区块链和人工智能如何启用个人数据 隐私和支持网络安全区块链和人工智能如何启用个人数据 隐私和支持网络安全

PortlandStateUniversity

PDXScholar

BusinessFacultyPublicationsand

Presentations

TheSchoolofBusiness

2021

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity

StantonHeister

PortlandStateUniversity,

heister2@

KristiYuthas

PortlandStateUniversity,

yuthask@

Followthisandadditionalworksat:

/busadmin_fac

Partofthe

BusinessCommons

Letusknowhowaccesstothisdocumentbenefitsyou.

CitationDetails

Heister,S.,&Yuthas,K.(2021).HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity.InT.M.Fernández-Caramés,&P.Fraga-Lamas(Eds.),AdvancesintheConvergenceofBlockchainandArtificialIntelligence.IntechOpen./10.5772/intechopen.96999

ThisBookChapterisbroughttoyouforfreeandopenaccess.IthasbeenacceptedforinclusioninBusinessFacultyPublicationsandPresentationsbyanauthorizedadministratorofPDXScholar.Pleasecontactusifwecanmakethisdocumentmoreaccessible:

pdxscholar@

.

PAGE

2

Chapter

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity

StantonHeisterandKristiYuthas

Abstract

Recentincreasesinsecuritybreachesanddigitalsurveillancehighlighttheneedforimprovedprivacyandsecurity,particularlyoverusers’personaldata.Advancesincybersecurityandnewlegislationpromisetoimprovedataprotection.

Blockchainanddistributedledgertechnologiesprovidenovelopportunitiesforprotectinguserdatathroughdecentralizedidentityandotherprivacymechanisms.Thesesystemscanallowusersgreatersovereigntythroughtoolsthatenablethemtoownandcontroltheirowndata.Artificialintelligenceprovidesfurtherpossibili-tiesforenhancingsystemandusersecurity,enrichingdatasets,andsupportingimprovedanalyticalmodels.

Keywords:personally-identifiabledata(PII),personal-dataprivacy,decentralizedidentity(DID),self-sovereignidentity,cybersecurity,GDPR,zero-knowledgeproofs

Introduction

Theamountofpersonaldatabeingcollectedisrapidlyproliferating.

Enterprisesandgovernmentsusethisdatatoprofileindividualsandtopredictandcontroltheirattitudesandbehavior.Thiscanresultincustomizedexperi-ences,personalizedservices,andmoreefficientuseofresources.Itcanalsoresultinmisinformationandexploitationbytheentitythatcollectedthedataorbyothersthatpurchaseorstealit.Inresponsetoincreasesincybercrimeandgrow-ingconsumerconcern,legislationtoprotectpersonaldataisbeingproposedandimplemented.Organizationstradinginpersonaldatafaceincreasingcostsassoci-atedwithmanagingandsecuringdata.Theyalsofaceincreasingrisksthatdatawillbemisusedorstolen,andthattheywillfacelegalorfinancialconsequences,aswellasdamagetoboththeirreputationandtorelationshipswithcustomersandotherstakeholders.

Inthischapter,weexplorehowblockchainandartificialintelligencecanoffersolutionsforprotectingandsecuringpersonaldata.Decentralizedandfederatedidentifysystemsprovideuserscontroloverwhat,whenandhowmuchoftheirpersonalinformationcanbesharedandwithwhom.Thesesystemscanalsoreducecybersecuritythreats.Artificialintelligencecomplementsblockchain-basedprivacysolutionsbyenablinguserstobettermanagetheirdataandbyensuringthatdataandmodelsderivedfromthedataaremoreaccurate,fair,andreliable.

BlockchainPotentialinAI

Personaldataprivacy

Afoundationalprivacyissuefacinginformationsystemdevelopersandusersispersonaldataprivacy.Personally-identifiabledataaboutclients,employees,prospectsandotherstakeholdersmayberegularlycollectedandstoredinsharedledgers.Today,manyorganizationsstoreprivatestakeholderdataandevenpass-wordsinunencryptedform.Evenwhendataareencryptedoranonymized,itmaybepossibletoidentifyusersunlesswell-developedcybersecurityprocessesaredesignedintodatamanagementsystems.Withfrequentcybersecurityfailuresandincreasingregulation,maintainingtheprivacyofpersonallyidentifiableinforma-tion(PII)hasbecomeanissueofstrategicconcernformanyorganizations.

PIIincludesanydatathatcanbetracedbacktoaspecificperson,andcanincludeindividualitemssuchasbiometricdata,socialsecuritynumbers,phonenumbers,orgeolocationdata.PIIcanalsoincludedatacombinations,suchaspostalcodes,birthdates,andgender,orbehavioraldataassociatedwithoneperson.Organizationsgatherandstorepersonaldataaboutcurrentandfuturecustomersandemployeesaswellasaboutotherstakeholders.

Cybersecurityandprivacybreaches

Cybersecurityhasbecomeincreasinglyimportantforgovernmentsandbusi-nessesalike.Informationsecurity—onecomponentofcybersecurity—focusesonprotectingtheintegrityandprivacyofdataasitiscaptured,storedandused.Thepeople,processes,andtechnologyassociatedwithdataworkinconcerttocreateandmaintainsecurity.

Despiteadvancesinsecurityprotocolsandsoftware,privacybreachesareontherise.AccordingtoRiskBasedSecurity’s2020databreachreport,“Thetotalnumberofrecordscompromisedin2020exceeded37billion,a141%increasecomparedto2019”[1].Personalrecordsofsystemusersareregularlycompromised,andmillionsoftheserecords,includingnames,emailsandpasswords,havebeensubjecttodatabreaches,inmanycasesevenincludingaddresses,birthdatesandfinancialinfor-mation[1].

Adatabreachoccursfromunauthorizedaccesstoanorganization’sdatabase,enablingcyberhackerstostealsensitivepersonalinformationsuchaspasswords,creditcardnumbers,socialsecuritynumbers,andbankinginformation[2].

Thesewelldocumentedbreecheshavehadadverseconsequences,includingcreditcardfraud,andidentitytheft,whichcanhavelastingnegativeeffectsonpersonalcredit,oftentakingmonths,ifnotyears,toremedy[2].SomeoftheLargest,mostrecentcyberhacksincludethe2013/14breechofYahoo’sdatabasebywhatisthoughttohavebeenastate-sponsoredcyberattack,impactingover3billionusers.Thehackerscollectedconsumers’names,emailaddresses,tele-phonenumbers,datesofbirth,hashedpasswordsandunencryptedanswerstosecurityquestions.

In2017,thecreditreportingagencyEquifaxwassubjecttoacyberattackinwhichaffectedanestimated143millionconsumers.Systemadministratorsweren’tawareofthesuspiciousactivityfortwomonthsanddidnotreportthebreachforafullmonthafteritsdiscovery.ItisbelievedthatEquifaxwasbreachedbyChinesestate-sponsoredhackersengagedinespionage[3].Thecollectivefinancialimpacttoindividualvictimsisnotknown,norisitknownwhatsecurityandstrategicdamagewasincurredbythestate,butthesecaseshighlightthepotentialriskwhenPIIarehousedinacentralizeddatabase.

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurityDOI:

/10.5772/intechopen.96999

Figure1.

Cybersecuritybreachesandrecordexposure.

Mostofthedatagatheredandstoredareinthecontrolofgovernmentsandcorporations,whichhavegatheredvolumesofpersonalinformationthattheyareresponsibleforsecuring.Atthesametime,theseorganizationsmaybemonetizingthesedatasets,eitherbyusingthemtoimprovetheirownoperationsandofferingsorbysellingthemtothirdparties.Thevolumeofdatageneratedandcollectedisincreas-ingexponentially,enlargingthefootprintsofusers.Dataconsolidatorsareabletolinkdataelementsacrossdatasourcesandcombinedatainwaysthatwereneverantici-patedbythepartiesthatcollectedtheinformationnorbytheusersthatprovidedit.

Figure1,whichusesfromdataprovidedbyStatista[4],showsthecostofamassingtheselargedatabases.Statista,astatisticalresearchfirm,trackscyber-securityfailuresandtrends.ArecentlypublishedStatistareportrevealsthattheseeventsareincreasing,especiallyinthepastfiveyears,underscoringtheneedtoimprovehowdataaresecured.Itshouldbenotedthatin2020amassivecyberbreachbywhatisthoughttobeRussiacouldresultinhighernumbersfor2020especiallyintherecordsexposedcategoryasitisthoughttobesignificant.Theextentofthebreachisstillunderinvestigationatthetimeofthispublication.

Privacyregulations

Therighttoprivacyisaconsideredtobebasichumanrightinmanypartsoftheworld.Thatprivacymayextendtoindividuals’righttocontroltheirownper-sonaldata.Thisrightmustbecarefullydefendedasownershipandmanagementofanindividual’spersonaldatacanimpactrelationshipswithothersandeventhedata-owner’sidentity[5].

Regulationsgoverninghowpersonaldataaregatheredandmanagedarerap-idlybeingdeveloped.TheEuropeanUnionhasledthewayinlegislatingprivacylawthroughtheGeneralDataProtectionRegulation(GDPR),passedin2016.

Thelawrequiresorganizations,thatgatherpersonaldataaboutEUcitizensfortransactionswithEUmemberstates,mustcarefullyprotectthatdatatoensureprivacy.

IntheUS,theCaliforniaPrivacyRightsAct(CPRA)whichexpandsonthe2018CaliforniaConsumerPrivacyAct(CCPA),adoptsmanyprinciplesfromtheGDPR[6].TheCCPRisdesignedtoprovideresidentsofCaliforniatheright:

toknowwhatpersonaldataisbeingcollected

BlockchainPotentialinAI

PAGE

4

toknowwhetheritisbeingsoldordisclosedandtowhom

torefusethesaleoftheirpersonaldata

toaccesstheirpersonaldata

torequestthatabusinessdeleteanypersonaldata

nottobediscriminatedagainstforexercisingtheirprivacyrights[7]

Atthefederallevel,theConsumerOnlinePrivacyRightsAct(COPRA)wasintroducedinDecember2019byDemocraticsenators,ledbyMariaCantwell.Althoughthisbillhasyettopass,andpreviousfederalprivacybillshavefailed,governmentalbodiescontinuetopursuestricterlawsforgoverningdata[8].

Privacylawsdirectlyaffecthowcompaniesoperateandwillrequirefirmsthatuseconsumerdatatoimplementsystemsandoperationalpracticesthatenablethemtoconformtothesenewregulations.BlockchainandDistributedLedgerTechnologyareuniquelypositionedtohelpcompaniescomplywithexistingandpotentialfutureregulationasitrelatestopersonalpropertyanddataprivacy.

Blockchainandprivacy

Amongthesignificantbenefitsofblockchainsolutionsisthattheyenableorga-nizationstosharedatainwaysnotpreviouslyavailable,openinguppossibilitiesforenhancedcollaboration,improvedoperationalefficienciesandexpandedrevenue.Questionsabouthowtomaintainprivacyoverthedataareheightenedintheseenvironmentsbecausethedataarestoredinsharedledgerswhichmaybeaccessiblebymultipleblockchainparticipants.

ConsenSys,ablockchaintechnologysolutionscompany,indiscussingthesecurityofpublicblockchains,arguesthat“Inreality,privacyisnotapropertyofanyblockchain.Rather,therearelayersofprivacythatcanbeappliedtoanyblock-chain…”[9].Designersmustcarefullyconsiderwhichpartiesareallowedtoreadandwritetransactionsandhowtransactionsarebroadcast,validated,andstored.Additionalissuesrelatingtohowpermissionsandsecuritymeasuresareupdatedandenforcedarealsoimportantconsiderations.Decisionsaboutwhoownsthedataandhowdatacanbeusedbyorganizationsandcomputerapplicationsfurthercomplicatesprivacydiscussions[9].

