About the lab
The computer security laboratory (LabSEC) of the Federal University of Santa Catarina (UFSC) was created in 2000 with the aim of researching, innovating and developing secure computing systems. We specialize in public key infrastructure and its applications, such as digitally signing and preserving electronic documents.
Featured research (2)
Car insurance companies worldwide have launched reward programs that provide benefits (e.g., cash-back) to good drivers. However, two issues may arise from these programs. First, drivers cannot easily verify whether their insurer is properly following the program rules upon computing their rewards. The second issue is that privacy can be violated when sensing data is collected from policyholders’ cars to identify whether they are good drivers. This paper proposes a smart contract-based solution that trades off user privacy for reward transparency. A smart contract computes rewards based on sensing data policyholders provide to the Ethereum blockchain. To preserve privacy, a policyholder can (i) select what sensing data is sent to the blockchain, (ii) use distinct pseudonyms to hide his or her real identity, (iii) choose what accuracy sensing data has, and (iv) verify whether his or her sensing data allows him or her to remain indistinguishable from other drivers whose data has been already disclosed in the blockchain.
The validation of academic credits and issuance of academic degree certificates in the Brazilian education system currently occurs in a semi or completely noncomputerized way. The actual digitization of this system could make it more secure and decrease bureaucracy in terms of document validation, saving in storage and labor. Due to the recent increase in forgeries and loss of records, it is paramount that this process becomes more transparent and reliable for all involved parties. This article presents a proposal and an implementation for the digitization of degree certificates and academic credits for higher education in the Brazilian education system. A transparent model based on blockchain is proposed, in which higher education institutions register students and their academic credits in a chain of records using the Brazilian Public Key Infrastructure for identity management. This information, associated with smart contracts, enables the reliable and decentralized issuance of degree certificates through the validation of a historical database and the triggering of transactions using smart contracts. The focus of this article is the demonstration of an experiment that validates this proposal. We propose a blockchain‐based solution to automate the issuance of degree certificates in the Brazilian higher education system. The goal is to tackle unmanaged risk, bureaucracy, human interference, and frauds. The solution consists of Ethereum smart contracts that allow higher education institutions to register students' academic achievements. The Brazilian Public Key Infrastructure is used to identify institutions in the blockchain. When the smart contracts identify that a student has completed a degree, they issue a degree certificate in the blockchain.
- Departamento de Informática e Estatística
About Ricardo Felipe Custódio
- Ricardo Felipe Custódio currently works at the Departamento de Informática e Estatística, Federal University of Santa Catarina. Ricardo does research in Computer Security and Reliability, Computing in Mathematics, Natural Science, Engineering and Medicine and Computer Communications (Networks). Their most recent publication is 'Fast modular reduction and squaring in GF (2 m )'.