blockchain devlopment

Chapter 11

• Hyperledger Fabric Security • Security design goals • Hyperledger

Fabric architecture

• Network bootstrap and governance

• Strong identities • Chaincode security • Quantum computing • General Data

Protection Regulation (GDPR) considerations

Ke y

Securit y

Design Goals

• Existing members • Determine how to add

new members • Determine how to

update config/smart contracts

• Ledger and chaincode can be scoped • General purpose language used

for chaincode • Guaranteed transaction integrity • Align with industry standards • Consensus separate from

transaction validation • Universal pluggability

FABRIC CA OR

MEMBERSHIP PROVIDER

PEER SMART CONTRACT / CHAINCODE

LEDGER PRIVATE DATA ORDERING SERVICE

Hyperledg er Fabric

Architectur e

Hyperledger Fabric Architecture

Network Bootstrap

and Governanc

e

The first step toward security

Creating the network

Adding new members

Deploying and updating chaincode

Data model

Enroll Defaul t Fabric

Revokin g identities

Register

Practical considerations in managing users

Bootstrapping Fabric CA

Strong Identities

Chaincod e Security

Sharing chaincode with other peers

Installing chaincode

Encrypting chaincode

Attribute-based access control

• Spoofing • Tampering • Repudiation • Replay attacks

Common Security Threats

• Information disclosure • Denial of Service • Elevation of privileges • Ransomware

Transactio n Privacy

Channel s

Private data

Encrypting transaction data

Quantum Computing

Hyperledger Fabric cryptography Elliptic curve cryptography Digitally signs transactions Options to plug in alternate provider

Quantum computing

Emerging technology Possibly may break existing cryptography 15-30 years away from maturity

European Union’s

General Data Protection

Regulation (EU GDPR)

Comprehensive regulations to

protect personal data

privacy

Hyperledge r Fabric can provide for private data

However, immutability can cause issues • GDPR requires

support to delete data

GDPR Consideratio

ns

Summar y

• Hyperledger Fabric Security • Security design goals • Hyperledger Fabric

architecture • Network bootstrap

and governance • Strong identities • Chaincode security • Quantum computing • General Data

Protection Regulation (GDPR) considerations