区块链对风险管理的启示和意义,区块链对风险管理的启示有哪些
区块链技术在风险管理领域的发展为企业提供了一种新的、更具有效率的风险管理方式。它为企业提供了一种高效的风险管理体系，可以实现风险管理的有效性和可靠性，从而带来更低的成本和更高的效率。本文将探讨区块链对风险管理的启示和意义，以及它的三个关键词：可信认证、去中心化和自动化。
可信认证是指使用区块链技术来确保数据的可信性和安全性。区块链技术使用分布式账本技术和密码学算法，可以有效地保护数据的完整性和安全性。它可以实现可信认证，使得企业可以轻松地实现数据安全和可信性，从而提高风险管理的效率。
去中心化是指使用区块链技术，可以实现数据的去中心化，从而消除企业在数据存储和传输过程中的中心化风险。区块链技术可以提供分布式数据存储和传输，可以有效地降低企业在数据存储和传输过程中的风险。同时，它也可以提高企业的数据安全性，从而提高风险管理的效率。
自动化是指使用区块链技术，可以实现自动化的风险管理，从而提高风险管理的效率。区块链技术可以实现自动化的风险管理，可以有效地降低企业在风险管理过程中的人力成本，从而提高风险管理的效率。此外，它还可以提高企业的数据安全性，从而更好地控制风险。
区块链技术对风险管理的启示和意义是显而易见的，它可以有效地提高企业的数据安全性和可信性，可以实现去中心化和自动化的风险管理，从而提高风险管理的效率。因此，企业应该加强对区块链技术的研究，以便更好地控制风险，实现更高的效率。
请查看相关英文文档
1. What is blockchain technology? What are the core components of blockchain technology?
What is blockchain technology? What are the core components of blockchain technology? What is blockchain technology:
Blockchain is a new application model of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc. The so-called consensus mechanism is a mathematical algorithm that establishes trust and obtains rights and interests between different nodes in the blockchain system.
Blockchain is an important concept of Bitcoin. It is essentially a decentralized database and serves as the underlying technology of Bitcoin. The blockchain is a series of data blocks generated using cryptographic methods. Each data block contains information about a Bitcoin network transaction and is used to verify the validity of its information (anti-counterfeiting) and generate the next block.
The core components of blockchain technology:
Blockchain mainly solves the trust and security issues of transactions, so it proposes four technological innovations to address this issue:
The first one is called distribution A type of ledger means that transaction accounting is completed by multiple nodes distributed in different places, and each node records a complete account, so they can all participate in supervising the legality of the transaction and can also jointly testify for it.
Different from traditional distributed storage, the uniqueness of blockchain distributed storage is mainly reflected in two aspects: First, each node of the blockchain stores complete data according to the block chain structure. Traditional distributed storage generally divides data into multiple parts for storage according to certain rules. Second, the storage of each node in the blockchain is independent and has equal status, relying on the consensus mechanism to ensure storage consistency, while traditional distributed storage generally synchronizes data to other backup nodes through the central node. [8]
No node can record ledger data independently, thus avoiding the possibility of a single bookkeeper being controlled or bribed to record false accounts. Also because there are enough accounting nodes, theoretically speaking, the accounts will not be lost unless all nodes are destroyed, thereby ensuring the security of the accounting data.
The second one is called asymmetric encryption and authorization technology. The transaction information stored on the blockchain is public, but the account identity information is highly encrypted and can only be accessed with authorization from the data owner. This ensures data security and personal privacy.
The third one is called the consensus mechanism, which is how all accounting nodes reach a consensus to determine the validity of a record. This is both a means of identification and a means of preventing tampering. Blockchain proposes four different consensus mechanisms, which are suitable for different application scenarios and strike a balance between efficiency and security.
