arXiv ScienceSearch

arXiv subjects

Montassar Naghmouchi

Publications and source records attributed to Montassar Naghmouchi.

8 recordsLinked to original sources

Trustless Accountable Data Sharing for Supply Chains: A Reference Architecture and MoreMedDiet Proof-of-Concept

Modern supply chains are increasingly dependent on the exchange of sensitive business data between heterogeneous stakeholders who do not trust each other. %under partial trust. Conventional integration approaches typically rely on centralized intermediaries or require extensive data disclosure, which hinders collaboration, compliance, and innovation. We propose a generic reference architecture for privacy preserving, trustless data sharing in supply chains. The architecture combines permissioned distributed ledgers, IoT-based evidence ingestion, and modular privacy mechanisms to enable controlled transparency: stakeholders can extract verifiable insights and support audits while minimizing data exposure. We instantiate the architecture in the context of the MoreMedDiet project, which promotes sustainable farm-to-fork food systems and adoption of the Mediterranean diet. By mapping the MoreMedDiet use case into our architecture, we demonstrate how channel topologies, IoT-to-ledger data flows, and smart contract-based quality assurance (QA) can support secure data exchange, transparency, interoperability, and regulatory alignment. Our proof-of-concept illustrates how Self-Sovereign Identity (SSI) and W3C Verifiable Credentials (VCs) can provide portable and auditable access governance over Hyperledger Fabric channels. The resulting design offers a reusable blueprint for multi-actor supply chains, including agri-food and pharmaceutical domains. Moreover, the performance achieved -- presenting a verified credential to the next stakeholder in the supply chain in 130 ms -- is promising and demonstrates the potential applicability of the approach in real-world supply chain environments.

cs.ET

Deanonymizable Scoped Linkable Ring Signatures

Ring signatures offer highly desirable privacy features like anonymity and ad-hoc group formation with high autonomy, but partially lack linkability and accountability features required for strict use-cases like consent management in healthcare. Existing signature schemes fail to natively integrate scoped linkability with decentralized accountability defined here on-demand unconditional deanonymization of signers without reliance on a trusted party (opener) or a separate cryptographic commitment. We introduce Deanonymizable Scoped Linkable Ring Signatures (DSLRS) to address this gap. DSLRS builds on previous linkable and accountable signature schemes and their cryptographic primitives to construct a new signature scheme that natively implement both privacy and trust features. Scoped linkability in DSLRS is achieved using "scopes" (context identifiers) and dynamic key images, effectively providing ring-independent scoped linkability and unlinkability across different scopes. DSLRS relies on k-of-N decentralized deanonymization network nodes to extract the signer's public key (identity) from ElGamal components built in the signature, achieving ring-independent decentralized accountability. The full DSLRS algorithms, formal property definitions and proofs, signature evaluation and experimental results from an implementation, and a blockchain-based instantiation and application of our scheme in consent management for clinical trials are provided. DSLRS is proved under the ECDLP and DDH hardness assumptions in the Random Oracle Model (ROM).

cs.CR

ClinConNet: A Blockchain-based Dynamic Consent Management Platform for Clinical Research

Consent is an ethical cornerstone of clinical research and healthcare in general. Although the ethical principles of consent - providing information, ensuring comprehension, and ensuring voluntariness - are well-defined, the technological infrastructure remains outdated. Clinicians are responsible for obtaining informed consent from research subjects or patients, and for managing it before, during, and after clinical trials or care, which is a burden for them. The voluntary nature of participating in clinical research or undergoing medical treatment implies the need for a participant-centric consent management system. However, this is not reflected in most established systems. Not only do most healthcare information systems not follow a user-centric model, but they also create data silos, which significantly reduce the mobility of patient data between different healthcare institutions and impact personalized medicine. Furthermore, consent management tools are outdated. We propose ClinConNet (Clinical Consent Network), a platform that connects researchers and participants based on clinical research projects. ClinConNet is powered by a dynamic consent model based on blockchain and take advantage of dynamic consent interfaces, as well as blockchain and Self-Sovereign Identity systems. ClinConNet is user-centric and provides important privacy features for patients, such as unlinkability, confidentiality, and ownership of identity data. It is also compatible with the right to be forgotten, as defined in many personal data protection regulations, such as the GDPR. We provide a detailed privacy and security analysis in an adversarial model, as well as a Proof of Concept implementation with detailed performance measures that demonstrate the feasibility of our blockchain-based consent management system with a median end-to-end consent establishment time of under 200ms and a throughput of 250TPS.

cs.CR

A Systematic Review and Layered Framework for Privacy-by-Design in Self-Sovereign Identity Systems

The use of Self-Sovereign Identity (SSI) systems for digital identity management is gaining traction and interest. Countries such as Bhutan have already implemented an SSI infrastructure to manage the identity of their citizens. The EU, thanks to the revised eIDAS regulation, is opening the door for SSI vendors to develop SSI systems for the planned EU digital identity wallet. These developments, which fall within the sovereign domain, raise questions about individual privacy. The design of SSI systems is complex, often characterized by a large number of components and architectural choices because the current SSI communities differ on how to create identifiers, how to build and present credentials, and even how to design a user wallet. SSI stacks developed by different organizations provide different privacy features for different privacy needs. This paper performs a systematic mapping and review of SSI components and technologies into a novel four-layer privacy framework to address the design complexity of SSI systems. Based on this review, we provide an accompanying Design Assistance Dashboard (DAD). The DAD shows the interdependencies between SSI components in different layers, and maps these components to different privacy requirements and considerations, even providing a simple privacy class for each component.

cs.ET

Empower Healthcare through a Self-Sovereign Identity Infrastructure for Secure Electronic Health Data Access

Health data is one of the most sensitive data for people, which attracts the attention of malicious activities. We propose an open-source health data management framework, that follows a patient-centric approach. The proposed framework implements the Self-Sovereign Identity paradigm with innovative technologies such as Decentralized Identifiers and Verifiable Credentials. The framework uses Blockchain technology to provide immutability, verifiable data registry, and auditability, as well as an agent-based model to provide protection and privacy for the patient data. We also define different use cases regarding the daily patient-practitioner-laboratory interactions and specific functions to cover patient data loss, data access revocation, and emergency cases where patients are unable to give consent and access to their data. To address this design, a proof of concept is created with an interaction between patient and doctor. The most feasible technologies are selected and the created design is validated. We discuss the differences and novelties of this framework, which includes the patient-centric approach also for data storage, the designed recovery and emergency plan, the defined backup procedure, and the selected blockchain platform.

cs.CR

Self-Sovereign Identity for Consented and Content-Based Access to Medical Records using Blockchain

Electronic Health Records (EHRs) and Medical Data are classified as personal data in every privacy law, meaning that any related service that includes processing such data must come with full security, confidentiality, privacy and accountability. Solutions for health data management, as in storing it, sharing and processing it, are emerging quickly and were significantly boosted by the Covid-19 pandemic that created a need to move things online. EHRs makes a crucial part of digital identity data, and the same digital identity trends -- as in self sovereign identity powered by decentralized ledger technologies like Blockchain, are being researched or implemented in contexts managing digital interactions between health facilities, patients and health professionals. In this paper, we propose a blockchain-based solution enabling secure exchange of EHRs between different parties powered by a self-sovereign identity (SSI) wallet and decentralized identifiers. We also make use of a consortium IPFS network for off-chain storage and attribute-based encryption (ABE) to ensure data confidentiality and integrity. Through our solution, we grant users full control over their medical data, and enable them to securely share it in total confidentiality over secure communication channels between user wallets using encryption. We also use DIDs for better user privacy and limit any possible correlations or identification by using pairwise DIDs. Overall, combining this set of technologies guarantees secure exchange of EHRs, secure storage and management along with by-design features inherited from the technological stack.

cs.CR

Comparative Analysis of Technical and Legal Frameworks of Various National Digial Identity Solutions

National digital identity systems have become a key requirement for easy access to online public services, specially during Covid-19. While many countries have adopted a national digital identity system, many are still in the process of establishing one. Through a comparative analysis of the technological and legal dimensions of a few selected national digital identity solutions currently being used in different countries, we highlight the diversity of technologies and architectures and the key role of the legal framework of a given digital identity solution. We also present several key issues related to the implementation of these solutions, how to ensure the State sovereignty over them, and how to strike the right balance between private sector and public sector needs. This position paper aims to help policy makers, software developers and concerned users understand the challenges of designing, implementing and using a national digital identity management system and establishing a legal framework for digital identity management, including personal data protection measures. The authors of this paper have a favorable position for self-sovereign identity management systems that are based on Blockchain technology, and we believe they are the most suitable for national digital identity systems.

cs.SE

An automatized Identity and Access Management system for IoT combining Self-Sovereign Identity and smart contracts

Nowadays, open standards for self-sovereign identity and access management enable portable solutions that are following the requirements of IoT systems. This paper proposes a blockchain-based identity and access management system for IoT -- specifically smart vehicles -- as an example of use-case, showing two interoperable blockchains, Ethereum and Hyperledger Indy, and a self-sovereign identity model.

cs.CR