, CF14 3UZ, U.K. Corresponding author: A. Shahaab ([email protected]) This work was supported by the Knowledge Economy Skills Scholarships through a major pan-Wales operation supported by the European Social Funds through the Welsh Government, and through Companies House, U.K., under Grant CMK219. ABSTRACT Advancement of consensus protocols in recent years has enabled distributed ledger technologies (DLTs) to find its application and value in sectors beyond cryptocurrencies. Here we reviewed 66 known consensus protocols and classified them into philosophical and architectural categories, also providing a visual representation. As a case study, we focus on the public sector and highlighted potential protocols. We have also listed these protocols against basic features and sector preference in a tabular format to facilitate selection. We argue that no protocol is a silver bullet, therefore should be selected carefully, considering the sector requirements and environment. INDEX TERMS Blockchain technology, consensus algorithms, distributed consensus protocols, distributed ledger technology, DLTs for public sector, distributed systems, Govtech, permissioned and permissionless blockchains. I. INTRODUCTION information across a distributed ledger. The objective of all Achieving consensus is a fundamental problem in distributed of these attempts is to achieve availability and consistency computing.
    [Show full text]
  • Sybil Attacks on Identity-Augmented Proof-Of-Stake
    King’s Research Portal DOI: 10.1016/j.comnet.2021.108424 Document Version Early version, also known as pre-print Link to publication record in King's Research Portal Citation for published version (APA): Platt, M., & McBurney, P. (2021). Sybil Attacks on Identity-Augmented Proof-of-Stake. COMPUTER NETWORKS , 199, [108424]. https://doi.org/10.1016/j.comnet.2021.108424 Citing this paper Please note that where the full-text provided on King's Research Portal is the Author Accepted Manuscript or Post-Print version this may differ from the final Published version. If citing, it is advised that you check and use the publisher's definitive version for pagination, volume/issue, and date of publication details. And where the final published version is provided on the Research Portal, if citing you are again advised to check the publisher's website for any subsequent corrections. General rights Copyright and moral rights for the publications made accessible in the Research Portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognize and abide by the legal requirements associated with these rights. •Users may download and print one copy of any publication from the Research Portal for the purpose of private study or research. •You may not further distribute the material or use it for any profit-making activity or commercial gain •You may freely distribute the URL identifying the publication in the Research Portal Take down policy If you believe that this document breaches copyright please contact [email protected] providing details, and we will remove access to the work immediately and investigate your claim.
    [Show full text]
  • Coins, Clubs, and Crowds: Scaling and Decentralization in Next-Generation Blockchains
    Coins, Clubs, and Crowds: Scaling and Decentralization in Next-Generation Blockchains Prof. Bryan Ford Decentralized and Distributed Systems (DEDIS) School of Information and Communications (IC) [email protected] – dedis.epfl.ch Vienna BDLT Summer School – September 3, 2019 Where there’s data, there’s risk... Access, sharing compounds risk Weakest-Link Security “You can trust us!” Shared Access Partner A Business Partner B Partner C “All of us!” A Fundamental Challenge In today’s IT systems, security is an afterthought ● Designs embody “weakest-link” security Scaling to bigger systems → weaker security ● Greater chance of any “weak link” breaking Central Databases = Attractive Targets One of three credit rating agencies in the US ● Exposed sensitive personal information about 143 million people (44% of US population) The DEDIS lab at EPFL: Mission Design, build, and deploy secure privacy-preserving Decentralized and Distributed Systems (DEDIS) • Distributed: spread widely across the Internet & world • Decentralized: independent participants, no central authority, no single points of failure or compromise Overarching theme: building decentralized systems that distribute trust widely with strongest-link security Strongest-Link Security Weakest-Link Security Turning Around the Security Game Design IT systems so that making them bigger makes their security increase instead of decrease Weakest-link Strongest-link Scalable security security Strongest-link security DEDIS Laboratory Members Bryan Ford Philipp Jovanovic Associate Professor Postdoctoral Scholar Lefteris Kokoris-Kogias Kirill Nikitin Cristina Basescu Enis Ceyhun Alp Ph.D. Student Ph.D. Student Ph.D. Student Ph.D. Student Jeff R. Allen Kelong Cong Gaylor Bosson Noémien Kocher Software Engineer Software Engineer Software Engineer Software Engineer Today’s Hot Decentralized Technology (credit: Tony Arcieri) Bitcoin (2008) First successful decentralized cryptocurrency… How to track wealth (or anything)? Things Ledgers ● Gold, beads, cash..