Decentralizedidentity

Self-sovereignidentity,awidelyheldviewamongblockchainproponents,holdsthatindividualsshouldhavecontrolovertheirownidentitiesandshouldhaveautonomyoverhowfacetsofidentityaresharedwithothers.Decentralizedidentity(DID)isablockchain-enabledembodimentofself-sovereignidentitythatcanprofoundlyimprovetheprivacyandsecurityofpersonaldata.

DIDreferstoindividualownershipofpersonaldigitaldatarelatingtomanyelementsofidentity.Microsoft,whichparticipatesindefiningDIDstandards,takestheperspectiveoftheindividual.“Currently,ouridentityandallourdigitalinter-actionsareownedandcontrolledbyotherparties,someofwhomwearen’tevenawareof[10].”Returningownershipofdatatotheindividualstowhomthedatapertainscanprovidebenefitsbothtothoseindividualsandtoorganizationsthatwouldotherwiseberesponsibleforprotectingthedata.

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity

PAGE

5

DOI:

/10.5772/intechopen.96999

BlockchaintechnologyenablesDIDandprovidesawayforindividualstostoretheirowndataoutsideofthedatabasesofthepartieswithwhomtheytransact.

Dataareownedandcontrolledbytheseindividualsandpointerstothisdataormetadatacanbestoredontheblockchainandcanbeusedtoverifythevalidityofclaimstheusersmakeabouttheirpersonaldata.Forexample,adriver’slicense

bureaumightissueadriver’slicensetoauser,whichtheuserstoresprivately.Whenaninsurancecompanyorotherpartywishestoverifythattheuserislicensed,theusercanpresentthelicensetoapartysuchasaninsurancecompany,andthepartycanindependentlyverifytheissuerandexpirationdate.

AnyonecancreateaDID.Whenthisidentityisfirstcreated,thereisnoinfor-mationattachedtoit.Overtime,theusercouldattachadriver’slicenseorotheridentifyingdatatothatDID.TheprocessthatathirdpartymightusetoverifythataparticularpersonownsaDID,issimilartotheprocessofvalidatingthatapersonownsanemailaddress.Forexample,anonlinegamingaccountcanbeattachedtoanemailaddress.Apartyseekingtovalidatethatapersonwastheownerofthataccountcouldsendaprivatemessage,suchasasecuritycode,totheemailaddressandaskthepersontoprovidethatcode,somethingthatonlythepersonpossessingthepasswordforthatemailaddresscouldprovide.

Unlikeanemailaccount,theDIDwouldbeownedandstoredbyapersonratherthanbyanemailserviceprovider.Thepassword,orprivatekey,wouldalsobesecuredbytheowner.Personalinformationrelatingtotheidentitycouldbestoredinanidentityhub—anencryptedrepositoryofpersonaldatathatisstoredoutsidetheblockchain,likelyinacombinationofphone,PC,andclouddataorofflinestor-agedevices[10].Throughtheuseofanidentityhub,thepersoncouldcontrolwhichpiecesofinformationtosharewithanexternalparty.

DIDsreducetheprobabilityofunwantedcorrelation.Theuseofcommonidentifiers—suchasemailaddressesondifferentwebsites—createswhatiscalledacorrelationproblem.Correlationinthiscontextmeansentitiescan,withouta

user’sconsent,associateinformationaboutasingleidentityacrossmultiplesystems.Emailaddressesutilizedataonalmosteverywebsite.Whenusersprovidethesameemailaddressondifferentsites—alongwithperhapsadditionalpiecesofpersonalinformationlikeaphonenumberorphysicaladdress—theyunknowinglyenable

apotentialforcorrelation.Inthiscase,entitiescancorrelatethatdataacrosssites.

Figure2.

Decentralizedidentitiesandserviceproviders.

BlockchainPotentialinAI

PAGE

6

TrackingcookiesandwebclicksenablethelinkingofIDsacrosswebsiteswhichcanresultinoutsidersgainingafullpictureofusers’identity,wheretheylive,theirgender,agerange,interests,andotherinformation[10].

Figure2depictshowauserofseveralservicesandon-linewebsitescanstoredatainacentraluser-controlledlocationandinteractseparatelywitheachserviceprovider.Thisenablestheusertocontrolthespecificpiecesofinformationthatcanbeseenbyeachprovider.

Blockchain-enabledfederatedidentity

DIDscanhelpuserssecureandcontroltheirdatapropertyanddeterminewhogetsaccesstothatdata.Blockchainscanalsoincreasesecurityforindividualswheninteractingwithmultipleinternetplatformsorservicesthroughtheuseofdecen-tralizedfederatedidentities.

Blockchainsallowentitiestoprotectprivacyofindividuals—centraltoself-sovereignidentity.Traditionally,usersofasystemorsetofsystemspossesswhatisreferredtoasafederatedidentity,whichcanbedescribedasasingleidentityusedbyindividualstoaccessservicesorinformationplatforms,providedbymultipleparties,wherebyasingleidentityisenabledanddeterminedbysinglesignon(SSO)authentication.Considerahealthcarenetworkthatincludesmultipleentitieslikehospitals,insurancecarriers,orurgentcareclinics,wheretheprovidersenabletheuseofasinglesign-oncredentialordigitalfederatedidentitytoaccessallservices.

Thistypeofidentity,whichistypicallystoredandmanagedinacentrallocationbyaserviceprovider,ispronetosecurityvulnerabilities[11].

ThedistributednatureofBlockchaintechnologyprovidesanopportunityfornetworkstoenablesinglesign-on,orfederatedidentitiesmuchmoresecurely.

ElGayyar[11]proposesablockchain-basedfederatedidentityframework(BFID)wherethenetworkofprovidersthemselves,ratherthanacentralizedthirdparty,managethesystem,identification,andauthenticationoftheusers.Anyentitywithintheblockchainnetworkcanverifycredentialsandissuetheidentityforanyuserinthesystem.InaBFID,alltransactionsarewrittenandmaintainedwithintheblockchainwherethesystemtakesadvantageofthesecureandimmutablenatureofthedistributedledger,therebypracticallyeliminatingthepossibilityforidentitybreachesandpotentialtheft.

Blockchain-basedfederatedidentityframeworkscanbeconfiguredonbothpublicandprivateblockchainimplementationsandmakeuseofsmartcontractstoreacttopotentialrulechangesthatmayoccurwhilegoverningidentitymanagementwithinthesystem.Additionally,theseframeworksenableuserstoauditandcontrolhowtheiridentitiesareusedwhilealsoprovidingthenetworkbusinessentitiestheabilitytomonitorhowtheirservicesarebeingused,enablingprocessimprovementandabetteroveralluserexperience.

Zero-knowledgeproofs

Zero-knowledgeproofsenableeaseofaccesstoidentityandotherimportantdatawhilemaintainingprivacyandpropertycontrolforindividuals.Zero-knowledgeproofsarecryptographicmethodswherebyauseror“prover”canconvincesomeone,ora“verifier”thatsomethingaboutthemistruewithoutproviding,revealingorsharingthatinformation.Acommonexampleisacustomerattemptingtoorderanalcoholicbeveragefromabartenderwhodemandstoknowthatthepatronis21ofageorolder.Providingadriver’slicenserevealsthepatron’sfullbirthdateaswellasheight,eyecolor,andhomeaddress—informationthatcouldbemisusedorstolen.

