A New Era of Thinking - IBM - United States · Pseudo-anonimity, decentralised, ... Hyperledger privacy –encrypted transactions ... key Software Image & Data Key VMs Encrypted

1

Entrez dans l’ère cognitive !

IBM BusinessConnect 2016Entrez dans l’ère cognitive !

Blockchain (getting serious)Luca Comparini, Blockchain Leader, IBM France

Guillaume Hoareau, Security Architect, Blockchain CoE Montpellier

@lucacomparini# IBMBizco

2


© 2016 IBM Corporation

Blockchain presentations at Business Connect 2016@lucacomparini

# IBMBizco

13h – 14h (Salle Klimt)

Blockchain (for geeks)

Blockchain concepts (15mins)

Hyperledger concepts (15mins)

Case study (15mins)

- Use Case: KYC

- Project outline & component model

Getting started - for developers (15mins)

- Leveraging on Bluemix

- Blockchain as a Ser vice

- HelloWor ld samples

14h – 14h30 (Salle Gabriel / Delorme)

CHANNEL 6 : Blockchain (getting serious)

Blockchain concepts (5mins)

Hyperledger concepts (5mins)

Case study (5mins)

- Use Case: Dispute Resolution

On-premises deployments (15mins)

- Integration with mission cr it ical

workloads

- Accelerating the cr ypto

- Secur ing the runtime environment

- Hybr id Cloud – Crop Insurance

3



Relationship between Bitcoin and Blockchain@lucacomparini# IBMBizco

ConsumerRetailer

Digital asset (cr ypto-currency) is registered on a distributed ledger and

value is transferred via a P2P network; transactions are grouped into

blocks and processed only if consensus is reached

Pseudo-anonimity, decentralised, censorship resistant

Law and regulation; KYC / AML?

Reputation: for geek, volat ile, r isky (MtGox scandal)

Retailers accept bitcoin (Amazon, Expedia, Dell, ..)

Blockchain technology is re-usable:

Risk / Oppor tunity of Disintermediation

Blockchain = transactional platformBitcoin = currencyBitcoin = currency

4



Blockchain: how it works@lucacomparini# IBMBizco

1 . It all star ts with one

node

Has an Owner

Issues Transaction

ID = Digital Cer t

Copy of Ledger

Sign Transactions2 . Each node has the shared

ledger

Each block has a digital fingerpr int

of the previous block

Blocks

6 . Execution

Answer Validated

Update

A = 100Then

A=10

Now

A=100

5 . Consensus

3 . Nodes form a peer

network

4 . Users submit

transactions

Use

r

5



Same ingredients, different Use Cases@lucacomparini# IBMBizco

Based on:

Swanson, T. (2015 ). Consensus as a service: a br ief repor t on the emergence of permissioned, distr ibuted ledger

systems.

Brown, R. G. (2015 ) Towards an unified model for replicated, shared ledgers.

PermissionedPermission-less

Design points:

- Public network with no 3 rd

par t ies

- Trustless environment

- “Censorship-Resistance”

Consensus:

- Expensive, slow

- Incentives intr insic to platform

Design points:

- Pr ivate / Semi-pr ivate network

- Actors known / knowable

- Regulated Industr ies

Consensus:

- Protocol assumes known actors

- Incentives extr insic to platform

IBM focus is here

http://www.slideshare.net/lablogga/blockchain-consensus-protocols

http://gendal.me/2015/06/08/towards-a-unified-model-for-replicated-shared-ledgers/

6



IBM vision on Blockchain@lucacomparini# IBMBizco

Confidential

permission control

Private

un-linkable identity

Shared Ledger

single source of truth

Secure

(Cryptography)

tamper proof

Audit-able

prove identity & ownership

Scalable

100+ year architecture

Smart Contracts

business logic

Digital assets

Record depository

Consensus

Modular protocol

Permissioned

Participants Identity

Black : « standard » properties of Blockchain

Blu : added properties / uniqueness of IBM

7



@lucacomparin

i

#Bizco

Mission:

Create an enterprise grade, open source

distributed ledger framework and code

base upon which users can build and run

robust, industry-specific applications,

platforms and hardware systems to

support business transactions.

IBM supports the Linux Foundation

Hyperledger open standard, open source,

open governance Blockchain

https://www.hyperledger.org/about/charter

8



Supply Chain Financing – IBM Global Financing (IGF)@lucacomparini# IBMBizco

IBM Global Financing propose des solut ions de financement à son réseau mondial de 4 ,000 fournisseurs et

par tenaires commerciaux. Les par tenaires bénéficient de lignes de crédit pour financer leurs achats auprès de

nos fournisseurs. En 2014 , IBM a financé près de 3 millions de transactions pour un montant de 44 Milliards

de Dollars, tout en gérant environ 25 ,000 lit iges.

Besoin: un registre de transactions combinant toutes les

informations contenues dans les bases de données des

par tenaires, fournisseurs, transpor teurs, banques et d'IBM .

Ces registre fiable et permanent ir réfutable et immuable de

chaque transaction, nous améliorons de nombreux

paramètres opérationnels. La décentralisat ion facilite cette

mise en place et son évolut ion au fur et à mesure de

l’accroissement du nombre d’ut ilisateurs.

Bénéfices: réduire le délai de règlement, le nombre de

conflits et leur temps de résolution. In fine, pouvoir libérer

une somme importante de « working capital » bloquée en

raison de conflits quotidiens (estimés à 100 Millions de

dollars).

Press Release: http:/ / blogs.wsj.com/ cio/ 2016 / 07 / 29 / ibm-set-to-launch-one-of-the-largest-blockchain-

implementat ions-to-date/

Demo on Youtube: https:/ / www.youtube.com/ watch?v=F0P7NM7d-ps

https://www.youtube.com/watch?v=F0P7NM7d-ps

9



On-premises deployments@lucacomparini# IBMBizco

Vir tualization Technology

Linux Operating System

Software dependences(Go, RocksDB, Docker…)

Hyper ledger fabr ic(Peers and Membership Ser vices)

REST API

Blockchain Applications

Existing Applications

Existing Data

10



{M ission Cr it ical} IBM Systems optimized environments@lucacomparini# IBMBizco

In Memory (32 TB )

Hashing Acceleration

DB2/ Oracle/ SAP and

EnterpriseDB

Crypto Accelerators

Power Systems

OpenPOW ER

Elliptical Curve Digital

Signatures

Cer tified HSM and

Accelerators

CICS/ IMS/ TPF/ DB2/ VSAM

Hashing Acceleration

In Memory (10 TB )

IBM z Systems

LinuxONE®

Consensus Algor ithm

Cryptographic Protocols(Authentication, secur ity, non-repudiation, restr icted

visibility, pr ivacy/ confidentiality, ….)

Shared Replicated Ledger +

Business Rules Engine (Smar t Contract)

API Layer

App

1

App

2

App

3

…

….

COLOCATION & ISOLATION + ACCELERATION + EXTREME SECURITY

11



Hyper ledger pr ivacy – encrypted transactions@lucacomparini# IBMBizco

{"transactions":[{"type":2 ,

"chaincodeID":"BGM0S9cL1VxCZ8ETm0KbvYXW EKvW LrVVfsHPW c2n21G0 jY2Ni/ kNirGNFNEovRN203atX0C32wT+jzt4OzTaFiDi8 j9o1W dXt1MQY74qHrY8ZEjiCTAEKv2 lMOme3OcxJ

J3e3dQG55tDjh9uTLRi01c8GIGfcW ZhW Jh2 jW sG1g+1DPPChjr7uMTYxGiCG+TaglTkF8 iN19gXmru2rLZkPAeBdYJV+XEQdLo2ZUr08oZ6av2Lx1RDDm5iY7YMwhvN4u+764ZFkqqW vF

6 jqW oSI5ZgXBTV7HOpj2PGol7xrAO674paSeVe9wPfEAS4MEr45rPVXg==",

"payload":"BBqL9J/ 0 / XnXAU75QDgPlECTEm1j3kJBU5gjcmz3 thXQfL4rO4vTBxgrbwCYpiavptR4wPkkCIQNmmk2SCNmQEm3I9xxLlnswPO6HjiwbqfMRUb+mx8yD/ Ta2PqwFBF9nxCqcJl

5 fr lcXL4N8fzZBs0zx38W uGlrQf43Zob1RoKDNLcuB4uW 4KFt4Qh3nJ/ zQ9 j9hoZmnyghPQKfKU3rQa0nt6McfIEf63XR0SK7xwNmdFNuQGsGgOhY/ 5072XCb1gyxzwV6HKeDgc/ qMA

wyxR4k5eQa9LyvLGakUK6 li94bvL7449TLS1 fjPHVFFhVv+tpmW 2R9UVMDlGjvtuTZvkX1URykGvGrKXpLsrSxLCEW 10C6MaYgLf84QLFL2byPhc+I",

"txid":"a3ecbdc7 -b6 f0 -4644-86c2 -0a5ae391c7 fd",

"t imestamp":{"seconds":1476373812 ,"nanos":222842500},

"confident ialityLevel":1 ,

"confident ialityProtocolVersion":"1 .2 ",

"nonce":"FRkgkNb+FVOqLFW rL5o7rXlQ2 / wUNfRz",

"toValidators":"BKqW PD6Stl9J0W VZKYEFNaZy06Rdaiv+UlfOMibXZXfQm/ l8AvTSDnE+U1MdTpKStwcoA2a7S6nB0EhwKj7GcHMkTS3xgQV12r2K8U9LJx+vvwl1W TH/ IEgOf7eyQ3GAH

ULJB9 Iup1yaFADvKeRRPBJd5580zjUgFFpfT/ MsOx2pmX67t9HDO0 l9Y5Rvi5N25SYuoi2ayxf+QdMu/ uSSBuPieUPLhKkkYIsr4PusfoFvo2eMpHNqeP+h4NsnrqJ8DSGJ8d1MSqocZc8nc

9 IZl1P9T5oabc6hUizswb78 IPqnC/ ktu+EqT3KHbpOp3r ix",

"cer t":"MIICUTCCAfegAwIBAgIQYbzxFLlQSrygTgRXbIxbCTAKBggqhkjOPQQDAzAxMQswCQYDVQQGEwJVUzEUMBIGA1UEChMLSHlwZXJsZW RnZXIxDDAKBgNVBAMTA3RjYTAeFw0xNjE

wMTMxNTQ3NThaFw0xNzAxMTExNTQ3NThaMEUxCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtIeXBlcmxlZGdlcjEgMB4GA1UEAxMXVHJhbnNhY3Rpb24gQ2VydGlmaW NhdGUwW TATBg

cqhkjOPQIBBggqhkjOPQMBBwNCAAQJNY3gvA0 i5CnE7LnsZXDy7SZODGu/ gnBtpR3o562enO4CM1zVloyqZzlhzn3ZEwfcW GjygtI7 / FBUDaJ+4upLo4HcMIHZMA4 GA1UdDwEB/ wQEAwI

HgDAMBgNVHRMBAf8EAjAAMA0GA1UdDgQGBAQBAgMEMA8GA1UdIwQIMAaABAECAwQwTQYGKgMEBQYHAQH/ BEC/ 00TIeAsNgVJiCwM9G1pzQSAcgmvYoBINBW vCDppKeXA6A

3hDeSTijYQn+FtVZCCPitOZFusA4 i6046EvsDZ2MEoGBioDBAUGCARAImii912S4 lcG/ LxTYuox/ zZUJKrFh2Qz4htpSJiV0Y3GslAPIqd30 IRcPadoJa5uXDhnI6CpOl4eOQuyQgt0PzAKBggqh

kjOPQQDAwNIADBFAiBKOptz2ROeW 1g7zudoxJbZs6hxnq6GN4ZtMOXKeE99GwIhAIRDr3eVRLkkjGsqkw81mJIGCRNp3+7F2HC9IkuEYSi5 ",

"signature":"MEUCIDNTctBa29eaBvUTOpwt2nQPTbW NsOj6 thDPD7aJjdoyAiEAx48 iYMmPvvYAH11W uk/ bT8dIRS6N+c/ 3 tPzFYW SHPG4="}],

"stateHash":"NTjoEdPX+RhCQZchSChMny5FU9/ 0 l3pPObiqze2Cbg4Rug3dSt/ sEOAX90 tGggj7Bgy+/ fFef0voZxBgs6 f6 tA==",

"previousBlockHash":"rFZ3XwRm8depRzG+Bf0Di64TYNMNvwgtEZVatx4Xl6 fXX2hCBksF0R8DkVfRpZwoVIlhTHh3+qFQctIwSEXK7Q==",

"consensusMetadata":"CAI=",

"nonHashData":{"localLedgerCommitTimestamp":{"seconds":1476373812 ,"nanos":243557593},"chaincodeEvents":[{}]}}

12



{LinuxOne} Focus on Acceleration@lucacomparini# IBMBizco

P256Sign : 19,356 operations/sec

P256Verify : 7,636 operations/sec

P384Sign : 136 operations/sec

P384Verify : 65 operations/sec

SHA256x8 : 40,8 MB /sec

SHA256x1K : 1470 MB /sec


SHA512x8 : 29,5 MB /sec



SHA3_256x8 : 5 MB /sec

SHA3_256x1K : 112 MB /sec

SHA3_256x8K : 123 MB /sec

SHA3_512x8 : 5,5 MB /sec

SHA3_512x1K : 69,4 MB /sec

Data size legend: x8 : 8 bytes / x1k: 1024 bytes / x8k: 8192 bytes

Digital Signature

Hash

If accelerated by

Hardware on CPACF

If accelerated by

Hardware with SIMD

13



{LinuxOne} Focus on Extreme Secur ity@lucacomparini# IBMBizco

Firmware

Bootloader

signature check

decryption

Software

Bootloader

key

Software

Image & Data

Key

VMs

Encrypted

Data

check

decrypt

open

Key

SE

Protected Memory (LPAR, VM, Containers)

Encrypted

Software

Intel Memory

enclaves

(SGX)

IBM Z

Secure

Container

s

(SSC)

Size of data

and code

protected

SGX limits app.

Container size

to 96MB

Can be up

to 10TB

Registration

requirement

Software needs

to be registered

with Intel

None

required.

Application

Software

Changes

Software

changes are

needed to use

SGX

None

required.

Hypervisor

protection

Cannot protect

hypervisor

Can

protect

and attest

Hyperviso

r

IBM Secure Service Containers protect blockchain software, chain code and

data.

Blockchain software can be signed, attested and encrypted and once

installed in the z applicat ion containers, is tamper -resistant. Root users and

System Administrators cannot access or see z secure container contents

No other platform provides this capability.

14



They real compute wor ld is « Hybr id »@lucacomparini# IBMBizco

Based on Crop Insurance demo – Montpellier Blockchain CoE

http://insights-for-weather-demo.mybluemix.net/

http://insights-for-weather-demo.mybluemix.net/

15



They real compute wor ld is « Hybr id »@lucacomparini# IBMBizco

16


© 2016 IBM Corporation© 2016 IBM Corporation

Merci !

Documents

A New Era of Thinking - IBM - United States · Pseudo-anonimity, decentralised, ... Hyperledger privacy –encrypted transactions ... key Software Image & Data Key VMs Encrypted