The whole project has an integral part of Security protocols and solutions to make sure that the documents and products when authenticated, are secure and are not counterfeited. The security component of the entire project revolves around 3 components of the project.
- Secure Development Life cycle
- Blockchain implementation
- Secure Authentication Implementation
The fundamentals of Security Confidentiality, Integrity and Authentication are guaranteed by the use of blockchain technology making counterfeiting impossible as blockchain is an immutable data structure. The blockchain, being a consortium permissible blockchain allows the flexibility to maintain security standards to make sure that no-one outside the stakeholder circle has access to the blockchain network. The data that is written onto the blockchain network are hashed to make sure in the worst case, no one can reverse the data to its original form. This ensures that the data which is stored into blockchain data store is completely safe. The technologies used to hash are SHA512 and SHA256. These are the highest Industry standards in hashing.
The authentication mechanisms are based on blockchain architecture as well. The authentication methods used have been carefully designed to ensure that no PII is stored inside the authentication provider database. Security standards like Content Security Policy, Secure socket layer and strong end to end encryption have been enforced by the authentication provider to make sure that the security standards are met to the Industry’s best. The Software development life cycle includes basic secure coding practices to make sure the software delivered meets minimum security requirements. Basic validations, sanitization methods and protection against attacks including some basic injection attacks.
The greatest obstacle for migrating many services online is the ability to secure the data and verify the identity of the users of that service. Currently, online authentication relies on a password or on rare occasions the use of dual factor authentication. The problem with these methods are that passwords are notoriously insecure and dual factor authentication generally relies.
Relies on sending a code over SMS or a third party service. A solution to this problem could be the blockchain.
Currently, the blockchain is used to handle the ledger for a $10 billion dollar currency. The same cryptographic principles would be applied to authentication. By distributing a ledger among all members of the network, blockchain authentication eliminates someone from maliciously altering the ledger. Every time a ‘transaction’ or block of data is added to the chain a majority of the network must verify its validity. This guarantees the integrity of the ledger. One could then use public key encryption, such as the extremely secure RSA encryption, to securely send their credentials. The recipient could then verify this against an entry in the immutable blockchain resulting in an incredibly secure and reliable way to handle verification of identity.