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity

PAGE

7

DOI:

/10.5772/intechopen.96999

Zero-knowledgeproofsusecryptographicalgorithmsthatenableaprovertomathematicallydemonstratetoaverifierthatastatementiscorrectwithoutreveal-inganydata.Whenthestateissuesa21-and-overdriver’slicense,itasksthedrivertotypeinasecretnickname,unknowntothelicensingbureau.Thisnicknamecouldthenbehashedtogetherwiththedriver’slicensenumber,andstoredinapubliclistrepresentingvaliddriversover21.Atthebar,youcouldtypeyournicknameandlicensenumberintoahashgenerator,andiftheresultinghashmatchedoneonthelist,thebartenderwouldknowthatyouwereoflegalage[12].

Therearetwotypesofzeroknowledgeproofs,interactiveandnon-interactive.Mostcommonly,zeroknowledgeprotocolsareinteractivewherebytheprover(anindividualormorelikelyacomputer)andtheverifierparticipateinabackandforthsetofquestionsorchallengesthat,whenansweredcorrectlyagivennumberoftimes,enablestheprovertoconvincetheverifier,withveryhighprobability,thatthestatementtheyaremakingistrue.

Anexampleofaninteractivezeroknowledgeproofcouldinvolvetwocoloredballsthatareidenticalineverywayaccepttheircolor.Oneisredandonegreen.Let’sassumetheverifieriscompletelycolorblindandcannottellthecolorofeitherball.Youwanttoprovetotheverifierthattheballsdoinfactdifferincolor.Theverifierputstheballsbehindtheirbackandshowsone.Theproverindicatesthecolor.Theverifierthendoesthisagainandasksiftheyswitchedtheball.Since

youcanseethedifferentcolorsyoucansaywithcertaintythattheballwaseitherswitchedornot.Afterseveralroundsofthis,itbecomesmorestatisticallytruethatthereareinfacttwodifferentballsastheprobabilitythatyoucouldguesscorrectlyoverandovergoesdowntoalmostzero[13].

Non-interactiveproofismoreliketheexampleaboveofthepatronprovingtheiragetoabartenderwithaproofstatementthatrevealsagebutnotadditionalinformationthatmightberevealediftheproverweretoshowtheirphoto.ProvingwhichpointValueacardinadeckof52cards,withoutidentifyingitssuit,canprovideanexampleofthistypeofproof.Theproverstatesthatthecardtheyareholdingisakingbutdoesnotwanttorevealwhichking—thekingofhearts,diamonds,spadesorclubs.Ifthecrypto-graphicstringalsocontainsinformationthatrevealstheother48cards,noneofwhicharekings,wecanknowforcertainthattheproverdoesinfactholdakingofsomekind.

Zeroknowledgeproofsarepowerfultoolsformaintainingprivacyandpropertycontrolforindividualsthatmayneedtoprovideabitofpersonalinformationbutnomorethanabsolutelynecessary.

Artificialintelligenceandprivacy

ArtificialIntelligence(AI)isabroadfieldthatincludesmachinelearningandcognitivecomputingwherecomputersareprogramedtomimichumancognitivefunctionssuchaslearningandproblemsolvingbutmanytimes,muchfasterandinmoreaccurateways[14].TheuseofAIisexpandingintoaplethoraofareasinclud-ingspeechrecognition,facialrecognition,medicaldiagnosis,financialpredictions,trackingofdiseaseoutbreaksetc.AIalgorithmsenablecomputingsystemstorationalizeandtakeactionsaimedatachievingaspecificgoalorsetofgoals.

UserandstakeholdersecuritycanbeenhancedthroughAItools,whichcantakeadvantageofblockchaintoopenupnewavenuesforaccessingandlearningfromdatawithouttakingownershiporcontrolofthatdata.Thiscanreduceriskfortheorganizationandthestakeholderswhoprovidethedata.Bothindividualblockchainmembersandtheorganizationorgroupinchargeofsettinggovernancerulesandprocessescanbenefitfrombuildinginprivacy-relatedAIfunctionality(asearlyaspossible)inthedesignofblockchainnetworksandprocesses.

