Making Digital Artifacts on the Web Verifiable and Reliable
This addresses reproducibility issues in science and other areas reliant on Web resources by providing a decentralized, standards-compatible solution.
The paper tackles the lack of mechanisms for verifying and ensuring the permanence of digital artifacts on the Web, proposing trusty URIs with cryptographic hashes to make artifacts immutable and verifiable, including dependencies, and demonstrates that the approach is practical for large files.
The current Web has no general mechanisms to make digital artifacts --- such as datasets, code, texts, and images --- verifiable and permanent. For digital artifacts that are supposed to be immutable, there is moreover no commonly accepted method to enforce this immutability. These shortcomings have a serious negative impact on the ability to reproduce the results of processes that rely on Web resources, which in turn heavily impacts areas such as science where reproducibility is important. To solve this problem, we propose trusty URIs containing cryptographic hash values. We show how trusty URIs can be used for the verification of digital artifacts, in a manner that is independent of the serialization format in the case of structured data files such as nanopublications. We demonstrate how the contents of these files become immutable, including dependencies to external digital artifacts and thereby extending the range of verifiability to the entire reference tree. Our approach sticks to the core principles of the Web, namely openness and decentralized architecture, and is fully compatible with existing standards and protocols. Evaluation of our reference implementations shows that these design goals are indeed accomplished by our approach, and that it remains practical even for very large files.