    [Show full text]
  • Sok: Layer-Two Blockchain Protocols
    SoK: Layer-Two Blockchain Protocols Lewis Gudgeon1, Pedro Moreno-Sanchez2, Stefanie Roos3, Patrick McCorry4, and Arthur Gervais1;5;6 1 Imperial College London, United Kingdom 2 TU Wien, Austria 3 TU Delft, Netherlands 4 PISA Research, United Kingdom 5 Lucerne University of Applied Sciences and Arts, Switzerland 6 Liquidity Network, Switzerland Abstract. Blockchains have the potential to revolutionize markets and services. However, they currently exhibit high latencies and fail to handle transaction loads comparable to those managed by traditional financial systems. Layer-two protocols, built on top of (layer-one) blockchains, avoid disseminating every transaction to the whole network by exchang- ing authenticated transactions off-chain. Instead, they utilize the expen- sive and low-rate blockchain only as a recourse for disputes. The promise of layer-two protocols is to complete off-chain transactions in sub-seconds rather than minutes or hours while retaining asset security, reducing fees and allowing blockchains to scale. We systematize the evolution of layer-two protocols over the period from the inception of cryptocurrencies in 2009 until today, structuring the multifaceted body of research on layer-two transactions. Categorizing the research into payment and state channels, commit-chains and pro- tocols for refereed delegation, we provide a comparison of the protocols and their properties. We provide a systematization of the associated syn- chronization and routing protocols along with their privacy and security aspects. This Systematization of Knowledge (SoK) clears the layer-two fog, highlights the potential of layer-two solutions and identifies their unsolved challenges, indicating propitious avenues of future work. Keywords: Applied Cryptography, Blockchain Applications, Layer-Two Blockchain Protocols, Blockchain Scaling, Cryptocurrency Adoption 1 Introduction Blockchains offer a mechanism through which mutually mistrusting entities can cooperate in the absence of a trusted third party.
    [Show full text]
  • UNICORE D2.3 Platform Requirements
    H2020-ICT-2018-2-825377 UNICORE UNICORE: A Common Code Base and Toolkit for Deployment of Applications to Secure and Reliable Virtual Execution Environments Horizon 2020 - Research and Innovation Framework Programme D2.3 Platform Requirements - Final Due date of deliverable: 30 September 2019 Actual submission date: 30 September 2019 Start date of project 1 January 2019 Duration 36 months Lead contractor for this deliverable Accelleran NV Version 1.0 Confidentiality status “Public” c UNICORE Consortium 2020 Page 1 of (62) Abstract This is the final version of the UNICORE “Platform Requirements - Final” (D2.3) document. The original version (D2.1 Requirements) was published in April 2019. The differences between the two versions of this document are detailed in the Executive Summary. The goal of the EU-funded UNICORE project is to develop a common code-base and toolchain that will enable software developers to rapidly create secure, portable, scalable, high-performance solutions starting from existing applications. The key to this is to compile an application into very light-weight virtual machines - known as unikernels - where there is no traditional operating system, only the specific bits of operating system functionality that the application needs. The resulting unikernels can then be deployed and run on standard high-volume servers or cloud computing infrastructure. The technology developed by the project will be evaluated in a number of trials, spanning several applica- tion domains. This document describes the current state of the art in those application domains from the perspective of the project partners whose businesses encompass those domains. It then goes on to describe the specific target scenarios that will be used to evaluate the technology within each application domain, and how the success of each trial will be judged.
    [Show full text]
  • A Theoretical Treatment of Blockchain Scaling Protocols
    Research Collection Doctoral Thesis A Theoretical Treatment of Blockchain Scaling Protocols Author(s): Avarikioti, Georgia Publication Date: 2021 Permanent Link: https://doi.org/10.3929/ethz-b-000473637 Rights / License: Creative Commons Attribution 4.0 International This page was generated automatically upon download from the ETH Zurich Research Collection. For more information please consult the Terms of use. ETH Library Diss. ETH No. 27442 A Theoretical Treatment of Blockchain Scaling Protocols A dissertation submitted to attain the degree of Doctor of Sciences of ETH Zurich (Dr. sc. ETH Zurich) presented by Georgia Avarikioti M.Sc., National and Kapidostrian University of Athens born on 14 July 1988 citizen of Greece accepted on the recommendation of Prof. Dr. R. Wattenhofer, examiner Prof. Dr. M. Maffei, Prof. Dr. A. Miller, co-examiners 2021 First Edition 2021 Copyright © 2021 by Georgia Avarikioti Series in Distributed Computing, Volume 35 TIK-Schriftenreihe-Nr. 187 iii In loving memory of my dearest friend Marisa, keeping the promise we once made to change this unjust world. iv v Rather than love, than money, than fame, give me truth. - Henry David Thoreau vi Acknowledgements First and foremost, I want to thank my PhD advisor, Prof. Roger Wattenhofer, for this beautiful journey. Roger was more than an advisor, a mentor and a friend, through these years. Our meetings were always a time of joy and clarity, be it in scientific matters, or simply discussions about society and life. Apart from the academic guidance, Roger instilled in me confidence and trust in myself, which I was severely lacking coming from a different background (especially when he was losing in Tichu!).
    [Show full text]
  • King's Research Portal
    King’s Research Portal DOI: 10.1007/978-3-030-79318-0_9 Document Version Early version, also known as pre-print Link to publication record in King's Research Portal Citation for published version (APA): Platt, M., & McBurney, P. (2021). Self-Governing Public Decentralised Systems: Work in Progress. In T. Groß, & L. Viganò (Eds.), Proceedings of the 10th International Workshop on Socio-Technical Aspects in Security (pp. 154-167). (Lecture Notes in Computer Science; Vol. 12812). Springer. https://doi.org/10.1007/978-3-030-79318- 0_9 Citing this paper Please note that where the full-text provided on King's Research Portal is the Author Accepted Manuscript or Post-Print version this may differ from the final Published version. If citing, it is advised that you check and use the publisher's definitive version for pagination, volume/issue, and date of publication details. And where the final published version is provided on the Research Portal, if citing you are again advised to check the publisher's website for any subsequent corrections. General rights Copyright and moral rights for the publications made accessible in the Research Portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognize and abide by the legal requirements associated with these rights. •Users may download and print one copy of any publication from the Research Portal for the purpose of private study or research. •You may not further distribute the material or use it for any profit-making activity or commercial gain •You may freely distribute the URL identifying the publication in the Research Portal Take down policy If you believe that this document breaches copyright please contact [email protected] providing details, and we will remove access to the work immediately and investigate your claim.
    [Show full text]
  • The Known Traveller Digital Identity Concept 21 4
    System Initiative on Shaping the Future of Mobility The Known Traveller Unlocking the potential of digital identity for secure and seamless travel In collaboration with Accenture January 2018 Contents 3 Preface 4 Foreword 5 Executive summary 7 1. Increasing pressures on security in travel 12 2. Methodology 14 3. The Known Traveller Digital Identity concept 21 4. Paradigm shift to a digital identity 23 5. Principles and core technologies 31 6. Building a prototype 36 7. Next steps: Test and scale 38 Recommendations 40 Acknowledgements 41 Appendix A 42 Endnotes World Economic Forum® © 2018 – All rights reserved. No part of this publication may be reproduced or Transmitted in any form or by any means, including Photocopying and recording, or by any information Storage and retrieval system. REF 090118 - case 00036151 Preface In today’s fractured world, governments, travel and tourism industry leaders and the public are increasingly concerned by security threats. Rather than promoting isolationism and responding reactively to security shocks, stakeholders must collaborate to protect public safety while facilitating the movement of legitimate travellers. Although governments use private companies to help optimize travel security processes, they must deepen their engagement and increase collaborative relationships with diverse stakeholders to maximize transformation of the travel security system. In turn, international organizations that influence travel regulations, as well as airlines, hotels, financial services and technology Cheryl Martin providers selling services to travellers, must go beyond the typical industry Managing Director, alliances and work with governments and each other. Head of Industries and Member of the Emerging technologies – from biometrics to distributed ledger to machine Managing Board, learning – offer tremendous potential to transform and enhance the global travel World Economic Forum security system.
    [Show full text]
  • Very Short Primer on Blockchain Technology for Database
    Tutorial Very Short Primer on Blockchain Technology for Database Researchers Zsolt István IT University of Copenhagen, Denmark [email protected] ABSTRACT Blockchain is an emerging technology, considered increasingly often beyond the cryptocurrency world for business-to-business use-cases. In contrast to public blockchains such as Bitcoin, that are open systems in which anyone can participate, in business- to-business scenarios the membership of the service is controlled (permissioned blockchain). This permits the use of Byzantine Figure 1: At the core of all blockchains is a verifiable data fault tolerant (BFT) consensus protocols at the core of the service structure, typically in the form of an append-only log. to establish a total order of transactions, instead of the more ex- Cryptographic hashes (fingerprints) included in blocks re- pensive Proof-of-Work-based consensus protocols. Permissioned cursively tie them to the previous blocks. blockchains typically set out to solve problems in the space where databases have traditionally resided, with the main difference being that the former decentralizes trust. There are numerous re- into two categories based on who is allowed to participate in the search proposals in the intersection of databases and blockchains. consensus algorithm and, as a result, add data to the data struc- Sadly, there are still many misconceptions about this technology ture: First, permissionless blockchains where anyone is allowed which leads to confusion in the community. The main goal of this to participate and, second, permissioned blockchains where only primer is to give an overview of the relevant topics and provide selected entities can participate (this also assumes that the nodes pointers for further reading.
    [Show full text]
  • A Review on the Role of Blockchain Technology in the Healthcare Domain
    electronics Review A Review on the Role of Blockchain Technology in the Healthcare Domain Haider Dhia Zubaydi 1, Yung-Wey Chong 1,* , Kwangman Ko 2, Sabri M. Hanshi 1 and Shankar Karuppayah 1 1 National Advanced IPv6 Centre, Universiti Sains Malaysia, Gelugor 11800, Penang, Malaysia; [email protected] (H.D.Z.); [email protected] (S.M.H.); [email protected] (S.K.) 2 School of Computer and Information Engineering, Sangji University, Gangwon 220-702, Korea; [email protected] * Correspondence: [email protected] Received: 31 March 2019; Accepted: 12 May 2019; Published: 15 June 2019 Abstract: Recently, there have been increasing calls for healthcare providers to provide controls for patients over their personal health records. Nevertheless, security issues concerning how different healthcare providers exchange healthcare information have caused a flop in the deployment of such systems. The ability to exchange data securely is important so that new borderless integrated healthcare services can be provided to patients. Due to its decentralized nature, blockchain technology is a suitable driver for the much-needed shift towards integrated healthcare, providing new insights and addressing some of the main challenges of many healthcare areas. Blockchain allows healthcare providers to record and manage peer-to-peer transactions through a network without central authority. In this paper, we discuss the concept of blockchain technology and hurdles in their adoption in the healthcare domain. Furthermore, a review is conducted on the latest implementations of blockchain technology in healthcare. Finally, a new case study of a blockchain-based healthcare platform is presented addressing the drawbacks of current designs, followed by recommendations for future blockchain researchers and developers.
    [Show full text]
  • Blockchain Security at Scale
    Report from Dagstuhl Seminar 18461 Blockchain Security at Scale Edited by Rainer Böhme1, Joseph Bonneau2, and Ittay Eyal3 1 Universität Innsbruck, AT, [email protected] 2 New York University, US, [email protected] 3 Technion – Haifa, IL, [email protected] Abstract 38 researchers affiliated with over 25 different institutions in 7 countries met during Dagstuhl Seminar 18461 for discussing open problems regarding “Blockchain Security at Scale.” The sem- inar was split into eight blocks of two presentations each. The mode for each talk was 15 minutes of blackboard-only presentation followed by 30 minutes of discussion. Discussions not fitting into this limit were resumed in smaller break-out groups. This report documents the scheduled talks as well as the improvised sessions for in-depth discussion. Seminar November 11–16, 2018 – http://www.dagstuhl.de/18461 2012 ACM Subject Classification Networks → Network security, Computer systems organiza- tion → Peer-to-peer architectures Keywords and phrases Blockchain, Consensus, Cryptography, Distributed Systems, Game The- ory, Scaling Digital Object Identifier 10.4230/DagRep.8.11.21 Edited in cooperation with Assimakis Kattis, Patrik Keller, Itay Tsabary 1 Executive Summary Rainer Böhme (Universität Innsbruck, AT) License Creative Commons BY 3.0 Unported license © Rainer Böhme The security of blockchain-based systems has attracted great interest in the research com- munity following the initial financial success of Bitcoin. Several security notions for blockchain- based systems have been proposed, varying in degree of formality and applicability to real- world systems. However, a major blind spot remains about the environment surrounding blockchain-based systems. This environment is typically assumed to be static (irresponsive to activities of the blockchain system).
    [Show full text]