The consensus mechanism of the blockchain has the characteristics of "the minority obeys the majority" and "everyone is equal". "The minority obeys the majority" does not entirely refer to the number of nodes, but can also be computing power, the number of shares, or other factors. calculateFeature quantities that the machine can compare. "Everyone is equal" means that when a node meets the conditions, all nodes have the right to give priority to the consensus result, which will be directly recognized by other nodes and may eventually become the final consensus result. [8]
Taking Bitcoin as an example, it uses proof of work. Only when more than 51% of the accounting nodes in the entire network are controlled, it is possible to forge a non-existent record. When there are enough nodes joining the blockchain, this is basically impossible, thus eliminating the possibility of fraud.
The last technical feature is called smart contracts. Smart contracts are based on these trustworthy and non-tamperable data and can automatically execute some predefined rules and terms. Take insurance as an example. If everyone's information (including medical information and risk occurrence information) is true and trustworthy, it will be easy to automate claims settlement in some standardized insurance products.
In the daily business of insurance companies, although transactions are not as frequent as those in the banking and securities industries, the reliance on trusted data continues unabated. Therefore, the author believes that using blockchain technology from the perspective of data management can effectively help insurance companies improve their risk management capabilities. Specifically speaking, it is mainly divided into risk management of policyholders and risk supervision of insurance companies.
Chongqing Jinwowo Analysis: The consensus mechanism is the core of blockchain technology. The consensus mechanism largely determines the degree of mutual trust between nodes in the entire blockchain system, and also determines other users’ views on the blockchain. The degree of trust in online data
What is the core component of blockchain technology? Analysis by Chongqing Jinwowo: Blockchain technology consists of three core technologies: consensus mechanism, common defense mechanism, and distributed storage.
The three core technologies are supported by machine trust, that is, through the support of network technology, breakthroughs in difficult problems such as point-to-point transactions, decentralization, non-tampering of recorded information, irreversible transactions, and information encryption are achieved through network technology support.
The development of blockchain technology is becoming more and more prosperous with the continuous expansion of applications. This powerful development force coming from the needs of various industries has caused rapid changes in blockchain technology, allowing various industries to achieve great results. The results are attracting more and more attention, and professional technologies and resources are constantly concentrated in this industry, thus bringing the development of blockchain technology into a new stage, and the impact of this development of blockchain technology has also much attention.
When talking about blockchain technology, Bitcoin has to be mentioned. Many people know that the electronic currency Bitcoin does not rely on the issuance of a specific monetary institution, but is generated through a large number of calculations by a specific algorithm. In fact, the core that truly supports Bitcoin is blockchain technology.
How does the invisible and intangible Bitcoin operate through blockchain technology? The interpretation circulated in the industry is that blockchain can be regarded as a way to collectively maintain reliable data through "decentralization" and "trustlessness".Database technical solutions. In layman's terms, this technology can be understood as a technology in which everyone participates in accounting. In the past, people used centralized servers to keep accounts, but in the blockchain technology system, everyone can participate in accounting and jointly identify Authenticity of records.
"Through this technology, even if there is no neutral third-party organization, two parties that do not trust each other can achieve cooperation. In short, the blockchain is like a 'machine that creates trust.'" Bubi Company It is a leading blockchain service provider in China. It has made many breakthroughs in the blockchain technology platform, can meet scenarios with tens of millions of users, and has the ability to quickly build upper-layer application businesses.
The blockchain technology used by all parties involved in recording and storing information adopts a decentralized distributed structure, which saves a lot of intermediary costs and can better ensure data security; at the same time, it has a time stamp that cannot be tampered with. It can effectively solve problems such as data tracking and information anti-counterfeiting.
Will it become the next trend of Internet finance?
Although blockchain emerged with Bitcoin, the derived value of this technology has transcended digital currency. Bubi Blockchain focuses on the innovation of blockchain technology and products. It already possesses a number of core technologies and has developed its own blockchain service platform. With decentralized trust as the core, we are committed to building an open value circulation network to allow digital assets to flow freely. What Bubi wants to do is to create a new technology and product - to realize real value circulation and bring the Internet to a new level. With the application of this technology, there will be no central organization when transferring assets, and direct transfer of assets between us can be achieved.
