BchainTalk Forum - Community for Blockchain Believers

Join like-minded people in a collaborative culture to share & learn.

Latest topics
» Scientists Propose Using Blockchain In Dairy Products Industry
Today at 12:59 am by Vladdirescu

» ICO Problems: Double-check Where You Are Sending Your Money To
Thu Jul 20, 2017 10:00 pm by Vladdirescu

» Russia To Legalize and Regulate ICOs
Thu Jul 20, 2017 1:28 am by Vladdirescu

» Social Media and Blockchain: Where Everyone Has Voice and Freedom
Fri Jul 14, 2017 11:14 pm by Vladdirescu

» The Chinese Exhibition Market is Starting to Implement a Blockchain
Thu Jul 13, 2017 2:36 am by Vladdirescu

» Billion-dollar Unregulated Gaming Industry to Embrace Blockchain
Sat Jul 08, 2017 1:55 am by Vladdirescu

» Blockchain Crowdfunding Is Attracting Hundreds Of Millions Of Dollars – And It’s Growing Fast
Fri Jun 23, 2017 8:57 pm by Vladdirescu

» Is Blockchain Really the Future of Energy?
Thu Jun 22, 2017 11:54 pm by Vladdirescu

» Global Commodity Exchange To Use Blockchain For Trading Diamonds
Fri Jun 16, 2017 10:18 pm by Vladdirescu

» How to buy Bitcoin in India ?
Tue Jun 13, 2017 2:53 pm by blockchainboy

» Coinbase Scam
Tue Jun 13, 2017 9:26 am by theepicbonus

» Poland is Moving Towards Embracing Bitcoin and Blockchain Technologies
Tue Jun 13, 2017 3:44 am by Vladdirescu

» The First Islamic Bank to Use Blockchain Technology
Tue Jun 13, 2017 12:14 am by Vladdirescu

» The Number of Blockchain-related Vacancies on LinkedIn Has Tripled
Fri Jun 09, 2017 2:30 am by Vladdirescu

» Sberbank Conducts the First Letter of Credit Transaction on the Blockchain
Tue Jun 06, 2017 2:36 am by Vladdirescu

» Blockchain Startup TrueFlip Banned in Russia
Mon Jun 05, 2017 11:26 pm by Vladdirescu

» Energy Sector Welcomes Blockchain Worldwide
Fri Jun 02, 2017 2:11 am by Vladdirescu

» Dubai is Leading the Way for Blockchain Implemenation
Tue May 30, 2017 10:26 pm by Vladdirescu

» The Next Generation of Blockchain Tech - ‘Quantum-Secured Blockchain
Sat May 27, 2017 12:20 am by Vladdirescu

» Blockchain-Based Cryptocurrency Travacoin Used as Compensation for Flight Delays
Thu May 25, 2017 3:15 am by Vladdirescu


Fraud and privacy problems on the blockchain

View previous topic View next topic Go down

Fraud and privacy problems on the blockchain

Post by Gaurav tiwari on Tue Apr 25, 2017 2:09 pm

The blockchain technology that drives the Bitcoin economy is essentially a decentralized, immutable database of transactions open for anyone to view and validated by a distributed collective of verifiers. The purpose of its design is to ensure that no one can alter any past transaction record.

From a purely technical perspective, blockchains accomplish this goal very effectively. This all sounds great so far but the technology has a severe weakness that, until comprehensively addressed, will make blockchain applications very costly in terms of fraud, theft, and legal jeopardy. There are ways to solve the fraud problem but some solutions will introduce another problem.

The fraud weakness lies at the transaction endpoints. By the term ‘endpoint’ I mean the boundary between physical space, where living, breathing human beings exist, and cyber-space, where the blockchain databases reside. The endpoint is where physical space users interact with the cyber-space blockchain.

WATCH NOW
How to recover your system from a Ransomware attack (8:04)
Any legitimate, non-fraudulent blockchain transaction is dependent on trust between two or more counterparties. The foundation of trust is that counterparties are absolutely certain of the physical-space identities of all those involved in a transaction.

In the blockchain scheme, a human being occupying physical space is represented in cyber-space by a public identifier – which helps others find the person’s cyber-space representation – and a private key which is used to digitally sign blockchain transactions. In cyber-space, the private key is the digital identity standing in for a real human being in physical space.

[ ALSO ON CSO: How blockchain will disrupt your business ]

This is all good so far but how do physical space human beings interact with blockchain applications and use their private key? They log in to a website with a password or, in more secure applications, they use multi-factor authentication procedures. This mechanism is not sufficient for blockchain transactions because passwords and multi-factor authentication processes by themselves cannot identify a physical space human in cyber-space. A second person can steal passwords or second-factor tokens and then execute a blockchain transaction using the private key assigned to the first person. A first person could voluntarily give passwords and tokens to another person in the course of engaging in criminal activity.

Let’s illustrate the identity problem by considering two friends enjoying conversation and coffee in a café. They both exist in physical space and have no doubts about each other’s identity. Suppose one of them wants to sell a house to their friend using a new blockchain real estate product that eliminates middlemen from the process. Throughout, they each use passwords to apply their blockchain private keys. Here there is no problem. Their identities are never in doubt.

Now consider the situation where one of the friends wants to sell the house to a complete stranger in Eastern Europe. Both parties use the same blockchain real estate product. There is no trust since they do not have conventional human intermediaries to represent them (in keeping with the idea of blockchains eliminating middlemen). The identity of each person involved in the transaction is represented in physical space by flesh, blood, and bone. Their blockchain identities in cyber-space are represented by the private key. As long these respective identities remain disconnected, blockchain fraud will always be possible.

[ RELATED: Is the blockchain good for security? ]

While I used a real estate transaction involving individuals in this example, the same reasoning applies to corporations. At some point in a corporation-to-corporation blockchain transaction, the identities of human beings in physical space must align with cyber-space blockchain identities represented by private keys.

Solutions will answer this question:

How can each of the two parties in a complex, high dollar value transaction know with absolute certainty that the physical space and cyber-space identities of the other party are legally equivalent?

Any comprehensive solution must include a biometric measure that forms a bridge across the physical-cyber-space boundary. For complex, high value blockchain transactions, this legally reliable biometric connector will require a third party to confirm that the biometric measure is indeed the one belonging to the physical-space identity. Additionally, the blockchain application must incorporate a digital representation of a person’s fingerprint, iris or retina pattern, or a photograph into the blockchain transaction. This means that the person’s biometric information will not only exist permanently in cyber-space, it will be stored on hundreds or thousands of blockchain nodes, all beyond the control of the physical-space human being to which it belongs.

Clearly, this introduces a serious privacy problem. Many people resist biometric authentication because they fear their biometric reference data will be lost to identity thieves.

The hype surrounding proposed applications for blockchain technology must be tempered with the understanding that human biometric information will eventually find its way onto thousands of blockchain servers. As a consequence, before adopting any blockchain application involving complex transactions, companies should first consider how company employees will feel about placing their biometric data beyond their control – forever.

Source:http://www.csoonline.com/article/3138869/security-awareness/fraud-and-privacy-problems-on-the-blockchain.html

Gaurav tiwari

Posts : 5
Reputation : 1
Join date : 2017-04-15

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum