►
From YouTube: Blockchain for enterprise. But what about security?
Description
Blockchain, the distributed ledger technology (DLT) underlying bitcoin, is far more valuable than the currency it supports. As enterprises start to put distributed ledger technology into practice, it’s important to understand the security implications. We’ll look at public vs. private blockchains and lessons learned for enterprises moving to DLTs. We will walk through real life deployments of Blockchain solutions and discuss how Blockchain can both enhance security but also when built into traditional solutions requires traditional security measures. This talk will leave you with understanding how Blockchain does, and does not, change the security requirements for your enterprise. Then we’ll talk about Hyperledger’s new Bug Bounty program. Join us!
In this session you will:
• Learn that Blockchain is a tool, not a solution; we will define specific use cases
• Walk away with an understanding of private vs permissioned blockchains
• Develop a better understanding of the flexibility, security and regulations that will need to be met
• Get details on the Hyperledger Bug Bounty Program
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
A
Hello,
everyone
and
thank
you
for
attending
today's
webinar
blockchain
and
the
enterprise,
but
what
about
security?
My
name
is
Emily
and
I'm.
A
member
of
the
hyper
ledger
team
here
at
the
Linux
Foundation
before
we
begin
I
want
to
cover
a
few
housekeeping
items.
First,
this
webinar
is
being
recorded.
So
if
you
need
to
drop
off
at
any
point,
we
will
automatically
send
you
a
link
to
the
recording
via
email
within
a
day
or
two
at
the
bottom
of
your
audience.
Console
are
all
the
widgets
that
control
the
movable
and
resizable
content
windows.
A
You
can
click
and
drag
the
lower
right
hand
corner
of
each
widget
to
change
the
size
and
you
can
move
the
windows
around
to
customize
the
layout
to
your
preference,
starting
with
the
icon
on
the
left,
the
red
film
rail
controls,
the
audio
for
this
event,
or
it
allows
you
to
fast
forward
or
rewind.
If
you're
watching
this
on
demand,
the
Q&A
widget
allows
you
to
submit
questions
at
any
time.
During
the
presentation,
we
will
try
our
best
to
answer
as
many
of
them
as
we
can.
A
If
you're
watching
this
on
demand,
you
can
still
submit
questions
and
we
can
respond
to
you
via
email.
The
chart,
icon
controls
the
slide
viewing
window.
The
document
widget
contains
links
to
resources.
We
hope
you'll
find
interesting
as
well
as
a
copy
of
today's
slide
deck.
The
person
I
can't
open
the
window
where
you
can
learn
more
about
today's
guest
speakers.
The
clipboard
allows
you
to
access
our
survey
widget,
which
helps
us
collect
valuable
feedback.
A
You
can
join
us
on
Twitter
using
the
hashtag,
LS
webinar
and
don't
forget
to
follow
us
at
hyper
ledger
and
athletics
foundation,
as
I
mentioned,
keep
an
eye
out
for
an
email
from
us
in
the
next
day,
or
so,
with
a
link
to
today's
recording
that
takes
care
of
our
housekeeping
info
I'm
pleased
to
introduce
today's
guest
speakers
today,
we're
joined
by
Dave
Hughes
be
security,
maven
and
Marta
Pia
carska
director
of
ecosystem
here
at
hyper,
ledger
I'll.
Let
you
tell
them
I'll.
Let
them
tell
you
a
little
bit
more
about
themselves.
Thank
you!
B
Thank
You
Emily
and
thank
everyone
for
joining
us.
We
really
appreciate
your
time.
My
name
is
Marta.
I
am
director
of
ecosystem
in
hyper,
ledger
sea
for
basically
all
my
life
since
I
started,
study
and
today,
I'm
very
excited
about
blockchain
and
what
it
can
bring
to
enterprises.
They
can
you
tell
us
something
about
yourself.
C
Yeah
hi
I'm
Dave,
husb
I'm,
the
security
maven,
a
hyper
ledger,
I
get
the
question
all
the
time.
What
a
security
maven
is
briefly
I
think
I'm
just
important
I'm
in
charge
of
all
the
security
related
things
with
our
blockchain
projects,
doing
unbound
ease
and
security
bug,
report
handling
and
also
coaching
our
teams
in
secure
software
development
practice
practices
I've
been
in
the
open-source
industry
for
going
on
25
years,
yes,
really
like,
since
the
mid
90s
and
for
the
last
decade
or
so
I've
been
focused
mostly
on
software
security
and
how
to
write
better
software.
B
Dave
yeah,
so
you
know
how
it
goes.
Orange
is
the
new
black
blockchain
is
the
new
black,
all
blockchain
sprinkles,
but
let's
start
with
setting
up
some
ground
for
what
we
understand
and
what
we
should
know
about.
Blockchain
before
we
dive
into
security,
we
started
exchanging
the
food
and
trading
a
long
time
ago.
First,
long-distance
transaction,
a
period
between
Mesopotamia
and
Indus
Valley
in
Pakistan
3,000
years
before
Christ
there
is
an
implied
need
for
people
to
interact.
We
are
social
animals
and
we
I'm
good
better
at
having
more
bread.
B
You
might
be
better
at
getting
more
peanuts,
so
we
need
to
exchange
those
bits
and
we
need
to
exchange
value
in
order
to
live
in
a
society
question.
How
do
we
agree
on
acid
balance?
How
do
we
track
value
of
those
exchange
codes
if
I
give
Dave
two
loaves
of
bread
and
in
return
I
get
one
fish?
Obviously,
I'll
try
to
no
be
cheeky
and
sneaky
and
move
that
from
one
get
for
the
next
one
fish,
five
little
loaves
of
bread.
So
how
do
we
agree?
B
How
much
one
would
loaf
of
bread
is
worth
in
the
end
and
who
owes
whom?
How
much
traditionally
we've
done
that
with
Ledger's
Ledger's
as
in
books
that
keep
track
and
record
of
all
of
the
transactions
that
we've
done
either
the
traditional
Ledger's
were
probably
on
today
slabs,
then
we
moved
to
paper.
However,
you
know
paper
is
very
volatile.
It
could
destroy
it
easily
so
and
leave
them
behind,
and
that
way
the
whole
history
would
be
completely
destroyed.
That's
why
we
move
to
digital
world.
B
However,
he
he'll
probably
know
that
any
digital
digital
file
can
be
copied
and
I
bet.
All
of
us
has
some
experience
with
copying
data
over
the
internet
and
downloading
it,
and
so
on
still,
if
I
copy
a
file,
I
can
also
change
it,
and
now
we
have
a
problem,
because
how
do
we
agree?
What
is
the
ledger?
What
is
the
some
Commons
single
source
of
truth?
Well,
there
is
an
answer
to
that:
it's
the
internet.
B
With
the
introduction
of
Internet,
we
were
able
to
create
peer-to-peer
networks
where
we
could
keep
our
Ledger's
and
sing
and
create
network
of
independent
notes
where
each
store
a
copy
of
that
ledger.
Every
time
a
new
transaction
new
exchanges
created,
we
can
people
can
announce
that
and
try
to
achieve
some
kind
of
a
consensus.
What
is
the
real
thing?
What
is
what
is
that
value?
We
now
want
to
store
in
our
ledger.
Of
course,
the
question
is:
how
do
we
agree
on
it?
What
are
what
is
a
good
so-called
consensus
mechanism?
B
So
that's
why
people
love
blockchain,
because
there
are.
These
are
the
potentials
of
that
fairness
you
all
have
heard
of
and
why
we
are
all
asked
by
our
business
developers.
Oh
please,
let's
move
to
blocking
enterprises,
love
blockchain,
because
it's
a
technology
and
I
can't
even
stress
that
I
love
far
beyond
what
bitcoin
has
to
offer
it
shared
Ledger's
network
notes
and
generate
and
verified
data
generated
by
the
others.
So
we
don't
have
to
rely
on
one
one
source
of
thing.
B
We
can
control
the
historic
record
of
verify
transactions
that
is
easily
auditable
because
it
is
accessible
anytime
anywhere.
There
is.
We
can
create
distributed
consensus
mechanism
that
eliminate
costly
and
inefficient
reconciliation,
the
processes
and,
as
I
said,
there
are
many
consensus
mechanisms
they
have
better
or
or
different
qualities.
However,
there
is
never
one
central
repository
or
there
shouldn't
be
one
central
repository,
which
means
that
there
is
no
single
point
of
failure.
In
case
the
network
goes
down.
You
have
to
take
down
a
big
part
of
that
network
to
actually
destroy
blockchain.
B
It
is
resilient
to
that
network
power
and
cryptographic
integrity,
and
there
are
large
economic
disincentives
for
malicious
actors
to
play
and
I
guess.
This
is
simple
now
and
easy
to
understand
why
World
Economic
Forum
published
a
white
paper
where
the
predicted
that
by
2025
10%
of
global
GDP
will
the
assets
tracked
and
traded
using
blockchain
base
distributed
Ledger's,
it's
incredible,
10%
and
only
well
seven
years
from
now.
That's
that's.
That
amazes
me
to
be
on
others.
B
We
have
recognized
that
I've
been
in
that
space
for
four,
maybe
six
years
and
still
don't
quite
grasp
it.
All
I
use
clear
words,
and
these
words
quite
often
seem
to
make
sense.
But
then,
when
I
did
deeper
into
it,
I
can't
quite
understand
and
that's.
Why
would
they
we
created
this
cheat
sheet
for
you?
So
I
promise
you,
google,
those
twenty-five
words
and
you
will
be
and
obviously
memorize
what
they
mean
and
you'll
be
able
to
have
a
currently
decent
and
informed
conversation
with
anyone
on
about
blockchain.
C
C
The
rest
of
all
of
the
hacks
are
focused
on
implementation,
details
it
with
servers
and
with
handling
of
credentials
and
cryptographic
keys.
What
that
has
led
to
is
something
like
this
with
Japan's
coin
check
company
they
were.
This
was
current
year.
This
was
in
January
of
this
year.
The
largest
crypto
hack
in
history
took
place
against
really
just
the
users
wallets.
C
This
was
a
implementation
detail
that
went
wrong
and
it
allowed
an
attacker
to
penetrate
server
the
server
and
to
steal
for
five
hundred
and
thirty
million
dollars
worth
of
their
cryptocurrency,
and
the
this
highlight
sort
of
a
fundamental
shift
that
we're
seeing
the
central
as
we
move
from
centralized
systems
to
decentralized
systems
with
these
distributed.
Ledger's
originally
well
traditionally,
I
would
say
traditionally
is
kind
of
funny
word
using
technology,
because
things
change
so
rapidly.
C
But
traditionally,
we've
had
these
centralized
systems
where
people
use
usernames
and
passwords
to
log
into
a
system
and
a
central
server
would
then
grant
them
the
capability
to
do
certain
things
and
any
time
they
would.
They
try
to
upload
a
file
or
download
a
file.
The
centralized
server
was
checked
with
their
credentials
to
sit
and
to
see
if
they
could
download
or
upload
the
file
now
moving
to
decentralized
systems.
We
have
to
come
up
with
a
different
way
of
handling
authentication
and
the
capabilities
of
users.
C
There
was
a
paper
written
by
a
computer
scientist
named
David
Tom
back
in
the
80s
that
suggested
that
public/private
key
pairs
could
be
used
as
capabilities
possession
of
a
private
key
could
be
all.
You
would
need
to
be
able
to
do
a
certain
action
in
a
distributed
system
and
fast-forward.
Today,
all
cryptocurrencies
and
all
distributed
Ledger's
are
based
on
this
idea.
C
It's
a
fundamental
shift
in
the
way
we
think
about
security,
and
the
primary
consequence
of
it
is
that
it
pushes
security
to
the
edges
and
makes
the
key
material
high-value
target,
and
that's
why
we
see
a
large
number
of
cryptocurrency
hacks
happening
against
exchanges.
Exchanges
are
servers,
they
concentrate
the
key
material
for
all
the
users,
people
who
possess
the
cryptocurrency.
C
We
based
the
systems
on
very
solid
theory,
but
this
is
one
of
my
favorite
quotes
by
Walter
Savage.
In
theory,
there
is
no
difference
between
theory
and
practice,
but
in
practice
there
is
so
as
we
build
out
these
systems,
we
need
to
recognize
that
basic
security
matters
right
and
that
the
users
user,
centric
security
matters
we're
moving
away
from
a
simple
user
name
and
password
system
to
every
user
having
to
own
and
manage
this
high-value,
key
material
and
there's
a
whole
industry
development
around
this.
C
With
you
know,
hardware
wallets
and
key
s,
growing
hardware,
security
modules
and
all
these
things
and
and
we've
also
done
a
lot
of
research
in
key
splitting
and
key
signing
keys
and
HD
wallets
and
all
these
new
technologies
that
are
being
developed
to
try
to
solve
this
problem.
But
it's
certainly
a
work
in
progress
and
the
user
experience
in
many
ways
are
gotten
worse.
I
mean,
if
you
think,
of
an
unsophisticated
user
coming
to
one
of
these
systems
and
suddenly
they're
presented
with
here's,
your
private
and
public
key.
C
Now,
don't
lose
it
because
if
you
lose
it,
you
can't
participate.
You
leave
all
of
your
crypto
and
you
can't
store
it
to
disk,
because
if
anybody
gets
it,
they
can
just
feel
all
your
cryptocurrency
and
there's
nothing.
You
can
do
about
it.
So
you
can
see
that
the
security
challenges
are
immense,
but
they're
all
concentrated
more
on
the
end-user
and
that's
that
sort
of
the
world
we're
moving
to
as
we
deploy
all
of
these
blockchain
based
solutions
in
all
of
these
different
industries.
C
But
one
thing
that
I
want
everybody
to
remember
is
that
we
already
know
how
just
how
to
secure
servers,
how
to
secure
data
at
rest.
How
to
secure
data
in
motion
and
I
would
argue
that
95%
of
blockchain
distributed
blockchain
based
solutions
distributed
ledger
security
is
something
we
already
know
using
firewalls
properly
and
then
protecting
data
at
rest,
using
encryption
and
all
of
those
things.
So.
C
There
is
a
spectrum
of
solutions
that
are
coming
out
of
these
distributed
Ledger's
and
am
just
you
know
everything
you
know
about
basic
security
in
your
industry
still
applied,
so
don't
panic
as
they
come
into
your
industry
and
it
hybrid.
You
were
very
fortunate
to
have
hundreds
of
corporate
sponsors
that
we
have
been
able
to
learn
from
so
market.
Can
you
talk
us
through
some
of
these
solutions
from
our
partners.
B
Well,
yes,
but
first,
let's
talk
why?
Why
blockchain
for
business?
How
do
you
actually
use
it?
It's
up
to
you,
but
there
isn't
a
spectrum,
and
we
know
today
that
there
won't
be.
There
won't
be
one
blockchain
to
rule
them
all.
So
why?
Because
for
every
use
case,
we
need
a
different
different
model,
and
let
me
give
you
an
example
here,
of
course
there
are,
there
is
the
permission:
less
public
network
like
the
based
around
only
theory
where
anyone
can
write
to
that
blockchain
and
anyone
can
read
from
my
blockchain.
B
However,
on
the
other
hand,
in
the
case
of
saying,
Medical,
Records
gene
really
wants
to
have
a
situation
where
anyone
can
access
your
medical
records,
and
if
you
didn't
have
a
nice
meeting
with
someone,
they
can
simply
just
add
a
bit
of
hepatitis
C
to
your
medical
records
because
they
can
access
it.
That's
why
we.
B
Have
that
spectrum,
where
permission
versus
permission
lasts,
the
blockchain
and
private
versus
pendant
is
about
visibility,
who
can
read
from
above
in
the
middle
ground.
We
have
a
lot
of
a
lot
of
space
to
develop,
for
instance,
for
land
titles
or
a
university
degree.
It
is
a
great
units
case
to
have
a
permission,
but
public
launching
were
only
certain.
People
like
the
registry
office
or
university
are
able
to
prove
that
or
submit
information
that
you
have
actually
graduated
from
that
University.
B
But
on
the
other
hand,
anyone
can
go
and
verify
was
their
solution
like
that
that
I
have
obtained
a
PhD
in
computer
science
from
Berlin
University.
So
we
need
those
different
different
block
chains
and
we
can
see
very
clearly
on
depending
on
the
industry,
the
ASP
and
the
adoption
rate
deployments
today
are
different
and
if
someone's
telling
you
that
you
are
too
late
to
the
game,
you're
not
you
may
know,
it
may
only
really
mean
that
you
have
enjoyed
the
kool-aid
crowd
yet
definitely
looking
at
it.
B
B
Financial
technology
on
the
other
hand,
and
I
specifically
mean
that
in
tech
and
not
just
cryptocurrencies,
because
we
want
to
stay
shy
away
from
that
has
been
in
the
Curan
evaders
curve.
They
have
definitely
been
deploying
and
developing,
and
today
we
have
see
some
extremely
interesting
consortiums
being
build
on
top
of
permission
parties,
and
then
we
have
early
majority
like
logistics,
insurance
and
governments.
It
is
incredible
to
think
that
today
there
are
203
different
government
use
cases
and
projects
around
the
world
all
the
way
from
Americans
to
China
to
through
India
and
all
Europe.
B
B
2020
but
truth
is
that
we,
the
technologists
the
geeks,
think
that
we
can
solve
it
all,
and
we
can't
it
is
like
that.
I'll
take
xkcd
that
I
really
really
like
blockchain
will
not
solve
all
of
your
problems.
In
fact,
it
may
actually
create
more
problems
than
it
solves
in
some
case,
and
blockchain
is
not
an
answer
to
all
of
your
problems.
B
C
Sure
Martha
I'm
be
given
to
the
right
slides
here
there
we
go
yeah
there.
There
are
a
whole
host
of
problems.
They
come
along
with
doing
decentralize
Ledger's
distributed
Ledger's
in
the
enterprise,
but
I'm
going
to
focus
on
one
today
for
the
most
part,
that
being
the
most
obvious
challenge,
with
enterprises
being
top-down,
centralized
organizations
that
are
used
to
controlling
who
can
and
cannot
get
access
to
their
computer
systems
and
what
everybody
can
do.
C
You
have
a
very
role
based,
centralized
management
system
and
now
we're
asking
these
enterprises
to
shift
to
these
decentralized
Ledger's,
where
you
have
multiple
organizations,
typically
coordinating
across
their
normal
firewall
boundaries
and
sharing
data
and
trying
to
like
be
silo,
lies
their
business
operations
and
if
you
can
think
of
like
a
vertical
in
an
industry
where
you
have
a
producer
and
a
wholesaler
and
a
retailer,
we're
asking
them
to
start
sharing
data
in
real
time
and
a
lot
more
data
than
they
traditionally
have.
They.
C
Enterprises
are
designed
really
to
collaborate
other
than
what
their
normal
formalized
paper-based
collaboration
tools
are,
and
when
we
move
to
these
decentralized
systems,
suddenly
things
get
a
lot
more
efficient
and
a
lot
more
data
starts
flowing
and
there's
all
these
challenges
around:
protecting
your
intellectual
property,
protecting
the
operational
advantage
and
intelligence.
You
go
back
to
my
example
of
a
vertical
where
you
have
a
producer
and
he'll
wholesale.
Our
retailers.
C
If
you
have
multiple
wholesalers,
multiple
producers,
multiple
retailers,
how
do
you
get
all
of
them
to
cooperate
on
a
decentralized
system
and
still
allow
4k
a
wholesaler
in
them
and
a
producer
to
negotiate
a
different
deal
than
that
same
wholesaler
and
a
different
and
another
producer
like?
How
do
you
that?
That's
that
the
price
is
negotiated,
our
actual
operational
secrets,
because
that
data
then
moves
forward
in
time
that
information
moves
forward
in
time
and
becomes
a
competitive
advantage
like
a
retailer,
can
offer
a
sale
because
they
got
a
better
price
from
the
wholesaler.
C
C
Well,
hyper
ledger:
block
a
networks
are
designed
to
not
only
distribute
the
load
and
spread
out
the
risk
and
further
this
collaboration,
but
also
to
protect
the
confidentiality
between
parties
on
this
broad
chain.
Open
source
definitely
helps
I
mean
we're
building
a
platform
where
it's
lots
of
eyeballs
on
it
and
I
spent
a
lot
of
time
worrying
about
how
to
make
that
platform
secure
and
solid
and
something
that
people
can
trust
and.
C
C
The
one
thing
that
we
need
to
know
is
that
it
really
is
important
to
be
earnest
like
we
all
want
to
make
the
world
a
better
place.
We
all
want
to
add
nice
things
and
so
doing
the
open
source
thing
and
doing
correct.
Responsible
disclosure
systems
are
hard
when
you're
in
these
decentralized
autonomous
networks,
and
what
we
want
to
do
is
develop
ways
for
us
to
collaborate
on
these.
C
C
Now
we
do
need
to
know-
or
do
you
remember,
that
these
are
decentralized
systems
and
denial
of
services
and
essentially
denial-of-service
attacks
are
real
thing.
The
consensus
networks
at
the
core
of
these
networks
need
to
be
protected.
You
can
think
of
security,
for
these
blockchain
networks
is
modeling
or
being
very
similar
to
enter
your
architecture
for
websites.
C
You
have
API
servers
that
clients
of
the
network
interact
with
and
those
can
be
thought
of
as
sort
of
your
front
end
reverse
proxy,
using
it
in
an
interior
architecture,
and
then
we
have
transaction,
validators
and
transaction
and
the
end
the
ordering
system,
the
putting
transactions
in
the
blocks,
that's
sort
of
your
middleware
and
nadir,
and
then
the
consensus
network
where
blocks,
get
voted
on
and
distributed
as
sort
of
your
back-end,
and
so
the
same
kind
of
security
applies.
Your
consensus
network
should
be
definitely
behind
the
firewall.
Then
how
do
you
solve
that?
C
The
other
thing
to
consider
is
with
smart
contracts
when
you're
encoding,
complicated
business
logic
are
really
as
smart
as
only
as
smart
as
their
office.
If
the
smart
contracts
are
flawed,
your
overall
broad
chain,
your
overall
distributed
ledger
system
is
going
to
be
flawed.
I
mean
we
saw
this
in
the
Dow
Mac
right.
It's
really
important
to
make
sure
that
your
smart
contracts
are
simple
and
straightforward
and
get
reviewed
and
tested
before
putting
them
into
production.
C
B
Absolutely
they
are,
they
are
the
they
are
getting
a
lot
of
value.
With
two
hundred
and
fifty
members
in
Harbor
ledger.
We
are
really
lucky
to
serve
the
Wild
West
of
permission,
Ledger's
and
blockchain,
and
I
can
tell
you
that
really
is
the
limit.
You
can
be
as
open
as
you
want,
or
as
caved
as
you
need
to
be.
Interestingly,
there
are
in.
B
Mind
of
two
categories
of
solutions
and
deployments
I
see
today
in
one
is
there
as
a
part
of
the
whole
solution.
Whole
system
doesn't
necessarily
increase
security
and,
quite
often
quite
the
opposite.
It
actually
means
that
you
have
to
have
to
get
another
layer
of
security,
so
blockchain
becomes
part
of
your
traditional
legacy
solution
that
improves
other
elements
of
the
system,
but
it
doesn't
quite
improve
the
security
and
then
there
is
another
layer
where
it
becomes
when
blockchain
becomes
your
security
assurance,
it
increases
your
security,
so
safe
technology
can
be
really
used
both
ways.
B
Let
me
let
me
go
through
two
examples
and
I
know
Dave
that
you
have
one
that
you
really
want
to
talk
about
so
I'll.
Let
you
do
that
in
a
second
and
let's
look
at
Bill
and
the
death
of
that
spectrum
or
the
transaction
change.
Health
care
of
hiker
Ledger
has
created
a
claims
management,
transparency
system
between
the
play
payers
providers
and
other
authorities.
It
is
very
interesting
here
to
observe
that
basically
blockchain,
it's
maintaining
the
real-time
immutable
record
of
claim
lifecycle
and
is
being
kept
as
verifiable
and
trusted
root
of
root.
Of
truth.
B
Then,
through
that
same
network,
the
blockchain
can
trigger
an
event
on
the
claims
network
work
for
activity
allowing
for
the
payer
to
now
see
that
there
has
been
a
claim
that
has
been
submitted
and
again
payer
looks
at
the
that
claim
and
can
be
then
verified
with
the
provider
to
pass
over
the
claim
to
the
provider
and
provider
access
can
access
the
claim
status
from
the
blocking
through
an
API,
so
it
all
concentrates
around
block
G.
Now
the
question
is:
how
secure
a
system
like
that?
B
If
we
all
agree
on
something
that
is
not
true
or
we
accept
a
transaction
that
is
not
true,
then
we
have
a
problem
because
we
don't
have
a
way
to
remove
the
transaction,
and
now
everyone
is
informed
about
a
fake
news.
Basically,
so
this
is
why
blockchain
really
has
to
be
secured
as
well
as,
in
addition
to
all
of
these,
like
plain
networks
and
how
payer
is
doing
or
keeping
works,
pairs,
keeping
on
their
servers
and
provider
and
so
on
and
so
forth.
On
the
other
hand,
we
have
a
very
different
solution.
B
This
is
an
amazing
example
of
also
how
blockchain
brings
collaborators
together.
Companies
like
Chronicle,
Tallis
and
Accenture
they're
to
create
a
secure
supply
chain
solution.
You
know
traditionally,
in
a
supply
chain,
you
pass
information
from
manufacturer
to
the
OEMs,
to
the
buyers,
to
the
customers,
all
one
food,
the
other,
but
this
is
not
really
very
cost-effective
and
not
very
secure.
So
what
these
three
companies
do
is
they
joint
forces
and
eccentric
integrated?
The
technology
is
deployed
to
demonstrate
how
blockchain
and
smart
contracts
can
be
used
by
OEMs
and
suppliers
on
Tanith
side.
C
C
This
black
use
case
comes
from
a
member
of
hyper
ledger
called,
has
Sarah
and
they
have
developed
a
really
really
clever
way
of
doing
ki
s
growing
on
the
blockchain,
in
a
way
that
mimics
your
normal,
centralized
enterprise,
key
s
growing
process
and
by
key
escrowing.
What
I
mean
is
in
this?
In
a
traditional
enterprise
environment,
you
have
a
centralized
access
full-system,
you
know
you
have
a
new
employee
come
in
and
you
have
to
set
up
their
account
and
issue
them
the
credentials
to
access
the
services
internal
services
that
they
need
to
execute
their
job.
C
Well,
in
the
decentralized
environment,
you
were
pushing
that
that
management
role
out
to
the
edges
as
well,
and
that
really
goes
against
the
grain
of
many
corporate
policies,
and
so
Sarah
came
up
with
this
really
clever
solution.
Where
you
have
a
system
administrator
who
is
able
to
manage
them,
the
members
of
the
people
are
able
to
access
the
blockchain
and
to
interact
with
the
different
API
s
and
then
submit
different
transaction
types.
C
They
can
manage
it
more
of
a
centralized
role.
However,
the
issuance
and
revocation
of
those
credentials
is
validated
by
the
blotching
and
distributed
and
the
ledger,
and
so
all
participants
on
the
ledger
can
track
the
the
access
control
system.
So
then
the
most
clever
part
about
this
is
this
is
just
a
general
protocol
and
its
blockchain
agnostic,
so
their
first
demonstration
of
this
one,
the
more
warded
a
hack,
that's
where
they
took
a
cerium,
Hyper,
ledger,
Sawtooth,
hyper,
ledger
fabric
and
and
by
the
way,
hyper
ledger.
C
Sawtooth
was
running
the
hyperedge,
a
burrow
engine
which
actually
runs
solidity
contracts
and
they
used
it
to
to
demonstrate
people
coming
into
this
system
participating
and
having
different
roles.
So
anyway,
this
becomes
like
a
third
role,
a
third
way
in
handling
the
credentials
and
access
to
the
centralized
systems.
So
it
eases
the
transition
of
bringing
a
distributed
ledger
into
an
enterprise
or
into
an
both
the
enterprise
organization
and
still
allowing
the
enterprise
IT
staff
administration
to
manage
the
access
in
the
way
them
most
comfortable,
more
of
a
centralized
way.
C
So
there's
a
you
know:
you
get
a
dashboard
and
all
these
things
and
everybody
can
see
credentials
being
issued
and
revoked
and
in
a
transparent
way,
but
the
only
people
who
can
see
it
are
the
administrators.
So
anyway,
it's
an
extremely
clever
way.
It
was
brilliant
solution
for
bridging
the
gap
between
the
centralized
and
decentralized
role.
You
know
the
centralized
role
in
the
past
and
the
decentralized
role
in
the
future
and
I'm
just
super
excited
to
see
this
I
think
it
really
opens
up
a
world
of
possibility
and
and
not
just
for
Hyper
lender
users.
C
B
On
rapper
yeah,
we
are
coming
close
to
the
final,
but
let's,
let's
summarize
it,
you
came
you've
seen
our
presentation
now,
I
have
or
we
both
have
some
action
items
for
you,
no
matter
if
you're,
a
technologist
or
a
designer
or
a
CEO
of
the
company.
Just
remember
blockchain
is
just
a
tool
and
we
have
to
design
our
solutions
well,
so
short
term.
What.
B
Remember
that
old
security
measures
apply
and
there
are
new
ones.
They
all
hope
so.
We'll
have
to
remember
about,
though,
and
revisit
your
security
models
and
architectures
look
at
new
problems
that
dropped
in
May
in
May,
introduced
to
your
companies
as
well
as
places
where
it
will
solve
your
problems,
then,
in
a
couple
of
months
time
or
throughout
the
next
couple
of
months
start
remembering
and
thinking
about
usability
because
design,
designing
systems.
Web
usability
in
mind
is
might
be
one
of
the
most
important
things
you
can
do
for
security
of
your
enterprise.
B
Ease
of
use
will
what
will
decide
if
your
solution
gets
broken
or
not,
because
truth
is
that,
most
often
it
is
the
users
who
breach
security,
not
because
they
are
stupid,
but
because
we
didn't
design
the
systems
and
long
term.
Let's
remember
aberration
matters
be
thing
who
we
should
be
working
with
and
collaborating
with
and
start
doing
it
because
blockchain
is
really
a
peer-to-peer
network
and
we
need
peers
and
I
know
that
many
enterprises
tell
us
that
they
are
not
comfortable
with
sharing
information
on
the
knot
on
the
blockchain.
B
C
Yeah
thanks
for
it,
there
are
things
that
you
can
do
right
away.
Hyper
ledger
is
an
open-source
organization,
which
means
that
we
are
an
open
door.
We're
a
big,
tent
everybody's.
Welcome.
The
the
first
thing
I
would
like
to
point
out
because
I'm
the
security,
maven
and
I
have
a
privileged
position
here
to
talk
to
all
of
you.
C
If
you
think
you
find
a
security
bug,
anything
that
looks
like
you
can
bypass
the
built-in
security
or
you
got
it
to
do
something
that
you
didn't
know
that
it
are
that
you
think
it
shouldn't
be
able
to
do.
I,
encourage
you
and
I.
Ask
you
to
report
it
to
our
security
at
hyper,
ledger,
dot
or
mailing
address.
It's
our
confidential
security
bug
reporting
system,
and
we
have
SLA
policy
around
this
and
we
do
have
a
bug
bounty.
C
So
if
you
find
anything,
that's
serious,
we
may
cut
you
a
check,
that's
the
easiest
thing
you
can
do
and
if
you're
really
more
interested
in
in
our
bug,
bounty
and
wanting
to
participate
in
a
more
active
role,
high
packer
one
has
been
generous
enough
to
host
our
bug
bounty
and
to
administer
a
bug
bounty
for
us.
So
if
you
go
to
the
hacker
one
/
hyper
ledger
page,
you
can
read
all
about
our
bug,
bounty
and
our
payouts.
C
It
has
been
successful.
We
we
have
had
a
number
of
security
reports
through
our
bug,
bounty
and
our
products
are
better
today
for
it.
If
finding
bugs
and
tracking
bugs
are
not
your
thing
and
if
you're
more
interested
in
how
the
our
technology
can
apply
to
your
industry,
you
can
join
any
one
of
our
working
groups
if
you
go
to
the
wiki
dot,
hypogea
or
web
web
page.
There
are
our
number
of
working
groups
in
different
industries
listed
there.
C
That
you're
welcome
to
join,
and
I
encourage
you
to
do
that:
they're,
very
open
and
very
friendly.
They
have
regular
meetings
and
discuss
industry,
specific
applications
of
our
technology
and
it's
probably
the
best
place
for
somebody
new
type
of
ledger
to
learn
about
sort
of
where
the
state-of-the-art
isn't
in
your
particular
industry.
C
The
other
thing
I'd
like
to
point
out
is,
if
you
want
a
more
high-level
introduction
into
why
she's
not
high-level
it's
an
hour,
long
and
all
the
possible
ways
to
get
involved
in
our
community
I
recommend
watching
this
webinar
by
our
colleagues,
Tracy
Kurtz
and
David
Boswell.
The
link
is
here:
it's
a
fantastic
webinar,
so,
as
you
can
see,
I
mean
like
all
open-source
projects
we
we
live
and
die
by
community
being
involved
at
the
community.
B
B
So
just
click
on
the
links
and
enjoy
reading
I
would
like
to
mention
one
more
thing.
We
are
organizing
a
hyper
little
global
forum
this
year.
It
is
very
exciting.
It'll,
be
our
first
conference
this
year,
our
first
conference
ever
organized
by
hyper
ledger.
We
expect
very
big
attendance,
both
from
technology
and
business
side.
We
have
to
call
for
papers
out.
So
if
you'd
like
to
submit
a
paper,
please
feel
free
to
do
so.
We
will
be
needing
and
snowy
and
cold
Faso,
but
I
promise
you
that
there
will
be
very
warm
heated
discussions.
B
There
develops
will
come
together
and
you
have
an
opportunity
to
speak
at
home
global
forum,
so
please
just
submit
the
proposal
by
July
13
and
you
can
use
that
link
on
the
on
the
slide
here
to
go
to
it.
This
brings
us
to
the
end
and
I.
Thank
you
for
your
attention
and
we
will
be
very
happy
to
take
some
questions
now.
B
C
Let's
see
here
so
I
was
trying
to
find
it
work
with
it.
Okay,
so
the
question
is
certain
people
familiar
with
blockchain
argue
a
blockchain
that
is
closed
off
defeats.
The
purpose
of
blockchain
I
wanted
to
understand.
What
do
you
think
of
that
statement
or
thinking
and
the
person
says
by
the
way,
not
my
thoughts
at
all.
So
the
answer
that
I
posted
here,
which
it
can't
read
for
some
reason,
but
the
answer
is
that
I
would
might
my
counter-argument
with
this?
C
C
When
you
want
to
do
a
private
sale
of
an
automobile,
you
draw
up
a
bill
of
sale,
that's
a
contract
permission
on
situation,
and
so
hyper
ledger
watching
accepts
that
reality
that
the
world
is
based
on
us,
knowing
who
the
participants
are
and
having
some
contractual
arrangement
to
participate
in
the
system,
and
we
built
the
blockchain
that
they
can
leverage
that
I
mean
decentralized.
Ledger's
really
are
about
transmitting
trusts
and
about
tracking
the
provenance
of
digital
things,
as
well
as
physical
things
and
I.
C
The
permissionless
system
is
not
necessarily
required.
In
fact,
it's
desired,
not
it's!
The
opposite
required
I
mean
a
lot
of
systems.
We
can't
have
anonymous
participants
or
you
know,
business
transactions
where
there
is
no
contractual
arrangement.
So
just
I
think
the
argument
is
narrow
and
it's
really
more
about
cryptocurrencies,
then
blocking
it
in
general.
So
I
hope
that
answers
that
person's
question
Martin.
Do
you
have
one
you'd
like
to
pick
I.
B
Picked
three
that
I
think
we
would
be
great
if
we
could
all
answer
so
here.
One
question
that
is
very
interesting
and
it
will
be
answer:
do
we
have
any
publication
on
performance
metrics
for
assessing
ledger
blockchain?
So,
dear
Ahmad?
Yes,
we
do.
We
have
both
a
white
paper
that
talks
a
bit
about
hyper
ledger
as
well.
We
have
performance
and
scalability
working
group
that
you're
more
than
welcome
to
join.
They
meet
every
two
weeks
and
all
working
groups
in
hydrology
are
open
to
public.
So
you
are
allowed
to
join
those
conferences.
B
There
is
a
calendar
available
on
our
community
on
our
wiki
page,
where
you
can
check
once
a
week
exactly
as
well
as
there
is
hyper
ledger
caliper,
which
is
a
project
that
is
supposed
to
look
at
the
different
frameworks
and
hyper
ledger
and
create
a
way
of
measuring
their
performance
scalability.
It
is
not
to
compare
these
that
these
frameworks,
because
you
can't
compare
apples
and
pears
but
to
say
in
this
given
circumstance.
This
is
the
maximum
scalability
or
this
is
the
maximum
performance.
I
can
get
from
that
particular
framework.
B
B
It
depends
on
the
industry,
and
it
depends
on
the
use
case
in
D
will
be
definitely
mostly
is
an
identity,
space
and
hyper
daju
fabric
and
hyper
ledger.
Salters
are
both
great
when
it
comes
to
basically
any
sector,
we
see
them.
We
see
how
furniture
saw
to
deployment
and
music
industry
we
see
see
it
is
in
Fashion
Industries.
Obviously,
food
supply
chain
is
a
big
use
case
where
you
can
see
deployments
both
and
hyper
ledger,
Psaltis
and
hyper
measure
fabric
well.
B
Roger
Aroha
is
really
interesting
when
you
want
to
build
solutions
that
are
running
on
mostly
mobile
devices,
and
that's
why
hyper
ledger.
I
Roja
is
mostly
used
in
these
cases.
I've
even
recently
seen
very
early
POC
on
bringing
blood
donations
or
the
blood
donations
with
drones,
with
the
usage
of
hyper
ledger,
Aroha,
so
Dave
your
chance
very
question.
Yeah.
C
So
I'm
going
to
do
a
quick
fire,
so
I
had
one
question
saying:
hey
I
we've
talked
about
the
the
different
art
structures
of
sorry,
how
permission
block
chains
are
structured
differently.
A
little
been
like
permitted
like
Bitcoin,
for
instance,
I
wanted
to
point
out
for
those
who
want
to
know
more
about
the
technical
architecture
of
our
platforms.
There
is
a
great
course
on
edx.org
its
echo
delta-xray
org.
C
Ledger's
are
broken
up
into
several
pieces.
There
are
front-end
API
servers
that
oppose
transactions
and
those
transactions
then
get
forwarded
on
to
a
network
of
transaction
validators
and
then
the
transaction
validators,
and
that's
where
the
transaction
validators
validate
transactions
and
execute
any
smart
contract
code.
And
then
any
transactions
with
pass
validation
then
get
forwarded
on
to
what's
called
an
ordering
service
which
takes
transactions
and
puts
them
in
order
and
generates
a
block
and
then
add
that
to
the
blockchain.
Now
the
ordering
service
is
the
consensus
piece
right.
C
So
that's
where
you
get
the
different
consensus
protocols.
Bitcoin
uses
proof-of-work,
for
instance,
but
hyper
ledger
distributed.
Ledger's
are
designed
so
that
there
are
strong
api's
between
each
layers.
So
there's
a
strong
API
between
the
transaction
proposers
and
the
transaction
validators
there's
a
strong
API
between
the
transaction
pollinators
and
actual
smart
contract
execution,
and
then
there's
strong
API,
strong
API
between
the
transaction,
validators
and
smart
contract
engine
and
the
actual
ordering
and
consensus
mechanism.
What's
really
cool
about.
C
That
is
that
allows
us
to
make
consensus
pluggable
or
it
also
makes
transaction
validation
and
smart
contract
execution.
Pluggable
hyper
Ledger's
sawtooth,
for
instance,
supports
not
only
the
hardware
assisted
proof
of
a
last
time
consensus
mechanism,
but
it
also
supports
running
the
villager
borough
EVM,
which
is
an
open
source.
Very
imp
lament
ation
of
the
in
virtual
machine.
They
can
run
solidity
contracts.
So
when
you
spin
up
a
blockchain
using
hyper
logic
technology,
you
encode
in
the
Genesis
block
the
configuration
for
that
network.
C
What
transaction
validators
are
using?
What
are
the
cryptographic
primitives?
Who
like?
What
are
the
assigning
keys
for
the
transaction,
validators
or
sorry,
the
root
key
for
the
permission
system
right?
That
then
can
enroll
transaction
validators
and
consensus
nodes,
and
the
neat
thing
is
that,
as
a
blotching
goes
on,
you
can
also
submit
you
can
set
up
rules
for
submitting
new
configuration
transactions
which
changed
those
values
so
as
blotching
evolves,
you
can
actually
change
the
cryptographic
primitives,
which
make
hyper
ledger
networks
post
quantum
capable.
C
You
can
also
play
around
with
different
consensus
mechanisms
by
swapping
them
out
behind
the
API.
Like
I
said
you
know,
Sawtooths
has
Poe
is
the
fabric
has
SPF
key
but
and
then
like
a
roja
uses,
one
called
ye
C
and
another
consensus,
but
we're
slowly
converging
onto
a
common
API
across
platforms
which
allow
would
allow
that
can
different
consensus
mechanisms
be
interchangeable.
C
It
also
allows
you
to
do
an
implementation
of
proof-of-work
and
plug
that
in.
If
you
wanted
to
so
I
mean
it's
in
theory,
it
hasn't
been
done,
but
in
theory
it
would
be
possible
to
do
proof
of
work
using
sawtooth
and
the
Boro
EBM,
and
basically
recreate
the
etherion
network
using
hyper
ledger
technology.
But
that
hasn't
been
done
because
it's
not
been
needed
right.
Siri
make
this,
and
the
neat
thing
here
is
that
it
just
makes
our
our
platforms
sort
of
a
configurable
customizable
thing
for
your
enterprise.
I.
C
Think
that's
why
we
have
so
many
people
from
so
many
different
industries
interested
because,
like
the
Apache
web
server,
there's
a
mod
for
that
right,
like
you,
can
just
customize
it
for
your
industry
and
for
your
application
and
really
leverage
it
to
its
fullest
extent.
I
think
we
might
have
I
think
we're
up.
I.
Think
we've
reached
the
hour
I'd
like
to
thank
everybody
for
joining
us
mark.
Did
you
want
to
say
anything?
You
know
right
into
the
last
minute
here
before
we
sign
off
and.
B
I
would
like
to
thank
you
all
for
your
questions.
We'll
try
answering
them
offline
would
like
to
refer
you
to
the
next
webinar
on
the
decentralized
identity,
because
we've
seen
a
lot
of
questions
about
identity,
and
so
that
we
can
count
answer
them
now.
We
hope
that
the
next
webinar
we'll
be
able
to
answer
them.
Thank
you
for
your
time.
Thank.
A
You
for
mentioning
that
Martha,
yes,
we
do
have
an
upcoming
webinar,
our
next
one,
on
decentralized
identities,
distilled
will
be
June
12th
and
if
you
check
out
their
resources
block
in
your
webinar
console,
there's
actually
a
direct
link
where
you
guys
can
go
ahead
and
register
for
that
today
and
just
to
get
that
on
your
calendar.
So
you
don't
miss
it
I,
just
wanna
say
thank
you
so
much
both
to
you
Dave
and
Marta
for
this
great
session
on
blockchain
security
and
unfortunately
that's
all
we
have
time
for
today.