In the current international financial market, the U.S. Central Bank, Swiss Bank, and some insurance and futures companies are all competing to develop blockchain technology. Fang Liang introduced that in the Internet financial industry, blockchain technology will first affect financial infrastructure such as payment systems, securities settlement systems, and transaction databases; later, the technology will also expand to general financial services, such as credit systems and "anti-money laundering" "wait.
"The payment and clearing system in the financial field will evolve towards decentralization. The electronic ledger supported by blockchain technology is a reliable system that is error-free and cannot be tampered with. It has various functions for payment, clearing, transaction, confirmation of rights, etc. A profound impact," Li Yan said.
Therefore, industry insiders believe that blockchain technology may be the next trend in the Internet financial industry. As the interconnection of all things deepens, Yang Tao, assistant director of the Institute of Finance, Chinese Academy of Social Sciences, also said that blockchain will make it possible for all individuals to become important nodes in the allocation of financial resources, and will also promote the improvement of existing financial system rules. Build a shared and win-win financial development ecosystem.
Blockchain technology will affect many industries
"Blockchain technology has been widely used in the era of big data." Li Yan said frankly that in addition to the Internet financial field, blockchain technology has been used in many industries. It has been applied in many fields and has shown great prospects.
For example,The healthcare industry has benefited greatly from blockchain technology. In reality, patient private information leaks often occur, and centralized database or file cabinet management in medical departments is no longer the optimal choice. Medical institutions are using blockchain technology to keep patients' private information confidential.
In addition, blockchain technology also has important legal implications. In some civil fields, it is often necessary to provide evidence to determine blame, and blockchain technology can record every step and help judicial authorities identify the specific responsible person.
"Especially in the field of assets, whether it is physical assets such as real estate and cars, or intangible assets such as health and reputation, this technology can be used to complete registration, transactions, and tracking. It can be said that any production and life that lacks trust In all fields, blockchain technology will have its place."
The development of blockchain technology has also brought about changes in the operational concepts of various industries. New technologies and new concepts have promoted new developments in various industries. This The impact of this driving force on society and the promotion of economic activities are also huge. Many new industry phenomena will occur one after another, and the public is also waiting and watching, expecting this brand-new technology to be used by various industries and better benefit all industries.
The so-called blockchain technology, also known as distributed ledger technology, is an Internet database technology that is characterized by decentralization. , open and transparent, allowing everyone to participate in database records.
Explained in layman’s terms: If the database is assumed to be a ledger, reading and writing the database can be regarded as a bookkeeping behavior. The principle of blockchain technology is to find out the fastest and best bookkeeping within a period of time. This person will keep accounts, and then send this page of information to everyone else in the entire system. This is equivalent to changing all the records in the database and sending them to every other node in the entire network, so blockchain technology is also called a distributed ledger.
What is the core technology of Jinwowo blockchain technology?
Chongqing Jinwowo analyzes the core technologies of blockchain technology as follows:
Distributed ledger technology, asymmetric encryption technology and smart contracts.
The core of the blockchain is that it stores all information in an independent personal computer network, making it a decentralized and distributed structure.
This means that the system is not owned by a controlling company or person, but that everyone can use and run the system.
I specifically checked the information to answer your question! Renren blockchain service allows users to quickly build their own IT infrastructure and blockchain services on a flexible and open cloud platform. Using BaaS can greatly reduce your cost of implementing the underlying technology of the blockchain, simplify blockchain construction and operation and maintenance work, and at the same time faceFor scenarios in various industry fields, we can meet the personalized needs of users and provide one-stop rapid delivery of customized BaaS. Hope to adopt
What is blockchain technology?Blockchain has been hyped up like crazy, but you know nothing about it!
Blockchain is a distributed database system participated by different nodes and an open ledger system.
It consists of a series of data blocks or data packets generated according to cryptographic methods, that is, blocks. Each block of data information is automatically timestamped, thus Calculate a data encryption value, that is, a hash value (hash).
Blockchain technology is essentially a distributed accounting technology. It allows everyone to have an instantly synchronized account book in their hands. Every transaction that occurs in the entire network will have thousands of backups and synchronous records. When perpetrators attempt to tamper with ledger data, they must change the ledger in the hands of the majority of people to achieve their goal.
2. What role does blockchain application play in network security
Blockchain technology can help us improve the security of protection mechanisms such as encryption and authentication, which is important for the security of the Internet of Things And this is definitely good news for the DDoS defense community!
Blockchain has the potential to become an important solution for the security community, also for finance, energy and manufacturing. For now, verifying Bitcoin transactions is one of its primary uses, but the technology could also be extended to applications such as smart grid systems and content delivery networks.
How to apply blockchain to network security?
Whether it is protecting data integrity or using digital identification technology to protect IoT devices from DDoS attacks, blockchain Chain technology can play a key role, at least now it has shown this ability.
IoT security and DDoS defense community
A certain blockchain startup claims that their decentralized “accounting” system can help users resist DDoS attacks with traffic exceeding 100Gbps. Interestingly, the company said that this decentralized system allows users to rent out their own additional bandwidth and "submit" bandwidth access rights to blockchain distributed nodes, which websites can take advantage of when they suffer DDoS attacks. Rent bandwidth to mitigate DDoS attacks.
Improving confidentiality and data integrity
Although the original design of the blockchain did not take into account specific access control, some blockchain technology implementations have now solved the problem of data Confidentiality and access control issues. In this era where any data may be tampered with, this is obviously a serious problem, but complete data encryption ensures that the data will not be accessed or tampered with by others through man-in-the-middle attacks and other forms during transmission.
The entire IoT industry requires data integrity assurance. For example, IBM in its WatThe son IoT platform allows users to manage IoT data in a private blockchain network, and this blockchain network has been integrated into their Big Blue cloud service. In addition, Ericsson's blockchain data integrity service provides comprehensive auditing, compliance and trustworthy data services to allow developers to leverage the Predix PaaS platform for technical implementation.
One of the best applications is transforming our public sector and creating citizen-centric infrastructure. This will enable citizens to have their own identity and every transaction can be verified. We can use smart contracts and signed assertions to formulate elements of public services, such as benefits and benefits.
Internet of Things & Smart Devices
Now the attention of the entire IT community has begun to shift to the Internet of Things & Smart Devices, and security is definitely one of the primary considerations. Although the Internet of Things can improve our work and productivity, it also means that we need to face more security risks. Many companies are therefore looking to apply blockchain to secure IoT and Industrial IoT (IIoT) devices because blockchain technology can enhance identity verification, improve data traceability and liquidity, and assist in record management.
Blockchain technology can help track hacking attacks, according to Kaspersky Lab anti-virus expert Alexey Malanov, who added:
“Network intruders often remove Permission logs to hide traces of unauthorized access to devices. But if the logs are distributed across multiple devices (for example, through blockchain technology), the risk can be reduced as much as possible."
Digital Economic Development Fund Chairman German Klimenko said: "Currently, the Department of Defense is vigorously promoting IT development and research efforts, which is a good thing for the industry."
NATO and the Pentagon are also Research “defensive” applications of blockchain. This technology is actively used to protect systems from cyberattacks. NATO will use blockchain to protect financial information, supply and logistics chains, while the Pentagon is developing a hack-proof data transmission system.
In general, blockchain technology is not omnipotent, at least not yet. Whether it is from the perspective of technical integrity or system implementation, current blockchain technology cannot ensure 100% device security. Note: The above content comes from the Internet.
