Secure Information Technology Center – Austria

25

July

2017

Blockchain & Smart Contracts

Kategorie: IT-Security

The Blockchain was developed as part of the cryptocurrency Bitcoin by a person or a group of persons using the synonym Satoshi Nakamoto. The Blockchain is a distributed ledger that consists of a chain of blocks. The attached report explains different types of Blockchains as well as different consensus algorithms. The report focuses on the Ethereum platform, as it seems to be a promising platform for the execution of so called smart contracts. Smart contracts are autonomous applications which are executed in the Blockchain network. This provides applications with no downtime and high censorship resistance. Based on the Blockchain technology and on smart contracts a messenger was developed.
Weiter lesen…

13

July

2017

Rich End-to-End Encryption

Kategorie: eGovernment

The recent project “Skytrust” being about moving the cryptographic key data from the application to an external service¬†succeeded in relieving the cryptographic key data itself from unwanted attention. However, authentication data used to authorise key usage takes its place in being the weak point. These data are collected by the application and forwarded suitably – hence, the application has access to the now very sensitive authentication data. A better approach would be to also collect the authentication data outside the application. An intermediate authentication data collector service between application and key service is necessary to achieve the functionality. An intermediate, however, calls for end-to-end encryption. The challenge is to collect and route the authentication data without the need for breaking the end-to-end encrypted communication, while being able to add the data.

Weiter lesen…

LOD and LOV for Authorization Concepts

Kategorie: eGovernment

Linked Open Data (LOD) and Linked Open Vocabularies (LOV) deal with the definition of reusable concepts, models, and architectures that facilitate the integration of data and services on a web scale. With the ever-growing heterogeneity of available standards and implementation approaches, such integration faces various barriers that make this process costly and less effective in practice. Open and reusable vocabularies aim to lower these barriers by providing the foundations for conceptual annotations that allow the abstraction and bridging of concepts among different entities and domains in reusable, scalable and machine-readable manner. LOV, as one of the initiatives supporting the underlying paradigm, has emerged from the DataLift project and is supported by the Open Knowledge Foundation. LOV today represents the largest dataset that systematically gathers, analyzes and presents data about semantic vocabularies from different domains.

Weiter lesen…