Secure Modular Smart Contract Platform for Multi-Tenant 5G Applications

Abstract

Trusted decentralized applications based on distributed ledger technologies provide many potential opportunities to 5G applications and verticals, as well as in fifth generation mobile network (5G) enabling technologies, systems, and services. Apart from the tamper-proof exchange of transactions, distributed ledgers can provide a software environment for the trusted execution of smart contracts. In this paper, we explore the security aspects of decentralized applications and, in particular, the security of smart contracts. Distributed ledger characteristics impose distinct requirements on smart contract design, implementation, deployment, and management. We briefly present the approach to the development of secure smart contracts, and highlight key smart contract vulnerabilities and the developer tools supporting smart contract security. We developed a secure, upgradeable modular multi-contract platform. It combines per-contract Smart Contract Tunnels and per-user-based access control to minimize vulnerabilities. The smart contract platform is comprised of service-agnostic, auxiliary, and service-specific smart contracts. It can be therefore easily adapted to different 5G application verticals. For illustration and evaluation, we elaborated on the proposed solution on a case of smart electric charging. During the design and development, state-of-the-art code analysis was applied. Finally, we propose an architecture for the integration of the secure multi-contract platform into a 5G architecture. The integration proposal utilizes hybrid private-public blockchain networks for possible security, scalability, performance, and transaction cost optimization.

Decentralized Machine Autonomy for Manufacturing Servitization

“…Smart contract security imposes specific security challenges to be addressed during the entire DApp life cycle [ 20 ]. Smart contract security is, in our opinion, one of the key challenges in meeting the production-grade application requirements for business.…”

“…In the enrollment process, the logical identification of a device can be matched to the physical address (i.e., the IMEI number or MAC) or some other non-blockchain identifier (e.g., QR code). Blockchain-based identifications can be used for authorization and access control in smart contracts [ 20 ] or off-chain applications [ 26 ]. Blockchain-based solutions are even considered ( , accessed on 14 December 2021) in sign-in mechanisms for easy implementation in web-based services, either independently or in an OAuth-compatible manner.…”

“…Decentralized applications based on DLT enable monetization in the IoT [ 20 ] as a part of the decentralized business logic implemented in smart contracts. The most recognized use of blockchain technology is cryptocurrencies, where the exchange of monetary value between accounts is the primary intention.…”

“…Initial platform deployment, set-up, and management workflows, including updates and upgrades, are a part of regular DevOps procedures and system administration and are not use case-specific. We explained these procedures in [ 20 ]. In Section 5.1 , we explain how they are related to the security aspects of the smart contract platform.…”

“…Our previous research proposed a modular multi-smart contract platform which was upgradable and updatable. The platform comprised service-agnostic, service-specific, and auxiliary smart contracts [ 20 ]. This underlying smart contract platform facilitates several security contributions essential for the productization of decentralized applications.…”