3. What is blockchain technology? What exactly is blockchain?
In a narrow sense, blockchain is a way to block data in chronological order. A chained data structure composed of sequential connections, and a cryptographically guaranteed distributed ledger that cannot be tampered with or forged.
Broadly speaking, blockchain technology uses block chain data structures to verify and store data, uses distributed node consensus algorithms to generate and update data, and uses cryptography.A new distributed infrastructure and computing method that ensures the security of data transmission and access and uses smart contracts composed of automated script codes to program and operate data.
[Infrastructure]
Generally speaking, the blockchain system consists of data layer, network layer, consensus layer, incentive layer, contract layer and application layer composition. Among them, the data layer encapsulates the underlying data blocks and related basic data and basic algorithms such as data encryption and timestamps; the network layer includes distributed networking mechanisms, data dissemination mechanisms, and data verification mechanisms; the consensus layer mainly encapsulates network nodes Various consensus algorithms; the incentive layer integrates economic factors into the blockchain technology system, mainly including the issuance mechanism and distribution mechanism of economic incentives; the contract layer mainly encapsulates various scripts, algorithms and smart contracts, and is the core of the blockchain The basis of programmable features; the application layer encapsulates various application scenarios and cases of the blockchain. In this model, the chain block structure based on timestamps, the consensus mechanism of distributed nodes, economic incentives based on consensus computing power, and flexible programmable smart contracts are the most representative innovations of blockchain technology.
Extended information:
[Blockchain core technology]
Blockchain mainly solves the trust and security issues of transactions, so it addresses this issue Four technological innovations:
1. Distributed ledger means that transaction accounting is completed by multiple nodes distributed in different places, and each node records a complete account, so they all Can participate in supervising the legality of transactions and can also jointly testify for them.
The uniqueness of blockchain's distributed storage is mainly reflected in two aspects: First, each node of the blockchain stores complete data according to the block chain structure. Traditional distributed storage generally stores The data is divided into multiple parts for storage according to certain rules. Second, the storage of each node in the blockchain is independent and has equal status, relying on the consensus mechanism to ensure storage consistency, while traditional distributed storage generally synchronizes data to other backup nodes through the central node.
No node can record ledger data independently, thus avoiding the possibility of a single bookkeeper being controlled or bribed to record false accounts. Also because there are enough accounting nodes, theoretically speaking, the accounts will not be lost unless all nodes are destroyed, thereby ensuring the security of the accounting data.
2. Asymmetric encryption and authorization technology. Transaction information stored on the blockchain is public, but account identity information is highly encrypted and can only be accessed with authorization from the data owner. , thus ensuring data security and personal privacy.
3. The consensus mechanism is how all accounting nodes reach a consensus to determine the validity of a record. This is both a means of identification and a means of preventing tampering. Blockchain proposes four different consensus mechanisms, which are suitable for different application scenarios and strike a balance between efficiency and security.
The consensus mechanism of the blockchain has "the minority obeys the majority"And the characteristics of "everyone is equal", where "the minority obeys the majority" does not entirely refer to the number of nodes, but can also be computing power, the number of shares, or other characteristics that computers can compare. "Everyone is equal" means that when a node meets the conditions, all nodes have the right to give priority to the consensus result, which will be directly recognized by other nodes and may eventually become the final consensus result.
4. Smart contracts. Smart contracts are based on these trustworthy and non-tamperable data and can automatically execute some predefined rules and terms. Take insurance as an example. If everyone's information (including medical information and risk occurrence information) is true and trustworthy, it will be easy to automate claims settlement in some standardized insurance products.
In the daily business of insurance companies, although transactions are not as frequent as those in the banking and securities industries, the reliance on trusted data continues unabated. Therefore, the author believes that using blockchain technology from the perspective of data management can effectively help insurance companies improve their risk management capabilities. Specifically speaking, it is mainly divided into risk management of policyholders and risk supervision of insurance companies.
