Applying Blockchain Technology for Privacy Preservation in Android Platforms | SpringerLink
Skip to main content

Applying Blockchain Technology for Privacy Preservation in Android Platforms

  • Conference paper
  • First Online:
Web Services – ICWS 2023 (ICWS 2023)

Abstract

Android applications (called apps) are an integral part of our digital lives, with an ever-growing user base generating massive amounts of data every day. Despite privacy measures in place, such as the Android permission model, there persists a significant privacy concern due to factors like centralized data storage and lack of transparency. This paper presents a novel approach to enhance privacy preservation in Android platforms, focusing specifically on managing ’dangerous’ permissions related to sensitive health data. We propose a hybrid architecture that combines traditional data processing for regular data with a blockchain-based system for handling sensitive data, thus offering enhanced security, transparency, and user control. Our detailed evaluation using Ethereum Virtual Machine (EVM) compatible platforms (i.e., BNB, Fantom, Celo, and Matic) shows the feasibility and effectiveness of our approach, with the Fantom platform proving the most suitable due to its low transaction cost and optimal gas limit. We acknowledge that the successful implementation of our proposed solution relies on stakeholder acceptance. Therefore, we outline strategies for convincing both service providers and Android OS producers to consider this transformative approach. This paper offers a pioneering view into using blockchain technology to address the persistent privacy concerns in the Android app ecosystem.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
¥17,985 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
JPY 3498
Price includes VAT (Japan)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
JPY 5719
Price includes VAT (Japan)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
JPY 7149
Price includes VAT (Japan)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    http://bit.ly/3Nduhcg.

  2. 2.

    https://technologymagazine.com/digital-transformation/app-annie-38-trillion-hours-spent-mobiles-2021.

  3. 3.

    https://bit.ly/3CzGfbo.

  4. 4.

    http://pewrsr.ch/3PjVOLW.

  5. 5.

    https://bit.ly/447dheI.

  6. 6.

    https://developer.android.com/guide/topics/permissions/overview?hl=en.

  7. 7.

    https://www.tiktok.com/legal/page/row/privacy-policy/en.

  8. 8.

    https://bit.ly/467Mkct.

  9. 9.

    https://developer.android.com/reference/android/Manifest.permission.

  10. 10.

    https://gdpr-info.eu/.

  11. 11.

    https://github.com/bnb-chain/whitepaper/blob/master/WHITEPAPER.md.

  12. 12.

    https://polygon.technology/lightpaper-polygon.pdf.

  13. 13.

    https://whitepaper.io/document/438/fantom-whitepaper.

  14. 14.

    https://celo.org/papers/whitepaper.

  15. 15.

    Our implementation models were released on 11/24/2022, 8:44:53 AM UTC.

  16. 16.

    https://testnet.bscscan.com/address/0xafa3888d1dfbfe957b1cd68c36ede4991e104a53.

  17. 17.

    https://mumbai.polygonscan.com/address/0xd9ee80d850ef3c4978dd0b099a45a559fd7c5ef4.

  18. 18.

    https://testnet.ftmscan.com/address/0x4a2573478c67a894e32d806c8dd23ee8e26f7847.

  19. 19.

    https://explorer.celo.org/alfajores/address/0x4a2573478C67a894E32D806c8Dd23EE8E26f7847/transactions.

  20. 20.

    The proof-of-concept of our proposed model is available in https://github.com/SonHaXuan/medical-record-Blockchain-NFT.

References

  1. Al-Natour, S., et al.: An empirical investigation of the antecedents and consequences of privacy uncertainty in the context of mobile apps. Inf. Syst. Res. 31(4), 1037–1063 (2020)

    Article  Google Scholar 

  2. Alazab, M., et al.: Intelligent mobile malware detection using permission requests and API calls. Futur. Gener. Comput. Syst. 107, 509–521 (2020)

    Article  Google Scholar 

  3. Balasubramanium, S., et al.: A survey on data privacy and preservation using blockchain in healthcare organization. In: International Conference on Advance Computing and Innovative Technologies in Engineering, pp. 956–962. IEEE (2021)

    Google Scholar 

  4. Bandara, E., et al.: A blockchain and self-sovereign identity empowered digital identity platform. In: 2021 International Conference on Computer Communications and Networks (ICCCN), pp. 1–7. IEEE (2021)

    Google Scholar 

  5. Chen, S., et al.: AUSERA: automated security vulnerability detection for android apps. In: 37th IEEE/ACM International Conference on Automated Software Engineering, pp. 1–5 (2022)

