Implementing a Forms of Consent Smart Contract on an IoT-based Blockchain to promote user trust

Kouzinopoulos, C.; Giannoutakis, Konstantinos M.; Votis, Konstantinos; Tzovaras, Dimitrios; Collen, Anastasija; Nijdam, Niels Alexander; Konstantas, Dimitri; Σπαθούλας, Γεώργιος; Pandey, Pankaj; Katsikas, Sokratis K.

doi:10.1109/inista.2018.8466268

Cited by 19 publications

(10 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We observe that all included papers concerning the latter category were published only after 2015. Nine [9,10,19,29,33,35,46,47,59] of those 12 papers were, in fact, published after April 2016, which is when the GDPR was adopted. We therefore hypothesize that this increase in research for generally applicable e-consent implementations is caused by the introduction of the GDPR, which introduced stricter regulations for such applications.…”

Section: Methodsmentioning

confidence: 99%

“…In situations where trust is lacking (which is often the case in online environments), including a third party may not be an option. Several of the proposed solutions [10,35,37,47,50,59] therefore rely on a blockchain to provide transparent and verifiable audit logs.…”

Section: Non-repudiationmentioning

confidence: 99%

“…Most of the blockchain solutions are based on either Ethereum [35,47] or Hyperledger Fabric [10,33,50,59]. Both of these platforms describe protocols for integration and define programming languages in which smart contracts should be written.…”

Section: Other Non-functional Requirementsmentioning

confidence: 99%

See 2 more Smart Citations

Security and Privacy Requirements for Electronic Consent

Verreydt

Yskout

Joosen

2021

ACM Trans. Comput. Healthcare

View full text Add to dashboard Cite

Electronic consent (e-consent) has the potential to solve many paper-based consent approaches. Existing approaches, however, face challenges regarding privacy and security. This literature review aims to provide an overview of privacy and security challenges and requirements proposed by papers discussing e-consent implementations, as well as the manner in which state-of-the-art solutions address them. We conducted a systematic literature search using ACM Digital Library, IEEE Xplore, and PubMed Central. We included papers providing comprehensive discussions of one or more technical aspects of e-consent systems. Thirty-one papers met our inclusion criteria. Two distinct topics were identified, the first being discussions of e-consent representations and the second being implementations of e-consent in data sharing systems. The main challenge for e-consent representations is gathering the requirements for a “valid” consent. For the implementation papers, many provided some requirements but none provided a comprehensive overview. Blockchain is identified as a solution to transparency and trust issues in traditional client-server systems, but several challenges hinder it from being applied in practice. E-consent has the potential to grant data subjects control over their data. However, there is no agreed-upon set of security and privacy requirements that must be addressed by an e-consent platform. Therefore, security- and privacy-by-design techniques should be an essential part of the development lifecycle for such a platform.

show abstract

Section: Methodsmentioning

confidence: 99%

Section: Non-repudiationmentioning

confidence: 99%

See 1 more Smart Citation

Security and Privacy Requirements for Electronic Consent

Verreydt

Yskout

Joosen

2021

ACM Trans. Comput. Healthcare

View full text Add to dashboard Cite

show abstract

“…Nowadays, the absence of IoT standards and the intrinsic complexity demand for proper security layers constitute the need of holistic IoT security solutions imperative. Apart from some notable exceptions, such as [13] where the authors propose a methodology to validate and certify different technological solutions in large-scale conditions and [14] where the cyber security aspect regarding the communication between IoT devices and external entities is addressed, there is still a long way until the total armour of the IoT.…”

Section: Emerging Advancementsmentioning

confidence: 99%

From Internet of Threats to Internet of Things: A Cyber Security Architecture for Smart Homes

Augusto-Gonzalez¹,

Collen

Evangelatos

et al. 2019

2019 IEEE 24th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD)

View full text Add to dashboard Cite

The H2020 European research project GHOST-SafeGuarding Home IoT Environments with Personalised Realtime Risk Control-aims to deploy a highly effective security framework for IoT smart home residents through a novel reference architecture for user-centric cyber security in smart homes providing an unobtrusive and user-comprehensible solution. The aforementioned security framework leads to a transparent cyber security environment by increasing the effectiveness of the existing cyber security services and enhancing system's self-defence through disruptive software-enabled network security solutions. In this paper, GHOST security framework for IoT-based smart homes is presented. It is aiming to address the security challenges posed by several types of attacks, such as network, device and software. The effective design of the overall multilayered architecture is analysed, with particular emphasis given to the integration aspects through dynamic and re-configurable solutions and the features provided by each one of the architectural layers. Additionally, real-life trials and the associated use cases are described showcasing the competences and potential of the proposed framework.

show abstract

“…Therefore, applications of blockchain towards enhancing the security and privacy of the IoT have received great attention due to its capacity in providing a fundamentally di erent approach as a distributed, transparent and accountable sys-tem [54,100,169]. Examples of application areas include identity security [24], intrusion detection systems and mitigation of distributed denial-of-service attacks [15,99], data security and digital forensic evidence preservation [2,38], as well as privacy enhancement and management [70,102]. Specifically for the IoT, the security through transparency approach in public blockchains has in many cases clear advantages compared to the usual security through obscurity model.…”

Section: Introductionmentioning

confidence: 99%

On the suitability of blockchain platforms for IoT applications: Architectures, security, privacy, and performance

et al. 2021

View full text Add to dashboard Cite

Blockchain and distributed ledger technologies have received significant interest in various areas beyond the financial sector, with profound applications in the Internet of Things (IoT), providing the means for creating truly trustless and secure solutions for IoT applications. Taking into account the weak security defences that the majority of IoT devices have, it is critical that a blockchain-based solution targeting the IoT is not only capable of addressing the many challenges IoT is facing, but also does not introduce other defects, e.g. in terms of performance, making its adoption hard to achieve. This paper aims at addressing the above needs by providing a comprehensive and coherent review of the available blockchain solutions to determine their ability to meet the requirements and tackle the challenges of the IoT, using the smart home as the reference domain. Key architectural aspects of blockchain solutions, like the platforms' software and network setups, the consensus protocols used, as well as smart contracts, are examined in terms of their ability to withstand various types of common IoT and blockchain attacks, deliver enhanced privacy features, and assure adequate performance levels while processing large amounts of transactions being generated in an IoT environment. The analysis carried out identified that the defences currently provided by blockchain platforms are not su cient to thwart all the prominent attacks against blockchains, with blockchain 1.0 and 2.0 platforms being susceptible to the majority of them. On the other side, privacy related mechanisms are being supported, to varying degrees, by all platforms investigated; however, each of the them tackles specific only privacy aspects, thus rendering the overall privacy evaluation a challenging task which needs to be considered in an ad-hoc basis. If the underlying consensus protocols' performance and fault tolerance is also considered, then only a small number of platforms meet the requirements of our reference IoT domain. This project has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement no. 786698. The work reflects only the authors' view and the Agency is not responsible for any use that may be made of the information it contains.

show abstract

Implementing a Forms of Consent Smart Contract on an IoT-based Blockchain to promote user trust

Cited by 19 publications

References 13 publications

Security and Privacy Requirements for Electronic Consent

Security and Privacy Requirements for Electronic Consent

From Internet of Threats to Internet of Things: A Cyber Security Architecture for Smart Homes

On the suitability of blockchain platforms for IoT applications: Architectures, security, privacy, and performance

Contact Info

Product

Resources

About