Sara Rouhani

h-index10
3papers
805citations

3 Papers

7.3DCJul 7
Layer 2 Coordinated Trusted Setup for Continuous CRS Generation

Khalid Hassan, Sara Rouhani

Zero-knowledge proof systems rely on a trusted setup phase to generate a Common Reference String (CRS), yet existing approaches are typically static, one-time ceremonies that are inflexible and vulnerable to long-term compromise. Offloading continuous, recurring trusted setups to a decentralized Layer 2 (L2) network introduces a fundamental coordination challenge arising from the mismatch between high-throughput transaction processing and the multi-round requirements of trusted setup ceremonies. This paper presents an L2-coordinated framework that safely decouples transaction pipelines from ceremony execution to achieve automated, continuous CRS generation without centralized coordination. We design and implement two protocol variants over a decentralized, PBFT-coordinated ZK-rollup architecture: an on-chain smart contract approach and an asynchronous peer-to-peer consensus variant. Both designs utilize non-interactive zero-knowledge proofs of knowledge alongside commit-reveal structures to eliminate adaptive manipulation vectors and isolate ceremony latency. Experimental evaluations under simulated wide-area network constraints and adversarial conditions demonstrate that our architecture successfully isolates ceremony liveness. Continuous setups complete reliably within practical time bounds despite node dropouts or malicious contributions, while preserving stable L2 transaction throughput.

7.2CRJun 8, 2020
Distributed Attribute-Based Access Control System Using a Permissioned Blockchain

Sara Rouhani, Rafael Belchior, Rui S. Cruz et al.

Auditing provides an essential security control in computer systems, by keeping track of all access attempts, including both legitimate and illegal access attempts. This phase can be useful to the context of audits, where eventual misbehaving parties can be held accountable. Blockchain technology can provide trusted auditability required for access control systems. In this paper, we propose a distributed \ac{ABAC} system based on blockchain to provide trusted auditing of access attempts. Besides auditability, our system presents a level of transparency that both access requestors and resource owners can benefit from it. We present a system architecture with an implementation based on Hyperledger Fabric, achieving high efficiency and low computational overhead. The proposed solution is validated through a use case of independent digital libraries. Detailed performance analysis of our implementation is presented, taking into account different consensus mechanisms and databases. The experimental evaluation shows that our presented system can process 5,000 access control requests with the send rate of 200 per second and a latency of 0.3 seconds.

6.8CRApr 11, 2019
A Case Study of Execution of Untrusted Business Process on Permissioned Blockchain

Vahid Pourheidari, Sara Rouhani, Ralph deters

Many studies have been done to improve the performance of centrally controlled business processes and enhance the integration between different parties of these collaborations. However, the most serious issues of collaborative business processes remained unsolved in these studies, lack of trust and divided data on various confidential ledgers. Blockchain technology has enormous potential to become a new substantial integration method for untrusted collaborative businesses. Using the governing consensus mechanism, blockchain eliminates the necessity of the trusted third party. It provides a distributed shared ledger which facilitates the job of the process monitoring for the parties. The smart contract, as a crucial tool, is used to define the guaranteed autonomous programs. In addition, the privacy of the data can be ensured by using a permissioned blockchain that handles the access control because in this way, only verifiable participants can have access to the state of the business process and its related information. In this study, the applicability of execution of a real-word untrusted business process on the permissioned blockchain is investigated. Moreover, we determine the advantages of using the permissioned access-controller blockchain as the infrastructure for the collaborative business processes, through implementing the process of Order Processing on the Hyperledger Fabric blockchain platform.