Mohit Mohit, Kaur Sanmeet, Singh Maninder
CSED, Thapar Institute of Engineering & Technology, P.O. Box 32, Bhadson Road, Patiala, Punjab 147004 India.
Cluster Comput. 2022;25(3):2223-2240. doi: 10.1007/s10586-021-03425-x. Epub 2021 Nov 2.
Blockchain was at the top of the 2016 Gartner hype cycle and has been integrated into business profiles by numerous start-ups. Since the emergence of blockchain through Bitcoin, studies have been conducted to increase blockchain applications for nonfinancial uses. A supply chain is a sector where blockchain is anticipated to have crucial applications. In a traditional supply chain, maintaining traceability and ownership remains a serious issue. In the supply chain, blockchain can increase trust, improve traceability, and eliminate the middle man. It makes the supply chain more transparent though, raising the privacy issue. In this paper, a new approach for transaction privacy is proposed by considering ownership and traceability. The proposed system retains the advantages of blockchain and centralised database server. Its novelty lies in achieving privacy by generating symmetric keys, employing product codes and current timestamps, and it uses asymmetric key elliptic curve cryptography for transaction validation and user identification. The proposed system allows product owners to trace the product and enables its transfer. It protects the supply chain from counterfeit products. The Hyperledger Sawtooth blockchain was used for experiments. Security and privacy analysis show that the proposed system can afford privacy without impinging on traceability and ownership. The results estimate that privacy incorporation introduces an overhead of 4.4%. In the experiment, the performance of the proposed system bettered the results of the existing techniques such as POMS and b_verify.
区块链在2016年高德纳技术成熟度曲线中处于顶峰，并且已经被众多初创企业整合到业务模式中。自区块链通过比特币出现以来，人们已经开展了相关研究以增加其在非金融领域的应用。供应链是预计区块链将有重要应用的一个领域。在传统供应链中，保持可追溯性和所有权仍然是一个严重问题。在供应链中，区块链可以增强信任、提高可追溯性并消除中间人。不过，这也使供应链更加透明，从而引发了隐私问题。本文通过考虑所有权和可追溯性，提出了一种交易隐私的新方法。所提出的系统保留了区块链和集中式数据库服务器的优点。其新颖之处在于通过生成对称密钥、使用产品代码和当前时间戳来实现隐私，并且使用非对称密钥椭圆曲线密码术进行交易验证和用户识别。所提出的系统允许产品所有者追踪产品并实现其转移。它保护供应链免受假冒产品的影响。实验使用了超级账本锯齿形区块链。安全性和隐私分析表明，所提出的系统能够在不影响可追溯性和所有权的情况下提供隐私保护。结果估计，纳入隐私会带来4.4%的开销。在实验中，所提出系统的性能优于现有技术如POMS和b_verify的结果。
