Differential Privacy-based Permissioned Blockchain for Private Data Sharing in Industrial IoT

Muhammad Islam,Mubashir Husain Rehmani,Jinjun Chen

DOI: https://doi.org/10.48550/arXiv.2102.09857

2021-03-30

Abstract:Permissioned blockchain such as Hyperledger fabric enables a secure supply chain model in Industrial Internet of Things (IIoT) through multichannel and private data collection mechanisms. Sharing of Industrial data including private data exchange at every stage between supply chain partners helps to improve product quality, enable future forecast, and enhance management activities. However, the existing data sharing and querying mechanism in Hyperledger fabric is not suitable for supply chain environment in IIoT because the queries are evaluated on actual data stored on ledger which consists of sensitive information such as business secrets, and special discounts offered to retailers and individuals. To solve this problem, we propose a differential privacy-based permissioned blockchain using Hyperledger fabric to enable private data sharing in supply chain in IIoT (DH-IIoT). We integrate differential privacy into the chaindcode (smart contract) of Hyperledger fabric to achieve privacy preservation. As a result, the query response consists of perturbed data which protects the sensitive information in the ledger. The proposed work (DH-IIoT) is evaluated by simulating a permissioned blockchain using Hyperledger fabric. We compare our differential privacy integrated chaincode of Hyperledger fabric with the default chaincode setting of Hyperledger fabric for supply chain scenario. The results confirm that the proposed work maintains 96.15% of accuracy in the shared data while guarantees the protection of sensitive ledger's data.

Cryptography and Security

What problem does this paper attempt to address?

The problem that this paper attempts to solve is how to achieve efficient data sharing while protecting the privacy of sensitive data in the Industrial Internet of Things (IIoT) supply chain environment. Specifically, although the existing Hyperledger Fabric blockchain platform supports multi - channel and private data collection mechanisms, its data query mechanism has the risk of privacy leakage because the query is executed on the actual data stored in the ledger, which may lead to the leakage of sensitive information such as trade secrets and special discounts. In addition, although the multi - channel mechanism can limit the scope of data access, it also restricts the utilization of data, increases the risks of black - market transactions and invalid transactions, and affects the ability of auditing and liability tracking.

To solve these problems, the author proposes a permissioned blockchain scheme based on differential privacy (DH - IIoT). By integrating differential privacy technology into the chain code (smart contract) of Hyperledger Fabric, the query response contains perturbed data, thereby protecting the sensitive information in the ledger. This ensures both the privacy of data sharing and the high accuracy of data.

Specifically, the main contributions of the paper include:
1. **Proposing a new differential privacy mechanism**: By adding a differential privacy module to the chain code of Hyperledger Fabric, the industrial data stored in the ledger is protected from linkage attacks.
2. **Designing a privacy - protection algorithm**: It is used to access ledger data in a privacy - protected manner, ensuring that the query response can still maintain high accuracy after adding random noise.
3. **Conducting a detailed performance evaluation**: Through simulation experiments, the performance of the chain code integrated with differential privacy and the default chain code in the supply chain scenario is compared, verifying that the proposed scheme can maintain 96.15% data accuracy while protecting privacy.

In general, this paper aims to solve the privacy leakage problem existing in the data - sharing process of the existing blockchain platforms by introducing differential privacy technology, thereby improving the efficiency and security of data sharing while protecting data privacy.