Challenges in making blockchain privacy compliant for the digital world: some measures

Abstract

Due to the pandemic, most of the personal transactions relating to finance, commerce and healthcare services have gone online making privacy preservation a critical requirement. Consequently, privacy has been made a critical parameter in Data Protection Regulations leading to the search for such a privacy compliant system which is also resilient to attacks. A detailed analysis of the Blockchain technology, which is becoming popular for secure applications in the finance sector, indicates that there are several challenges relating to user identity, transaction linkability, crypto-keys management, data privacy, usability, interoperability, and post- quantum compliance of privacy regulations which need to be resolved before its widespread adoption. Being a decentralised system, there is a need to analyse the vulnerability to attacks of each layer in the Blockchain architecture. This paper discusses the development flow of some of the privacy enhancement mechanisms like ZKPs, SMPC, Ring signatures, Mixing, Homomorphic Encryption and quantum resilient computing, bringing out their features and lacunae. There is a detailed discussion of the privacy mechanisms adopted by blockchain platforms like ZCash, Zerocoin, Hyperledger, Wanchain, Coin Party, Monero, Cryptomate, MixCoin, Coinshuffle, PICNIC and New Hope. Every platform has some limitation or the other and it is essential that researchers come out with mitigation steps for the existing mechanisms and come up with improved new Privacy Enhancement Techniques. One such architecture using PET has been proposed.

Cosmic coding and transfer storage (COSMOCATS) for invincible key storage

“…The majority of other cryptocurrency uses digital signatures and cryptocurrency mining to store data on a public ledger that cannot be altered retroactively without altering all subsequent blocks: blockchains that use the hashing algorithm. As security and privacy of a blockchain solely depends on the hashing and digital signatures, a number of researchers 26,27,28,29,30,31,32 have discussed about how the fast progress of quantum computing has opened up the possibilities of attacks on blockchains through Grover's and Shor's algorithms. ECDSA is mainly used as a way to sign digitally.…”

BRON: A blockchained framework for privacy information retrieval in human resource management

“…Despite several advantages, blockchain faces privacy issues due to its transparency [13] . In a public blockchain, all transactions are recorded on a distributed ledger and the ledger is accessible by anyone being part of the blockchain.…”