blockchain devlopment
Chapter 11
• Hyperledger Fabric Security • Security design goals • Hyperledger
Fabric architecture
• Network bootstrap and governance
• Strong identities • Chaincode security • Quantum computing • General Data
Protection Regulation (GDPR) considerations
Ke y
Securit y
Design Goals
• Existing members • Determine how to add
new members • Determine how to
update config/smart contracts
• Ledger and chaincode can be scoped • General purpose language used
for chaincode • Guaranteed transaction integrity • Align with industry standards • Consensus separate from
transaction validation • Universal pluggability
FABRIC CA OR
MEMBERSHIP PROVIDER
PEER SMART CONTRACT / CHAINCODE
LEDGER PRIVATE DATA ORDERING SERVICE
Hyperledg er Fabric
Architectur e
Hyperledger Fabric Architecture
Network Bootstrap
and Governanc
e
The first step toward security
Creating the network
Adding new members
Deploying and updating chaincode
Data model
Enroll Defaul t Fabric
Revokin g identities
Register
Practical considerations in managing users
Bootstrapping Fabric CA
Strong Identities
Chaincod e Security
Sharing chaincode with other peers
Installing chaincode
Encrypting chaincode
Attribute-based access control
• Spoofing • Tampering • Repudiation • Replay attacks
Common Security Threats
• Information disclosure • Denial of Service • Elevation of privileges • Ransomware
Transactio n Privacy
Channel s
Private data
Encrypting transaction data
Quantum Computing
Hyperledger Fabric cryptography Elliptic curve cryptography Digitally signs transactions Options to plug in alternate provider
Quantum computing
Emerging technology Possibly may break existing cryptography 15-30 years away from maturity
European Union’s
General Data Protection
Regulation (EU GDPR)
Comprehensive regulations to
protect personal data
privacy
Hyperledge r Fabric can provide for private data
However, immutability can cause issues • GDPR requires
support to delete data
GDPR Consideratio
ns
Summar y
• Hyperledger Fabric Security • Security design goals • Hyperledger Fabric
architecture • Network bootstrap
and governance • Strong identities • Chaincode security • Quantum computing • General Data
Protection Regulation (GDPR) considerations