Fujitsu Bolsters Blockchain Security Technology
Safe operation of keys enables multiple organizations to safely handle confidential data
Fujitsu Laboratories of America Inc.,Fujitsu Laboratories Ltd.
A major characteristic of blockchain is that it offers high reliability and transparency by continually preserving records of all past transactions by multiple computers participating in a network to mutually verify and record data, making it virtually impossible to alter. It does so without any specified trusted organization or central server. This is why it has been spotlighted as a new architecture for information systems, and is expected to be applicable in a variety of fields, such as finance, logistics, supply chain, and official document management.
Fujitsu Laboratories has focused on blockchain as a technology which will form a new platform for linking information, and has been working with Fujitsu Limited on field trials and other initiatives, with a view to expanding the applicable fields in which blockchain can be utilized.
In blockchain, a digital key is needed for each user to execute exchanges or transactions, but generally speaking, if the key is lost, it becomes impossible to transfer monetary funds. One notable issue is that if a key is stolen, all of the funds in an account can be stolen.
In addition, to enable transparency there is sometimes a need to make public the fact that a transaction exists between specific organizations, while keeping the transaction's details, such as monetary amounts and stock names, secret and shared exclusively between the few companies involved. However, the fact that blockchain records are shared with all users, has given rise to a major issue in how to secure the confidentiality of information.
About the Technologies
Fujitsu Laboratories has now developed two technologies to enable secure transactions on blockchain. Details of these technologies are as follows.
1. Transaction restriction technology
Fujitsu Laboratories has developed a technology that can restrict transactions based on pre-established policies, such as restricting users to specific stores when executing transactions such as sending money. The technology provides a new framework that ties policies to keys used in activities such as capital transfers. The technology ensures that initiated transactions which violate policy requirements are prohibited from getting added to the blockchain as a result of verification failures at multiple computers participating in the blockchain. This makes it possible to limit damage even if a key were to be stolen (Figure 1).
Figure 1: Electronic payment that can only be used at specific stores
2. Document encryption technology on blockchain through secret sharing-based key management
Storing documents in blockchain can guarantee that the original state of the document will be preserved, but because the content is public to blockchain users, this method is not appropriate to store documents which contain confidential information.
Now, Fujitsu Laboratories has applied a secret sharing-based key management system to document encryption, where different portions of a key are held by multiple users (Figure 2: Mr. A and Mr. B), and once a specified number of pieces have been gathered, a key can be generated. This enabled Fujitsu Laboratories to develop a blockchain document encryption technology which can control who can read the contract documents, where the confidential portions of the contracts will not be visible to ordinary users (Mr. C), and enabling document anonymity control. It can only be read when the parties involved, who hold portions of the key, work together. Fujitsu Laboratories has developed a prototype system on the Hyperledger, an open source blockchain platform (Figure 2).
Figure 2: Document encryption on blockchain
With the newly developed transaction restriction technology, it is now possible to prevent the misuse or abuse of keys based on preset policies for secure blockchain operations. In addition, blockchain-based document encryption technology through secret sharing-based key management makes it possible to collaborate to find solutions to lost keys, or to create a workflow that requires acknowledgement from multiple managers when making collective decisions involving large transaction amounts. With these technologies, Fujitsu Laboratories is contributing to expanding applicable fields for blockchain, moving beyond finance to a variety of areas such as logistics, supply chain, and official document management.
Fujitsu Laboratories is carrying out trials of the applicability of blockchain to business in finance and a variety of other areas, as a cloud platform that can safely and securely handle confidential information and personal data between multiple organizations, aiming for commercialization of this technology from fiscal 2017 onwards.
Fujitsu is the leading Japanese information and communication technology (ICT) company, offering a full range of technology products, solutions and services. Approximately 156,000 Fujitsu people support customers in more than 100 countries. We use our experience and the power of ICT to shape the future of society with our customers. Fujitsu Limited (TSE: 6702) reported consolidated revenues of 4.7 trillion yen (US$41 billion) for the fiscal year ended March 31, 2016. For more information, please see www.fujitsu.com.
About Fujitsu Laboratories
Founded in 1968 as a wholly owned subsidiary of Fujitsu Limited, Fujitsu Laboratories Ltd. is one of the premier research centers in the world. With a global network of laboratories in Japan, China, the United States and Europe, the organization conducts a wide range of basic and applied research in the areas of Next-generation Services, Computer Servers, Networks, Electronic Devices and Advanced Materials.
For more information, please see: http://www.fujitsu.com/jp/group/labs/en/
About Fujitsu Laboratories of America, Inc.
Fujitsu Laboratories of America, Inc. is a wholly owned subsidiary of Fujitsu Laboratories Ltd. (Japan), focusing on research in novel computing, networking technologies, software development and solutions for several industry verticals. Conducting research in an open environment, it contributes to the global research community and the IT industry. It is headquartered in Sunnyvale, CA.
For more information, please see: www.fla.fujitsu.com
Public and Investor Relations Division
All company or product names mentioned herein are trademarks or registered trademarks of their respective owners. Information provided in this press release is accurate at time of publication and is subject to change without advance notice.
Date: October 19, 2016
City: Kawasaki, Japan and Sunnyvale, CA