Formalizing Dynamic Behaviors of Smart Contract Workflow in Smart Healthcare Supply Chain

Rahman, Mohammad Saidur; Khalil, Ibrahim; Bouras, Abdelaziz

doi:10.1007/978-3-030-63095-9_25

Cited by 4 publications

(5 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Colored Petri Nets in particular became popular for formalizing blockchain-based protocols, e.g., [15][16][17]. Both can be understood as state machines, and mappings from blockchain data structures (tokens) to coloured CPN tokens exists.…”

Section: Formalizing Blockvokementioning

confidence: 99%

“…New Internet security-related protocols are proposed regularly and analysed in terms of security and correctness using different types of formalisms, e.g., π-calculus [29], Communicating Sequential Processes [30], or Colored Petri Nets (CPNs) [31]. CPNs in particular became popular to formalize and verify blockchain-based protocols, smart contracts and blockchain-based applications, e.g., [15][16][17]32] and further previous research demonstrated their feasibility for formalising and analysing protocols [33][34][35][36]. Most recently, Pinna and Tonelli [37] analysed and classified the application of the Petri net formalism in the design and development of Smart Contracts for modelling as well as verification purposes.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation

2022

View full text Add to dashboard Cite

Certificates are integral to the security of today’s Internet. Protocols like BlockVoke allow secure, timely and efficient revocation of certificates that need to be invalidated. ACME, a scheme used by the non-profit Let’s Encrypt Certificate Authority to handle most parts of the certificate lifecycle, allows automatic and seamless certificate issuance. In this work, we bring together both protocols by describing and formalizing an extension of the ACME protocol to support BlockVoke, combining the benefits of ACME’s certificate lifecycle management and BlockVoke’s timely and secure revocations. We then formally verify this extension through formal methods such as Colored Petri Nets (CPNs) and conduct a risk and threat analysis of the ACME/BlockVoke extension using the ISSRM domain model. Identified risks and threats are mitigated to secure our novel extension. Furthermore, a proof-of-concept implementation of the ACME/BlockVoke extension is provided, bridging the gap towards deployment in the real world.

show abstract

Section: Formalizing Blockvokementioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation

2022

View full text Add to dashboard Cite

show abstract

“…Amoah et al [35] identified a Denial-of-Service (DoS) attack against the DNP3 protocol as part of a security analysis using a CPN model. Duo et al and others [16][17][18] utilized CPN models to formalize and verify blockchain-based protocols, smart contracts and blockchainbased applications. Leiding et al [19,20] first formalized the Authcoin protocol [21] using CPNs and subsequently performed a risk and threat analysis using the ISSRM domain model [22] before mitigating identified risks using security risk-oriented patterns (SRPs) [23,24].…”

Section: Related Workmentioning

confidence: 99%

“…Colored Petri Nets in particular became popular for formalizing blockchain-based protocols, e.g., [16][17][18]. Both can be understood as state machines, and a mapping exists from blockchain data structures (tokens) to colored CPN tokens.…”

Section: Introductionmentioning

confidence: 99%

Formalizing the Blockchain-Based BlockVoke Protocol for Fast Certificate Revocation Using Colored Petri Nets

2021

View full text Add to dashboard Cite

Protocol flaws such as the well-known Heartbleed bug, security and privacy issues or incomplete specifications, in general, pose risks to the direct users of a protocol and further stakeholders. Formal methods, such as Colored Petri Nets (CPNs), facilitate the design, development, analysis and verification of new protocols; the detection of flaws; and the mitigation of identified security risks. BlockVoke is a blockchain-based scheme that decentralizes certificate revocations, allows certificate owners and certificate authorities to revoke certificates and rapidly distributes revocation information. CPNs in particular are well-suited to formalize blockchain-based protocols—thus, in this work, we formalize the BlockVoke protocol using CPNs, resulting in a verifiable CPN model and a formal specification of the protocol. We utilize an agent-oriented modeling (AOM) methodology to create goal models and corresponding behavior interface models of BlockVoke. Subsequently, protocols semantics are defined, and the CPN models are derived and implemented using CPN Tools. Moreover, a full state-space analysis of the resulting CPN model is performed to derive relevant model properties of the protocol. The result is a complete and correct formal BlockVoke specification used to guide future implementations and security assessments.

show abstract

“…Initially, blockchain applications were limited to cryptocurrencies and financial transactions. The invention of smart contracts oversees the development of more diverse application scenarios such as healthcare [11] and supply chains [12]. Since blockchain is a decentralized system, it can solve a single point of failure from the cloud.…”

Section: Introductionmentioning

confidence: 99%

Blockchain-Based Access Control for Secure Smart Industry Management Systems

Kalapaaking

Khalil

Rahman

et al. 2022

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Smart manufacturing systems involve a large number of interconnected devices resulting in massive data generation. Cloud computing technology has recently gained increasing attention in smart manufacturing systems for facilitating cost-effective service provisioning and massive data management. In a cloud-based manufacturing system, ensuring authorized access to the data is crucial. A cloud platform is operated under a single authority. Hence, a cloud platform is prone to a single point of failure and vulnerable to adversaries. An internal or external adversary can easily modify users' access to allow unauthorized users to access the data. This paper proposes a role-based access control to prevent modification attacks by leveraging blockchain and smart contracts in a cloud-based smart manufacturing system. The role-based access control is developed to determine users' roles and rights in smart contracts. The smart contracts are then deployed to the private blockchain network. We evaluate our solution by utilizing Ethereum private blockchain network to deploy the smart contract. The experimental results demonstrate the feasibility and evaluation of the proposed framework's performance.

show abstract

Formalizing Dynamic Behaviors of Smart Contract Workflow in Smart Healthcare Supply Chain

Cited by 4 publications

References 16 publications

Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation

Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation

Formalizing the Blockchain-Based BlockVoke Protocol for Fast Certificate Revocation Using Colored Petri Nets

Blockchain-Based Access Control for Secure Smart Industry Management Systems

Contact Info

Product

Resources

About