BlockchainPotentialinAI

PAGE

8

CompanieshaveimplementedAItocreateholisticviewsofcustomersbypiecingtogethertransactionsfromallcustomertouchpoints.Blockchainparticipantswillhaveincentivestopulltogetherintegrateddatasetsbycombiningtransactionsfor

asinglecustomeracrossallblockchainpartners.Thiscreatespotentialbenefitsforblockchainpartners,butcanalsonegativelyaffecttheprivacyofcustomersandotherstakeholdersforwhichthisintegrationispossible.

Incombinationwithoptionsforidentityprotectionthroughdecentralization,AIcanbeusedtocombinepersonaldatafromblockchainparticipantsandtheirstake-holdersinawaythatmaintainsinformationsecurityandpersonaldataprivacy.

Throughtheseprocesses,userandstakeholdersecuritycanbeenhancedanddatasetsandAImodelscanbeimproved.

Wecanidentifyfourcategoriesofstakeholdersthatcanbeaffectedbyanorganization’sdatatransparencyandprivacyprocesses:(1)participants,whosedata—bothdirectandindirect—aregathered;(2)victims,whoareaffectedbydeci-sionsmadeusingparticipantdata;(3)users,whouseparticipantdataintheirwork;and(4)custodians,whomanageandsecuredata.WhenAIcanbeusedtomanageaccesstodataandtodevelopanalyticalmodelsusingthatdata,allstakeholderscanbenefit[15].

Table1summarizesanumberofwaysAIcanbeusedinablockchainsettingtoprotectorincreaseprivacyofuser’spersonaldata.ThisAI/Blockchaincombinationcanincreasesystemsecuritybyhelpingtodetectattacksbybadactors,usersecuritybysharingpermissionsandsmartcontracts,enableprivacy-enhanceduseofdata-setsthroughimprovedidentitymanagementandbetterdata,anditcanimproveAImodelsthroughmorevaried,valid,andethically-sourceddataandbetterhypoth-eses.EachiteminTable1isdescribedbrieflybelow,followedbyexamplesofusecasesusingthiscombinationoftechnologies.

Computationalintelligence(CI),asubsetofAIcanimprovetheBlockchain’sattackresiliencethusimprovingsecurityofthesystemandultimatelytheprivacyofthedataresidingonthesystem.AIisrootedinhardcomputingtechniqueswhereascomputationalintelligenceisbasedonsoftcomputingmethods,whichenableadaptationtoarangeofchangingvariables[16].

Computationalintelligence,whencombinedwithblockchainsystems,cancre-atemorerobustcryptographicfunctionalityandcipherstherebymakingitmoredifficultforcyberhackerstocompromisesystemsevenascomputingpowerandeffortstohackthesesystemsovertimeincreases.Quiteappropriately,[14]refertotheintersectionofblockchainandAIas“blockchainintelligence”.Additionally,AIalgorithmscanbebuiltonblockchainstodetectwhenablockchainisunder

SystemSecurity •Maliciousattackdetection

MorerobustcryptographicfunctionalityUserSecurity •Usersdecidewhatdatatoshare

Smartcontractscanenforceestablishedpermissions

Datasets •Improvedidentitymaskingandmetadata

Cleanerandmoreaccuratedata

AIModels •Broaderscopeandgreatervarietyofdata

Improvedvalidityofdataandmodels

Ethicallysourcedandpermissioned

Carefulconstructionofhypotheses

Table1.

TheroleofAIinblockchainuserprivacy.

HowBlockchainandAIEnablePersonalDataPrivacyandSupportCybersecurity

PAGE

9

DOI:

/10.5772/intechopen.96999

attackbycontinuallymonitoringblocksandactivityonthechain.Thistechnologyincreasestrustinthesystembeyondwhatthenativearchitectureprovides[17,18].

Whenblockchainparticipantshaveincreasedcontrolovertheirowndata,theyhavethepotentialtodecidewithwhichpartiesandforwhatpurposestheirdataareshared.Inordertocollectpart