Hyperledger Foundation Meetups, 28 Apr 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Supplier Digital Passport Using Trust Your Supplier

Description

A virtual meetup hosted by Hyperledger Vilnius on April 28, 2021 featuring a discussion about Trust Your Supplier -- a production Hyperledger Fabric blockchain network, running on the IBM Blockchain Platform, that provides suppliers with a trusted digital passport to streamline on-boarding with their customers. This presentation will provide an overview of the network, discuss the business value to the participants, and highlight why blockchain and the selected governance approach makes this solution better for all the participants (buyers, suppliers, third party validators, and business networks). The network is developed and operated by Chainyard.

More details about Trust Your Supplier is at: https://www.trustyoursupplier.com/

More details about this event is at: https://www.meetup.com/Hyperledger-Vlnius/events/277399044/

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #HyperledgerMeetups #Blockchain

A

Look into it, we will be able to yeah. It will be a very it takes about five ten seconds to get it go in just one sec.

A

Okay, you are live on youtube.

A

B

Youtube hello: how are you guys sorry? I was a minute late. No, no worries, no worries.

A

So andreas you're live. If you want to kick it off, yeah, so uh hello, everyone.

B

Hey dress nice to meet.

A

You yeah, and you will handle this to me hosting and if I would like to share uh okay yeah your host now and you should be able to everybody, should be able to share their screen yeah. Okay, so I would start I would like.

A

uh I would like to introduce first of all uh guys, uh I I would like to start.

A

I hear somebody speaking, but I do not see.

A

ah Okay, it's echo yeah, okay, hello, everyone. We have our webinar at at hyper.

A

Ledger uh david, I have a problem because I have very strong echo in my uh headphones. Do you know how to I'm not hearing any echo on my end yeah? I don't know on your end. Maybe I'm not sure what what might be going on ah sorry. I guess I know because.

A

Yeah guys, uh I understand this is secco from youtube. I I open uh streams.

B

A

Yeah yeah it's closely yeah or mute to youtube, yeah, okay, so hello, everyone- and today we have webinar at hyper, ledger vilnius.

A

We welcome all virtually who are visiting vilnius today in lithuania, so we here at liscenia, we have regular hyper ledger project related meetups, and today it is my big pleasure to present our presenters, who will talk about hyper ledger technologies.

A

But what is more interesting, we'll talk about solution for suppliers for suppliers, management- and this is, I guess, especially for us in lithuania- could be important part because significant part of lithuanian industry or, let's say visible part of lithuanian industry- is working as a suppliers for big manufacturers, especially nowadays, when.

A

Challenges to to to sign contracts or deliver is some goods from asia as a traditional suppliers.

A

It is a tendency that europe manufacturers looking near shore, production facilities and lithuania. It is one of the place, and I hope such seminar webinar, which we will have today, will will support our exporters and will give understand what information to understand what is coming in near future, especially what is related to supply chain digitalization.

A

I hope I pronounced correctly so uh gigi. Could you please introduce your team and stage yours.

C

Thank you address good afternoon everyone or good evening. uh I jijo joseph I'm, the vice president of uh blockchain services at chanyar, and uh I have uh two colleagues joined here today with me. Isaac and murali um isaac marley want to introduce yourself.

B

Sure I'm isaac hunkle. I run our consulting services business, I'm based in morrisville north carolina, which is basically the research triangle park area of north carolina. I work closely with ggo on a day-to-day basis.

B

D

Hi, this is miri sapa here, I'm vice president for engineering and my main focus is tois in cheney, art on the blockchain technologies. Thank you.

C

Okay, thank you merely thank you ayeshaka, uh so so what I am, I would put the presentation into a uh the ppg in the presentation mode. Can you guys see that? Yes? Well? Okay, okay, thank you! So we structured the presentation into three parts and the first part is you know I would. I would give you a brief introduction about chain yard chain. Is the company who owns and operate, who created this trustee supplier solution and uh followed by isa code?

C

You know, walk you through the details of the solution, the business model mostly and the current status of the trustee supplier and, at the end. uh Morally, will uh you know give a brief about the technology which is hyper ledger and used, especially on the security aspect on the data protection and the privacy and all those aspects and and a brief about the architecture so so to get started. uh Chanyard uh cnd has been you know, chained parent company called id people corporation, so we have been in the industry for the last 21 years.

C

We are founded in 1999, based out of north carolina, the beautiful place of research triangle park. I mean some of you would recollect the research triangle path is an upcoming technology idea, so we started 2015. We started our blockchain journey when ibm started a hyperledger fabric at their labs, so we were right across ibm, so we got very fortunate to work with ibm at the labs doing the testing of the fabric, making all the quarterly releases, I'm testing all the quarterly releases.

C

So until recently, for the last five years it has been chanyada who is doing all the quarterly testing performance, functional testing of the fabric. So uh we continued our journey and did many uh blockchain application for ibm, as well as some of our customers like deloitte and few customers out of europe as well.

C

So in 2017-18 we had this idea about procurement issues, challenges faced by suppliers and buyers in procurement space, and we thought about creating the solution by ourselves. So we, when they went again and met ibm procurement, ibm cpr, bob murphy. So he liked the solution. uh The approaches we suggested so we partnered together so trust your solution. Customer supplier is a solution jointly by ibm as well as changer, so chenia not only uh create the solution.

C

We our services side, continue to develop digital transformation services in customer experience, blockchain a and automation and cloud cloud, underwater and uh and the cyber security areas.

C

So so I can kind of mentioned about this slide. I mean we overall has done more than 36 blockchain solutions. I mean a digital transformation. I mean has been going on for the last 21 years, but very specifically to blockchain.

C

We have a large blockchain team, 90 plus members in a blockchain, that's a very, very big team compared to majority of the companies who has only a few blockchain members and 300 plus team working on the the overall digital transformation.

C

So we are a member of hyperledger fabric hyperledger and last week it uh the open ideal was announced and we are part of uh part of open ideal as well. uh So over the period we created a many built-in components, many pre-built components which we could use in the trustual supplier.

C

So uh this this is, uh I mean this is consistent with the many of the consulting companies. You know we do consulting engineering and operations, the only thing which we are different from other services. Companies is the consortium building practice which we offer so in any private uh enterprise blockchain world right. You need to create a consortium. You need to manage the consortium you need to create the governance model of the consortium. Now you need to create the business consideration answers technical conservation like how do you add a member?

C

How do you remove any number you know who gets paid? Who manages the node I like? How do you ensure that smart contract has not impacted when you do an upgrade? Now all these aspects has to be uh considered when you are creating a in any consortium, so we do the consulting of that so that that's brief about chania and I think uh isaac can continue with uh you know, atrocious, very specific to trust your supply.

B

All right, thanks, gg, hey you guys, we have a. We have a pretty small uh group today, right so feel free to stop me and ask questions or put your questions in the chat. um We want to make sure you're taken away from this um as much as possible right we're doing this, so we can add value and help the hyperledger ecosystem.

B

Of course, we're happy to always talk about chain yard interest for supplier, but we want to make sure hyper ledger. Ecosystem is growing and we can do that by you know, sharing our information and learning from you guys as well so anyway, thank you so trust your supplier yeah. It really. Oh yeah. Thank you. So what is trust your supplier? As the name name, sounds it's all about establishing trust and we call it trust your supplier, because it's really focused on buyer and supplier relationships um and and bringing trust to that relationship.

B

These these relationships exist today, um uh so we're trying to increase the amount of trust, we're also trying to um ensure privacy and security of information.

B

um And lastly, you know we're trying to create a a better way of doing uh certain parts of the business which specifically are the supplier, onboarding and supplier information management processes that take place today.

B

B

Gg, so just real quickly. What does that process look like today? And I want to read this to you, but basically there's a you know. A buyer or a category manager at a company is trying to find a supplier for a specific need, whether it be something in their manufacturing supply chain, or it could be. You know something as simple as we need to get paper for our copiers and we're looking for new suppliers there. You know that you know you guys know that big companies have lots of needs across the board.

B

um After after they find a supplier, they have to qualify them as being able to meet their needs, and then the next part is to validate validate the attestations that the supplier has made in terms of their capabilities and then once that's been done, they on board, and then they move into what we call life cycle management of supplier, and this is really all about information management of the supplier and ensuring that you know they are maintaining uh any potential certificates that are required.

B

So, for example, if you have a company, that's transporting chemicals for you, they have to have certain qualifications. They need to make sure that those qualifications uh are are maintained.

B

They want to want to make sure that their suppliers were critical to their supply chain, uh maintain uh financial, uh uh uh a good that they stay in shape in terms of their finances and they're not going to potentially go bankrupt and those kind of things and- and so big companies and small companies alike, are looking at their supply chains and trying to manage risk, and this is what the process looks like, unfortunately, today, because um especially going all the way up to onboarding.

B

This is an area that doesn't get a lot of attention in existing systems today. So what we see is a lot of a lot of pain points due to the current processes and technology. So let me just stop. I'm going to spend a little bit of time in this slide, just to explain how those inefficiencies are created.

B

So what you have here on the right hand, side is a supplier, so a supplier has relationships with all of their buyers right and each of those look today looks very different from one another they're similar but they're all different they're different in terms of the timing of when they were brought in how often they have to potentially renewal what questions and information they have to provide to that buyer.

B

All of those kind of things um are um different and that puts a onus on the supplier to keep up with that information, not only when they're on boarding and trying to get that first transaction, but throughout the life cycle of that relationship, and so, if you're, a small if you're a supplier, that's you know dealing with you know just a couple: dozen companies, that's probably manageable right, but what about companies who are dealing with thousands of buyers and vice versa?

B

What about buyers who are dealing with literally tens of thousands of suppliers and those are those are the companies that are are looking at trust your suppliers, a new and better way, and why? Because today's process is costly, slow and inefficient? Why is why? Is it costly, so efficient because it's manual in many cases, because today often it's still email, spreadsheets, word documents and then it's a manual qualification to go through that data? That's that's, you know been basically on on a spreadsheet or in a word document.

B

um We see more and more pressure on on supply or excuse me buyers and suppliers from a regulatory perspective and making sure that um that relationship they're adhering to all the regulations. I already mentioned the chemical transportation company as one example being able to keep up with those kind of things, and that pressure is putting more pressure on procurement organizations and in in terms it's putting more pressure on their suppliers to meet those neat requirements.

B

Can you go back please.

B

Gigio, can you go back and the last thing is because the supplier is dealing with these different threads and they're, dealing with different systems or dealing with different processes.

B

There's really no way today to to leverage what you've done with one buyer from a supplier perspective to another if they are completely um mutually exclusive, if you will- and um so we saw an opportunity here um and- and we also saw an opportunity where blockchain can shine and morale is going to talk about that a little bit later, all right next slide.

B

um So supplier pain points um redundant work. I just mentioned they're dealing they're doing this for every one of their buyers, um in it and and to the level the level they have to do it to varies. It could be very light process.

B

It could be a very heavy process, but what we've found in all those processes that we're looking at a 30 to 60 day onboarding process, because of the way the way it works today and being manual in terms of the qualification as well as just getting through the systems and getting into the system where you can actually be a verified and on-boarder supplier to start doing that business.

B

um Another problem and everybody has this and we're all suppliers to some extent right. We're always looking for customers is trying to get noticed and trying to be discovered. So you can find new customers and that's another area, that's a pain for all suppliers and everybody in business, but we also see an opportunity with registered supplier to help companies in that area, and we see that as a significant opportunity actually long term. As this network grows.

B

That's one of the things where network effect of this blockchain network will be, will really shine and again it's a costly process, it's manual and you have to repeat it over and over and over and over for every one of those relationships, and that just adds up over time. So again we're talking about companies that have significant number of of buyers or customers and each of those touch points being able to significantly reduce up to 90 percent of the time and overhead associated with uh maintaining those relationships and on the on the buyer side.

B

They have very similar pain points right. It's a lengthy time. It's manual, they have to go through the discovery, qualification check uh process and they have to actually go in and and qualify that the information that the supplier provided is actually accurate right, not everybody's above board, and this is part of managing their risks as a company and again, the more important that supplier is to their supply chains, the more evaluation that goes on and the more risk management that takes place and again talking about tens of thousands of suppliers. This adds up right.

B

Some companies have teams of dozens of people who who work on this full-time in terms of their procurement organizations in terms of just the the onboarding process and all those things associated with that process I described earlier, and it just takes time and again, 30 to 60 days is being very generous. We've seen some longer and, of course, some a little bit shorter. But what we're talking about is trying to reduce those those time cycles by 75 to 90 percent and that's what we're seeing in the market today next slide.

B

um So before I go into the sliders, do you guys have any questions? I don't see any up up there, but you know feel free if there's, if that, if there's anything, that's not clear or you have questions about the process or whatever just shout out.

B

So when we looked at all these problems and opera as and opportunities and how blockchain could be leveraged, we said: okay, it can it be our. Is there enough commonality in the onboarding process, specifically the data collection process that we can be collecting that information and then potentially reusing it from relationship to relationship?

B

And so we did an evaluation and what we found after going working- and this is where ibm was our partner there. We worked closely with our procurement organization, who not only procures for with third 20 something thousand suppliers, but they also do it as a business as a service for another 50 large companies in the world. So they have lots of experience and what we found is 50 of the questions right off. The bat are common across.

B

I want to say, oh because that makes it sound like a lie, but most um uh organizations, and then we found another 20 to 25 percent- are common across the industry yeah.

B

They may be worded a little bit differently, but when you get right down to it, they're asking somewhere for similar type information, then you get to geography, specifics you get 10 to 15, and then you have company or buyer specific questions, and we found that that was five percent or less so we said, there's a there's, a great opportunity and by the way, this pyramid of questions helps us in our solution to organize our questionnaires. Very similarly, so a buyer can then put them put together.

B

The right set of questionnaires standardized questionnaires to use across their organization, and so we said yes, there's an opportunity and that commonality is what created the opportunity.

B

B

Slide so what what came out of this? The trust, your supplier solution- and I will tell you- know, like all all good solutions, this this one's been going around for a while we're we're actually uh starting our fourth year of thinking about this uh solution. It's actually been in the market about 18 months now, but it continues to evolve and get better and better. um It actually originally started as know your supplier right before it was actually out in the wild.

B

So we called it for a long time very similar to kyc, um but then we we ended up with trust your supplier, after going through some marketing and branding exercises with ibm anyway, we're pretty excited about trust, your supplier, um and what does it do at the end? In the end it it enables a supplier to create a single identity, and we call that a digital passport and they can share that with any buyer.

B

Now the ques now one of the things you'll see today is that data is still just data that the supplier has created and how can they trust that data? Well, that's because we brought in third-party verifiers to to the solution to verify this data, and these are the same providers who are doing this today, but it's it's more of a manual process for the procurement organizations and who are securing licenses with these companies to use that data for verification purposes, um because it's now the process has been moved from spreadsheets and word documents.

B

Can you go back please into um a system and it's digitized?

B

So now we we can automatic automate certain things so that information can easily be verified and then update it in real time and if there's a, if there's an issue, whether it's a verification issue or an update that causes a supplier to be out of compliance with certain rules, then those things are caught by the system and notifications uh can be set and our our buyers have the ability to set trigger these things based on rules that they set in the system, and I mentioned the third party verifiers- are bringing data into the system.

B

That data is now bringing the the ability that automatic excuse me digitized data it comes in helps us automate. Certain uh verifications brings in ratings to help uh manage risk. um So again, these things are happening manually today, but before, but now they're automated, and then we can provide scores based on a dun and brad street rating and a eco bodice rating and a rapid ratings rating.

B

You know these are things that companies are using today and we can bring them all together and help create a risk profile automatically within the system and one of the things before we go to the next slide is we can do this for suppliers even before they've ever established a relationship with a new buyer, so they can now go and a buyer can discover them and see that this supplier potential supplier already meets all their needs and based on some high level, information that that supplier has exposed for their organization- and I say it that way, because suppliers control their own data and they decide which data is exposed publicly and which data they want to share privately, and that's one of the things that blockchain enables next slide.

B

So, what's what's the ecosystem look like well today, it's primarily buyers, suppliers and the third party verifiers happy to say we also have some third-party developers who are now building on top of this.

B

Most of those builders are building solutions that are tied closely with the verifiers and uh there's there's a slide that we'll cover in a second, but most of these verifiers are providing a certain amount of data for free and then, of course, afterwards, they're selling that data just like they do today, but we have a nice integration layer that lets us pull that those licenses right into the solution and again leverage that data for automation and for automated verification.

B

So it's really nice and makes uh makes us a buyer and procurement organization's life much easier. um We also see in the future auditors working in this network.

B

I don't think we have any specifically today that are outside of the the buyers organizations, and then we do see certificate issuers uh in the system today um and some of those certificate issuers are verifiers already, for example, ecovitis there's different levels of sustainability, ratings and certificates that they provide and you those badges can be associated with your digital passport, based on establish that relationship and getting that information pulled into your profile. So that's an example, so um this is the ecosystem.

B

We do think that over time we can see other organizations joining many types of organizations think about insurance companies who provide certificates of insurance. That's usually part of requirement of a buyer supplier relationship. They could be part of this in bringing those certificates right into the network, and I can even see the day where the stuff is automated.

B

So instead of today happening through emailing and requests, it could happen through a request through the system and an insurance company could provide that automatically based on the the insurance that that buyer has in place for uh or that supplier has in place for their their buyers. So it's it's. It's a really great ecosystem and we have a slide in a few minutes. We'll show you that shows who's who's in the network today and it's quite a quite a list of good names.

B

B

So I mentioned the marketplace um so so these these are companies like dun brand street ecoboost, uh rapid ratings, and I will say, there's at least another nine or ten that are part of the solution today and I think there's another couple dozen that are lined up that would like to be part of the solution, but we can only handle integrations of so many at a time um are part of this in bringing their data into the system to um improve the uh ability to automatically verify and and in the end, manage the risks in these supply chains.

B

I mentioned that most of these companies are bringing freemium models into the marketplace, but they are also then offering premium offerings. So that's why they are that's why they're participating because one their customers are in this ecosystem and two it's giving them a new way to sell their data and their services that they haven't had before, and so that's why we have so many joining um and I'll give you an example.

B

Dynamo actually, today sells licenses, you know all day all night, but they usually are selling it to the to the buyers, and these are the big companies and they have these big licenses now they're seeing an opportunity- and this is where a new business model is forming- that they can sell smaller licenses to the suppliers, information about the suppliers that they can pull right into their passport to give them a better profile.

B

So when they are being exposed when they expose their information through this solution, they have a chance to do more business and and increase their sales, and we see that as another really huge benefit for not only the verifiers but also for the suppliers, and you know I'm going to just go off on a tangent here and tell you like every every decision that's made in the roadmap.

B

There's always the question asked: is this going to be like valuable to all of our ecosystem members and if something's not valuable to a certain ecosystem, member or worse jet could harm that ecosystem member there's a deep discussion that goes on this, to make sure that we assign that issue and make sure there is value for everybody and that's one of the core principles we've had since the beginning and so going off on the last benefit.

B

Here I mentioned how we can automate the um onboarding and the qualification process, and all we also are looking at pulling this data together to do more things with actionable insights.

B

I mentioned the risk management profile already, there's many other things we can do like tying into ai solutions that are scanning the web for potential nefarious uh um information that could be bad, you know, could be reflect badly on a supplier but, more importantly, cause it a an issue to a big buyer, and we see we have seen that in the press over the last few years, and we can, with that all this data and all these connections and all this digitized data.

B

We can help automate many of those things and we are, we are tying into the ai and the back end for those insights next slide.

B

So supplier benefits- I mentioned all these already. You know they have a single identity that they can share because they can share it. It eliminates redundancy of managing each of those relationships. um I should say managing each of those relationships. 100 right, there's still always going to be that five to ten percent with each relationship that they have to manage, but that significantly reduces their eff, their efforts suppliers own their own data. I I haven't stressed that enough: they own their own identity and they own their own data.

B

So they decide what they're going to expose publicly to be discovered and they just as a matter of fact, a buyer has to re once they see a supplier and what they've provided, if they're interested in taking that um relationship to the next level, they actually have to make a request to the supplier to see if they will are willing to share more of their passport with them, so they can continue to evaluate them. So sovereignty of data is important.

B

I mentioned the new business opportunities, of course, we're leveraging blockchain to ensure security and privacy of data and information, and then the marketplace. The marketplace there really is no limit to how far it can go other than we're just managing that to make sure that things that are added there are valuable to the ecosystem, but today we're only focused on onboarding and supplier information management, but we can see where this goes further down the road in terms of those relationships and, of course the buyers have benefits too next slide.

B

You know various oops back one. um You know very similar to the suppliers, they're reducing uh the lag time, they're reducing touch points, they're managing their risk better. um They also have additional business opportunities um so that it's very complementary to both sides of that relationship, buyers and suppliers. I already mentioned the third party: verifier benefits all right. What does the ecosystem look like today?

B

Oh yeah, so this this is probably from march. I think it's fairly up-to-date, probably noticeable uh what's noticeable. Is we have recently onboarded general motors representing the automotive industry, to our governance board? um Not all members of our governance board are completely on board it to the solution yet, but they are all participating and have been for the last many of these.

B

For the last year and a half in our quarterly uh meetings and like we're, really really proud of this network and we're really happy where it's going from a governor's perspective in our last quarterly meeting first quarter this year and we hope in the next one, which happens in two weeks, we've seen the governance board in this. These these these big companies, starting to take a lead and drive the road map and have ideas and uh the traction is tremendous, and I'm gonna give you a real quick example.

B

Vodafone earlier this year, invite started inviting their suppliers to the network and they actually created their own 30, second, video, that they shared with their suppliers of why they should be joining this network, not only because they want them to and they're asking too to do business more efficiently, but there's other the all the valuable things that I just mentioned. So when you see your governance board, making those kind of uh investments and outlie outlay to help this uh ecosystem, we really feel like we're headed in the right direction.

B

You know it's it's even though we've been doing this for 18 months. In many cases it still feels like day zero. um uh I I'm sure morelli thinks differently, since we've had like three iterations of the interface, the user interface and all, but it is a tremendous solution um and uh we're very proud of it. So um I'm gonna hand this off now to murali to go into more about the technology, but maybe now is a good time to see. If there's any questions, I have a chance to look at the chat.

A

Yeah, please everyone. If any questions, we have good opportunity to ask people who are involved in global supply chain supply, chain, uh solution, implementation and definitely could share a lot of interesting and valuable information.

B

Yeah yeah, it's a great point: it is global solution and today it's available in 70 countries- and this is just one one network running uh for all 70 of any country, so yeah definitely global.

B

A

B

Any questions it's very small group, so we can certainly.

A

B

A

Be very open, uh but please do not forget that we have uh live stream on youtube.

B

God, thank you all right. Raleigh! All yours.

D

Thank you, zach.

D

So isaac has summarized what uis is, but I just want to summarize it once again: it's a trusted network of buyers and suppliers and ecosystem partners right and when we're talking about these buyers and suppliers, we're also talking about the information that is being exchanged, the data that we are holding on behalf of these entities right when it comes to that there is a lot of personally identifiable information that is stored in on the platform, and there is also sensitive information related to the revenues or the banking.

D

All those things are also said, and the magnitude of this data to get a picture you can think about thousands of buyers and millions of suppliers right and the data of all these suppliers and the admins of those entities.

D

All this information is being stored and on top of it, we have deployed, like isaac has mentioned in 70, plus countries already, and we are going global, adding more and more countries as we speak.

D

So when we do this kind of a thing most of the enterprise application challenges, they apply right. Some of them are related to the security.

D

How do we engineer our network such that it is secure, and how do we scale right when we are talking about millions of these entities we had to scale and also, how do we make sure that business continuity is ensured right? So all these things we take we're taking into consideration, and that is one of the reasons why we went with the blockchain.

D

If you look at this following chart, you would see that without a blockchain in the picture, when these entities had to communicate, they either had to hold the data with them right. The entity has to own the data and it should host it as well as they had to share some of this information with others, so we're getting to share the databases which are easy to hack and also we have to rely on multiple intermediaries to validate this information so with the blockchain.

D

The single shared ledger right, which would help us providing a tamper-proof solution.

D

So this is a distributed ledger where the data is validated by all the participating organizations, so it is guaranteed to be valid and you can always audit it anytime and the records are immutable. So these are all the advantages that the blockchain brings into this solution.

D

In essence, that makes us into a trusted common, a single version of the truth.

D

We'll get to the next slide.

D

uh If you have any questions on any one of this, you can ask me immediately: don't have to wait for the end, so all the advantages of the blockchain are realized, so we make sure we make sure that our solution leverages on all the benefits, including the decentralization or the transparency of the information where any participating organization has access to this. But at the same time we made sure that we encrypt the information so that it is not compromised easily right and immutability of the records is always there.

D

You get to the next slide.

D

When we talk about data, like I said, we are holding a lot of personally identifiable information right and there is a lot of sensitive information related to the business operations like the ownerships or the locations or the payment data. Everything is there right, so data is one part, and normally we talk about the security and privacy as one thing, but if you look at it, we have to layer them right. This data has to be made secure. That is the first step right.

D

When we talk about security, we are talking about unauthorized access to the data right. We are talking about protecting against malicious threats, so the data security has to be both. We had to make sure wherever the data is hosted, that physical location is secure right and as well as the computing infrastructure that is hosting the data. That also has to be secure.

D

On top of it, the network where this application is running and accessing all the data that has to be secure. So under the security you'll see, we had to take into account a lot of things like sanitizing or.

B

D

Of the major requirements with the pi information is when a party which owns the data like isaac has mentioned, the data is sovereign right. The entity is either a supplier or a buyer, they want their data and they decide whom to share the data with.

D

So when that kind of requirement is there, if a party wants to get out of the network, we have to make sure the data is cleaned and it is no longer accessible right. We have to make sure the data is encrypted, backed up so that whenever there is a problem, we will be able to recover the data and we had to make sure all our development machines, so they have policies for the removable media and the data.

D

Again, we are talking about data from multiple organizations kept in the same system, so we had to make sure it is properly segmented and isolated from each other right. The sharing is by.

D

By the organizations.

D

Constantly- and we also had to take into account the malware management, so we integrated a set of tools into our application, which continuously checks for any data that is uploaded into the system for any virus signatures, and we also take care of checking these kind of malware checks on all the data.

D

That is all the modules that we are using the application modules that we are using and also make sure that we are patching and keeping this system up to date right and on top of it, we also do penetration, testing and search got static code analysis of the code to see if any uh patterns of occurred that is vulnerable for this kind of hacks.

D

So some of these things we had to take into account for security right once the data is secure. We get into the privacy concerns right when we have deployed it in multiple countries. We had to take into account the compliances, the regulations and compliances of all those countries right. European union has one set of regulations, whereas the california has another set, and now brazil came up with its own set of regulations for data access. So we had to put policies in place so that we don't share the data right.

D

We use the data responsibly right, we don't use it for any marketing or any other thing, or we don't publish the data to unauthorized entities for uh mining right. We we take into account the sensitivity of the data, so we make sure it is processed and it is stored and transmitted in accordance with all these policies and compliance rules right.

D

This also includes the data that is used for discovery like when we talk about multiple buyers and one of the value proposition that we are giving to our buyers is the ability to discover suppliers who are dealing with a particular product or who are operating in a particular region, etc.

D

So, when a buyer discovers a supplier, we show only the information that is not part of any of these sensitive data, and once they establish a business relationship with this suppliers, that is when the entire data is accessible to them. The data includes the information that they yeah. The answers to the question is that the buyer has given to the supplier, which we have talked about earlier right, and we also make sure that the data is classified and the consents are captured like when a subplot shares the data with a buyer.

D

We make sure that the consent is there and when we talk about the third party validators and others, we are also very careful about the data that is exchanged with these third parties. To make sure none of this data is compromised. So this this comes into the privacy part of it. That's how we made sure that the data is secure and privacy is ensured, we'll get to the next any questions on the data, privacy or security.

D

If not we'll go to the next slide, so the using like uh yeah we'll go to the next slide.

A

uh We have two questions on our chat.

D

A

Like to answer now, yes, when you talk about p2, what do you collect? Do you collect in dual individual p, 2 or business p2? We.

D

A

D

Yeah right, we do both it's the personally identifiable information, we're talking about right. So, for instance, in case of the business the business is operating in a particular location. It may have offices in a set of locations.

D

So all that location information is one of them and when it comes to the persons who are marked for uh managing those entities, the admins of those entities right, we have the email information we have the first name, last name, information, etc, and when a supplier establishes a business relationship with a buyer right as part of the questionnaire they'll, be exchanging information related to their financials last three years of financial information, for instance, or their ownership like.

D

If it is a corporation right, if it is a privately owned or it is publicly owned and who owns what percentage of that corporation all that it goes into that and the contacts related to those entities. So it's both.

A

It's the second part, is also what is payment data, maybe.

D

Right payment data- that is because a supplier right right now, the way to is structured is it is there is a subscription fee for the supplier, so they have to enter the payment information.

D

This is one part and then for the buyers also, they have to provide the payment information um so that, when that take, that is taken into their erp and other stages for doing the business, like the bank account information, for instance,.

A

Okay, no more questions, no more questions. Please continue.

D

I said earlier, this is nothing but an enterprise application, but with a stringent data related requirements right, so we leveraged ibm blockchain platform for all its capabilities, including the disaster, recovery or backups, and things like that. On top of it, we made sure that we built security into the solution right. It's not an afterthought, but we architected such that security as well as the scalability are built into the solution, because we know that we'll be dealing with millions of for these entities.

D

So that's one part of it and.

D

And when it comes to the leveraging, the blockchain capabilities themselves, you'll see that we had to make use of everything, including the channels and the certificate authority that is provided by the ibm blockchain platform, so that the data related to a buyer or a supplier is encrypted with the certificates that are owned by them.

D

And we also made sure that we deployed this application in multiple regions and jones so that, if any one fails, we still have access to the network.

D

And wherever possible, we have utilized open source components, that's to make sure that we can build it faster and securely.

D

The other thing that we did is when it comes to the identity, management or access management. We also made sure that we can integrate into an entity like a buyer's sso, so the buyer admins can log in with the same credentials as their organizational credentials.

D

Any questions on the principles.

A

uh Just one, ah it is one questions I would like to listen about oracle issues. If there is some approach.

A

Oracle, it's about oracle's in the blockchain or oracle. In as a company and the data provider, databases providers.

D

A

Is it clear for.

D

Your question: no, it's not clear.

C

I think it is oracle than blockchain. You know somebody, someone reporting all the data.

D

So there are no issues as such: there right we're compliant with uh so is there anything specific.

D

Or ultimately, you can send us an email and we'll reply to that.

D

B

There's a question about oracle's uh raleigh.

D

Right but what is the question about.

A

uh Is on uh okay, it's um update in terms of some approach without oracle protocol like a band or chine link shine in link.

D

I'm not sure about it like.

B

We don't use an oracle like chain. Let me rally I'll take this. We don't really use an oracle like chain link. I understand that concept, but if you think about it, the third party verifiers are are um they're like the oracles right they're, providing the trusted data and then helping to validate the data before it ever gets written uh into the system.

B

So they they that's. I would view them as the oracles each with their own specific set of um you know trusted data that they they can help with us with verification. If that makes sense,.

D

Okay, I did. I got it.

A

One small note: sorry: I guess we had only six minutes to the end of our uh webinar, so please pay attention to that.

D

So for the verification, it is not the chain card, as isaac pointed out, but the third party does the verification and provides that the information which we store we'll go to the next slide quickly.

D

uh So the left hand side, you have the tois application access right. We have a service layer that we use to access the application and that accesses the blockchain api to get to the ibm cloud.

D

Sorry ibp and we also have a key management solution that we we are using from the ibms which we use to encrypt the data in the mongodb that there are two there is the off-chain data and there is unchained data in order to be compliant with the gdpr etc. What we did was none of the pi information is put on the chain.

D

Instead, we put it in the mongodb encrypted, with the keys of the buyers and the suppliers, so you'll see a off database and also the digital identifier service, which can validate a id that is specified or any api layer right that can be used to integrate into the third parties, including the buyer's erp.

D

Systems, so that's only a high level view of it on top of it. We also have this deployed in multiple zones and regions, and we make sure that the firewalls and other things are all put in place right and a monitoring solution using syslogs, sysdiag and log dna and other things are in place.

D

The internal communication is all submits here, using tls, as well as using whitelisting to make sure that it is not compromised.

D

Any questions on this.

A

Here on the chat we, uh I will fix it again. One question about: could you please use microphone? Maybe uh to ask your question. I guess it will be more uh appropriate way.

A

ah Hello, hello, please hi hi! uh um Let me introduce myself. Firstly, my name is jesus lim from south korea yeah. uh What I wanted to know about chanyar, the watching yard uh tried to approach, uh has own solution about about oracle solution. Only that without banned protocol or channel link protocol.

D

So if it is just the smart contracts right, we can put it on any uh blockchains uh chennai would be able to help you with that isaac. Do you want to take that question? We have consulting assignments so yeah. I.

B

Think yeah, I think the question is what was our motivation for doing it? This way as as opposed to like a public blockchain, and I think the answer to that is in the you know, in the state of where blockchain is today, especially acceptance with big enterprises.

B

um It still needed to be, uh you know, considered being more private because of the concerns around data privacy, even though we all know you can trust blockchain, but companies don't necessarily um trust it and there's a regulatory environment as well. So we thought that this is a great first step and um you know of going with a private blockchain and and using our own ways to verify the data with third-party verifiers, who are already part of the process.

B

So it wasn't a complete revamp of the solution, but just I would say a modernization of how it's being done to add the efficiencies.

A

Oh yeah, actually I I I didn't want to um um to invest you guys. Actually, I just only wanted to know um yeah a way if someone used private blockchain in supply chain.

A

Definitely I um I guess, there's a lot of problem about oracle issues, so uh I want I actually.

A

Want to listen about that. Firstly, that's all yeah!

A

Okay, thank you, jesus, any more questions, because our time is almost over. So any last sentence from yuisak or anyone else, and I guess if no more questions we could close. So please the final uh work from unicycle.

B

Sure I just wanted to say thank you to hyperledger, and the meetup group and um illinois for allowing us to you know, share our our journey and experience, and you know we're always willing to uh spend time outside of this call with anybody to help you with your journey or as as I was just not, it would help you with your your projects. If you have some something you need help with. Thank you.

A

Yeah definitely also thank you chainyard for letting us know and the introduction of uh trust your supplier solution, as I mentioned at the beginning, a big part of lithuanian industries acting as a suppliers. So I hope this webinar will be very useful for part of our supply chain industry. So, thank you very much. Thank you, jijo and all of you and see you next time thanks. Everyone.

D

And I'll get to this on.

A

The youtube channel right after this.

C