Our solution for data protection over the Ethereum blockchain.

Our solution for data protection over the Ethereum blockchain.

Data protection is a serious topic at BitBoost. We are using our blockchain solutions to empower people, and for us this also means giving people back control of their personal data at any moment, not storing it without their consent, and not using it for unintended purposes. Furthermore, we have implemented our solution for data protection over the Ethereum blockchain.

We should start saying that we are not storing any information from sellers or buyers. Every user will just need to provide a password to create their own personal wallet, with an alphanumeric address and alias as their only ID. With this wallet, address, and alias, users will be able to fully use our blockchain-based marketplace, and they will only provide their personal information to sellers, and just for delivery purposes. This information will never be stored or transmitted unencrypted, so no third party, including us, will be able to access it.

First, it is important to understand that the blockchain brings pseudonymity by design. Every node using the network is identified through an address, and users don’t need to share their personal information for any purpose. This is a really useful feature: in the blockchain we will store just the interactions between addresses, protecting our users’ personal information, which is always in users’ hands.

The problem here is that the GDPR considers that pseudonymised data is still considered personal data (including likely public keys in a blockchain). It also clearly states that if anybody can identify a particular user assembling and organizing anonymized data, further protection should be enabled. This is probably the case for the blockchain. For instance, if we can track in the public blockchain the purchases made by a node, its location and money spent, probably we can track down the person behind it (and the same can be easily applied to sellers through listings and locations).

To prevent that, we are implementing an encryption system over the pseudonymity feature of the blockchain. This way, all the personal information stored in the blockchain will be protected, and only shared with the parties involved. BitBoost won’t be able to check this info, nor will any other user. Just an arbiter, a third party individual selected for dispute resolution by sellers, will have the key to decipher a transaction, and just for a brief time and only for arbitration purposes.

Finally, we should talk about “the right to erasure”. As stated by the EU law, users have the right to demand the erasing of their personal information from Internet in the following cases:

In our case, data access is regulated by both smart contracts and cryptography. While arbiters will not get access to the encrypted data without the permission of a smart contract, buyer and seller both have access to anything they have shared, whenever they want. This way, the data generated will be only available by those who have created it, at any time. For us, this is the best way to protect the data stored in the Ethereum public blockchain.

To summarize, our approach to personal data management in the blockchain is simple: we want to bring back to the users the power to manage their personal data. Neither we nor third parties will be able to do something not allowed with personal data. This approach is radically different from that of big digital companies, where data (aka our information) has become the most valuable asset to sell and trade, even without the fully conscious consent of those generating this data, and without compensating them! We find this practice unethical, and we want to build a new, decentralized Internet, where those practices will be excluded from digital business. If we succeed, we will be starting a new era of the Internet. That’s for sure.

Related posts:

Desinfektan Cap Gadjah Sulfur Carbendazim & Fungisida Obat Penghilang Bau Amonia Kandang Biosecuriti no 1 sulfur carbendazim dosis rendah dan residue remover bio desulfurization sehingga ramah dan…

I had my health insurance lapse 4 years ago and have been without since. Right after my lapse I had to out of pocket a hernia surgery and I don’t want to go thru that again. MY QUESTION is: If I went…

I conducted five interviews today for Arcade and several others in the past few months. These interviews were conducted with design system engineers from companies of all sizes. As someone trying to…