论文标题
数字教育证书系统的基于区块链和符合GDPR的设计
A Blockchain based and GDPR-compliant design of a system for digital education certificates
论文作者
论文摘要
区块链是一种初期技术，与传统系统（例如权力下放，透明度和可追溯性）相比，具有许多优势。但是，如果要使用该技术来处理个人数据，则必须确定补充机制，以提供满足安全和数据保护要求的建筑系统的支持。我们研究基于区块链的解决方案中移动数据或核心区块链网络之外的计算操作的链链功能的集成。我们对欧洲数据保护法规进行了彻底的分析，并讨论了该法规建立的使用区块链技术建立的解决方案的安全性和隐私要求的弱点和优势。我们还提出了一个方法论框架，该框架可以帮助系统设计人员将操作外链结构与传统区块链功能相结合，以构建更安全和隐私的意识解决方案。我们说明了呈现该框架的使用，并讨论了提供服务，存储和验证数字学术证书的系统的设计。
Blockchain is an incipient technology that offers many strengths compared to traditional systems, such as decentralization, transparency and traceability. However, if the technology is to be used for processing personal data, complementary mechanisms must be identified that provide support for building systems that meet security and data protection requirements. We study the integration of off-chain capabilities in blockchain-based solutions moving data or computational operations outside the core blockchain network. We develop a thorough analysis of the European data protection regulation and discuss the weaknesses and strengths, regarding the security and privacy requirements established by that regulation, of solutions built using blockchain technology. We also put forward a methodological framework that helps systems designers in combining operational off-chain constructs with traditional blockchain functionalities in order to build more secure and privacy aware solutions. We illustrate the use of that framework presenting and discussing the design of a system that provides services to handle, store and validate digital academic certificates.