    Google Scholar 

  6. Chen, Z., et al.: A blockchain-based preserving and sharing system for medical data privacy. Futur. Gener. Comput. Syst. 124, 338–350 (2021)

    Article  Google Scholar 

  7. Enck, W., et al.: TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. ACM Trans. Comput. Syst. (TOCS) 32(2), 1–29 (2014)

    Article  Google Scholar 

  8. Fan, M., et al.: An empirical evaluation of GDPR compliance violations in android mHealth apps. In: 2020 IEEE 31st international symposium on software reliability engineering (ISSRE), pp. 253–264. IEEE (2020)

    Google Scholar 

  9. Hankerson, D., et al.: Guide to Elliptic Curve Cryptography. Springer, Heidelberg (2006)

    MATH  Google Scholar 

  10. Haupert, V., Maier, D., Schneider, N., Kirsch, J., Müller, T.: Honey, i shrunk your app security: the state of android app hardening. In: Giuffrida, C., Bardin, S., Blanc, G. (eds.) DIMVA 2018. LNCS, vol. 10885, pp. 69–91. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-93411-2_4

    Chapter  Google Scholar 

  11. Le, N.T.T., et al.: Assuring non-fraudulent transactions in cash on delivery by introducing double smart contracts. Int. J. Adv. Comput. Sci. Appl. 10(5), 677–684 (2019)

    Google Scholar 

  12. Mia, M.R., et al.: A comparative study on HIPAA technical safeguards assessment of android mHealth applications. Smart Health 26, 100349 (2022)

    Article  Google Scholar 

  13. Sengupta, A., et al.: User control of personal mhealth data using a mobile blockchain app: design science perspective. JMIR mHealth uHealth 10(1), e32104 (2022)

    Google Scholar 

  14. Son, H.X., Carminati, B., Ferrari, E.: A risk assessment mechanism for android apps. In: 2021 IEEE International Conference on Smart Internet of Things (SmartIoT), pp. 237–244. IEEE (2021)

    Google Scholar 

  15. Son, H.X., Carminati, B., Ferrari, E.: PriApp-install: learning user privacy preferences on mobile apps’ installation. In: Su, C., Gritzalis, D., Piuri, V. (eds.) ISPEC 2022. LNCS, vol. 13620, pp. 306–323. Springer, Cham (2022). https://doi.org/10.1007/978-3-031-21280-2_17

    Chapter  Google Scholar 

  16. Son, H.X., Carminati, B., Ferrari, E.: A risk estimation mechanism for android apps based on hybrid analysis. Data Sci. Eng. 7(3), 242–252 (2022)

    Article  Google Scholar 

  17. Son, H.X., et al.: In2P-med: toward the individual privacy preferences identity in the medical web apps. In: Garrigós, I., Murillo Rodríguez, J.M., Wimmer, M. (eds.) ICWE 2023. LNCS, vol. 13893, pp. 126–140. Springer, Cham (2023). https://doi.org/10.1007/978-3-031-34444-2_10

    Chapter  Google Scholar 

  18. Talha, K.A., et al.: APK auditor: permission-based android malware detection system. Digit. Investig. 13, 1–14 (2015)

    Article  Google Scholar 

  19. Xiao, J., et al.: An android application risk evaluation framework based on minimum permission set identification. J. Syst. Softw. 163, 110533 (2020)

    Article  Google Scholar 

  20. Zhang, H., et al.: Protecting data in android external data storage. In: 2019 IEEE 43rd Annual Computer Software and Applications Conference (COMPSAC), vol. 1, pp. 924–925. IEEE (2019)

    Google Scholar 

  21. Zheng, Z., et al.: Blockchain challenges and opportunities: a survey. Int. J. Web Grid Serv. 14(4), 352–375 (2018)

    Article  MathSciNet  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding authors

Correspondence to H. G. Khiem or K. V. Hong .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Khiem, H.G. et al. (2023). Applying Blockchain Technology for Privacy Preservation in Android Platforms. In: Zhang, Y., Zhang, LJ. (eds) Web Services – ICWS 2023. ICWS 2023. Lecture Notes in Computer Science, vol 14209. Springer, Cham. https://doi.org/10.1007/978-3-031-44836-2_4

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-44836-2_4

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-44835-5

  • Online ISBN: 978-3-031-44836-2

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics