Pengembangan Sistem Warisan Digital Ringan Berbasis Blockchain dengan Kriptografi Hibrida

Beben Prihartono; Bambang Widodo; Taufik Iqbal Ramdhani

doi:10.55382/jurnalpustakadata.v6i4.2206

Penulis

Beben Prihartono Institut Teknologi Tangerang Selatan
Bambang Widodo Institut Teknologi Tangerang Selatan
Taufik Iqbal Ramdhani Institut Teknologi Tangerang Selatan

DOI:

https://doi.org/10.55382/jurnalpustakadata.v6i4.2206

Kata Kunci:

blockchain lokal, kriptografi hibrida, warisan digital, pbkdf2, zero-knowledge server

Abstrak

Manajemen warisan aset digital menghadapi tantangan pada tiga dimensi keamanan yang belum terpecahkan secara komprehensif, yaitu kerahasiaan (confidentiality) dari administrator sistem, integritas (integrity) data jangka panjang, dan ketersediaan temporal (temporal availability) yang terverifikasi secara kriptografis. Solusi yang ada saat ini, baik blockchain publik maupun platform warisan digital komersial berbasis komputasi awan (cloud), gagal memenuhi ketiga dimensi tersebut secara simultan. Penelitian ini mengusulkan Catena Memoriae, sebuah prototipe sistem warisan digital yang mengintegrasikan blockchain lokal ringan berbasis SQLite dengan enkripsi hibrida AES-256-CBC/RSA-2048 serta mekanisme derivasi kunci PBKDF2-HMAC-SHA256 sebanyak 1.000.000 iterasi. Arsitektur peladen tanpa pengetahuan (zero-knowledge server) yang diimplementasikan memastikan bahwa peladen secara kriptografis tidak dapat mendekripsi muatan pesan meskipun memiliki akses penuh terhadap basis data. Evaluasi empiris menunjukkan bahwa enkripsi AES-256 pada muatan 1 MB dapat diselesaikan dalam 4,90 milidetik (ms) dan verifikasi rantai 500 blok hanya memerlukan waktu 3,08 ms. Kedua waktu tersebut berada jauh di bawah ambang batas persepsi pengguna, yakni 100 ms [1]. Pengujian kotak hitam (black-box) terhadap 13 skenario kritis mencapai tingkat keberhasilan 100%, dan simulasi serangan perusakan data (tampering) memvalidasi efektivitas algoritma verify_chain(). Kebaruan penelitian ini terletak pada integrasi kohesif empat mekanisme, yaitu buku besar ringan (lightweight ledger), derivasi kunci tanpa pengetahuan (zero-knowledge key derivation), penguncian waktu berbasis penjadwalan (scheduler-based time-lock), dan deteksi perusakan (tamper detection). Keempat mekanisme tersebut disatukan dalam satu arsitektur yang dapat diterapkan pada infrastruktur minimal, sehingga mampu mengisi celah yang belum terlayani oleh solusi-solusi yang ada saat ini.

Unduhan

Data unduhan belum tersedia.

Referensi

J. Nielsen, Usability Engineering. Burlington, MA: Academic Press/Morgan Kaufmann, 1993. ISBN: 978-0-12-518406-9

We Are Social dan Meltwater, “Digital 2024: Global Overview Report,” We Are Social, New York, Jan. 2024. [Online]. Tersedia: https://datareportal.com/reports/digital-2024-global-overview-report

K. Thomas et al., “Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials,” dalam Proc. ACM CCS, Dallas, TX, 2017, hal. 1421–1434. doi: 10.1145/3133956.3134067

W. Stallings, Cryptography and Network Security: Principles and Practice, 8th ed. New York: Pearson, 2022. ISBN: 978-0-13-751487-2

S. Nakamoto, “Bitcoin: A Peer-to-Peer Electronic Cash System,” 2008. [Online]. Tersedia: https://bitcoin.org/bitcoin.pdf

Z. Zheng, S. Xie, H. Dai, X. Chen, dan H. Wang, “An Overview of Blockchain Technology: Architecture, Consensus, and Future Trends,” dalam Proc. IEEE Intl. Congress on Big Data, 2017, hal. 557–564. doi: 10.1109/BigDataCongress.2017.85

M. Hossain, R. Islam, dan F. Ali, “A Blockchain-Based Digital Inheritance Management Framework Using Smart Contracts,” IEEE Access, vol. 11, hal. 45123–45138, 2023. doi: 10.1109/ACCESS.2023.3272891

J. Li, Y. Wang, dan K. Zhang, “Decentralized Digital Asset Preservation Using Blockchain-IPFS Integration,” Future Generation Computer Systems, vol. 134, hal. 147–159, Sep. 2022. doi: 10.1016/j.future.2022.03.028

G. Wood, “Ethereum: A Secure Decentralised Generalised Transaction Ledger,” Ethereum Project Yellow Paper, vol. 151, hal. 1–32, 2014. [Online]. Tersedia: https://ethereum.github.io/yellowpaper/paper.pdf

E. Androulaki et al., “Hyperledger Fabric: A Distributed Operating System for Permissioned Blockchains,” dalam Proc. 13th EuroSys Conf. (EuroSys ’18), Porto, Portugal, Apr. 2018, hal. 1–15. doi: 10.1145/3190508.3190538

S. Pongnumkul, C. Siripanpornchana, dan S. Thajchayapong, “Performance Analysis of Private Blockchain Platforms in Varying Workloads,” dalam Proc. 26th Intl. Conf. Computer Communication and Networks (ICCCN), Vancouver, BC, Canada, 2017, hal. 1–6. doi: 10.1109/ICCCN.2017.8038517

M. Z. Islam, A. R. M. Forkan, dan A. Vasilakos, “Security Analysis of Cloud-Based Digital Legacy Platforms: A Systematic Review,” IEEE Transactions on Cloud Computing, vol. 10, no. 3, hal. 1892–1908, Jul.–Sep. 2022. doi: 10.1109/TCC.2021.3071823

AgileBits Inc., “1Password Security Design,” AgileBits Inc., ver. 2.0, 2023. [Online]. Tersedia: https://1password.com/files/1Password-White-Paper.pdf

National Institute of Standards and Technology (NIST), “FIPS PUB 197: Advanced Encryption Standard (AES),” Federal Information Processing Standard Publication 197, Gaithersburg, MD, Nov. 2001. doi: 10.6028/NIST.FIPS.197

S. Gueron, “Intel® Advanced Encryption Standard (AES) New Instructions Set,” Intel Corporation, White Paper Rev. 3.01, Apr. 2012. [Online]. Tersedia: https://www.intel.com/content/dam/doc/white-paper/advanced-encryption-standard-new-instructions-set-paper.pdf

R. L. Rivest, A. Shamir, and L. Adleman, “A Method for Obtaining Digital Signatures and Public-Key Cryptosystems,” Communications of the ACM, vol. 21, no. 2, hal. 120–126, Feb. 1978. doi: 10.1145/359340.359342

National Institute of Standards and Technology (NIST), “NIST SP 800-57 Part 1 Rev. 5: Recommendation for Key Management,” Gaithersburg, MD, May 2020. doi: 10.6028/NIST.SP.800-57pt1r5

B. Kaliski, “PKCS #5: Password-Based Cryptography Specification Version 2.0,” RFC 2898, Internet Engineering Task Force, Sep. 2000. doi: 10.17487/RFC2898

National Institute of Standards and Technology (NIST), “NIST SP 800-132: Recommendation for Password-Based Key Derivation Part 1: Storage Applications,” Gaithersburg, MD, Dec. 2010. doi: 10.6028/NIST.SP.800-132

OWASP Foundation, “OWASP Password Storage Cheat Sheet,” 2024. [Online]. Tersedia: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

A. Juels dan T. Ristenpart, “Honey Encryption: Security Beyond the Brute-Force Bound,” dalam Advances in Cryptology – EUROCRYPT 2014, vol. 8441, LNCS. Springer, 2014, hal. 293–310. doi: 10.1007/978-3-642-55220-5_17

T. C. May, “Timed-Release Crypto,” manuskrip tidak diterbitkan, Feb. 1993.

D. Boneh dan M. Naor, “Timed Commitments,” dalam Advances in Cryptology – CRYPTO 2000, vol. 1880, LNCS. Springer, 2000, hal. 236–254. doi: 10.1007/3-540-44598-6_15

A. Shostack, Threat Modeling: Designing for Security. Indianapolis, IN: Wiley, 2014. ISBN: 978-1-118-80999-0

ISO/IEC/IEEE 29119-2:2021, “Software and Systems Engineering — Software Testing — Part 2: Test Processes,” International Organization for Standardization, Geneva, Switzerland, 2021.

K. Peffers, T. Tuunanen, M. A. Rothenberger, dan S. Chatterjee, “A Design Science Research Methodology for Information Systems Research,” J. Management Information Systems, vol. 24, no. 3, hal. 45–77, 2007. doi: 10.2753/MIS0742-1222240302

B. Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C, 2nd ed. New York: Wiley, 1996. ISBN: 978-0-471-11709-4

A. Pfitzmann and M. Hansen, “A Terminology for Talking about Privacy by Data Minimization: Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management,” v0.34, Dresden/Kiel, Aug. 2010.

A. Ekblaw, A. Azaria, J. D. Halamka, dan A. Lippman, “A Case Study for Blockchain in Healthcare: ‘MedRec’ Prototype for Electronic Health Records and Medical Research Data,” dalam Proc. IEEE Open and Big Data Conf., 2016. doi: 10.5438/0000