Blockchain-Network
4. The use of blockchain technology can really solve the current situation of online mutual insurance
In the daily business of insurance companies , although transactions are not as frequent as those in the banking and securities industries, the reliance on trusted data continues unabated. Therefore, using blockchain technology from the perspective of data management can effectively help insurance companies improve their risk management capabilities. Specifically speaking, it is mainly divided into risk management of policyholders and risk supervision of insurance companies.
Policyholder Risk Management
In today’s insurance operations, disputes between insurance companies and policyholders often occur, either because policyholders provide false personal information to defraud insurance, or when settling claims, disputes regarding exemption clauses occur. There are differences in the identification. The key to these problems lies in the lack of an authentic and credible data collection and storage method for the personal information of policyholders.
With the advancement of national systematic projects such as the digitization of medical information and personal credit reporting systems, more and more authoritative data sources appear. If these data can be introduced and stored on the blockchain, it will become Along with each person's digital identity, the data on this is authentic and trustworthy, cannot be tampered with, is synchronized in real time, and is valid for life, which will bring great benefits to the risk management of policyholders.
First, it is to connect the data between different companies and refer to each other, so as to timely discover information such as repeated insurance and historical claims, and timely identify high-risk users. Take the fraudulent accidental injury insurance claim of RMB 40 million in March this year as an example. Zhou from Yangzhou purchased insurance from more than ten life insurance companies, but was not discovered until manual underwriting. If every insurance information he applies for is recorded in the blockchain, it can be discovered quickly and measures can be taken in a timely manner.
Second, introducing data from different industries into the blockchain can improve the accuracy and efficiency of underwriting and claims verification. To give an example of critical illness insurance, if all the medical treatment records of the policy holder can be queried on the blockchain, evenThe medical records of immediate family members provide first-hand information about the insured's current physical condition, disease history, and family medical history, which effectively prevents insurance from being sick.
Risk supervision of insurance companies
During the operation of insurance companies, risks occur from time to time due to various reasons. Regulatory agencies can only take measures to review beforehand or restrict afterward. However, as the front end of the insurance business becomes increasingly open and the companies participating in the insurance market become more and more diversified, the need for in-process supervision becomes increasingly prominent. In the author’s opinion, blockchain technology is one of the effective technical means for ongoing supervision. As long as the insurance company moves its daily operational processes to the blockchain and develops an accounting node (even a read-only accounting node) to the regulatory agency, the regulatory agency can observe all the business trends of the insurance company in real time. For example, capital flow and investment composition, product underwriting and compensation data, major personnel and management operations, etc. do not need to wait for insurance companies to declare afterwards, so that possible business risks and illegal operations can be discovered in a timely manner.
On this basis, regulatory agencies can also use big data technology to analyze and predict the national insurance market, timely discover and prevent possible systemic risks, or discover potential protection needs and trends, thereby Provide better protection for the people.
At present, the first domestic blockchain startup company Abbots Financial Technology Company launched the first project Tongxin Mutual Assistance, which uses network mutual assistance as the entry point to continuously promote the application and development of blockchain technology in China. Technically, through blockchain and big data technology, we can eliminate the shortcomings of the traditional network mutual aid model and establish an open and transparent new network mutual aid platform.
5. What risks does the blockchain face that need to be addressed
Although the blockchain industry is experiencing rapid development driven by the influx of capital and talent, as an emerging industry , its frequent warnings about security vulnerabilities have triggered concerns about blockchain risks.
Yu Kequn, director of the National Information Technology Security Research Center, pointed out that the emergence of blockchain has brought a lot of expectations to people regarding issues such as privacy exposure, data leakage, information tampering, and online fraud. However, there are still many challenges in the security of blockchain.
Li Bin, assistant director of the China Information Security Evaluation Center, analyzed that the current blockchain is divided into three types: public chain, private chain, and alliance chain. No matter which type has different advantages in algorithms and protocols, There are security challenges in many aspects such as , usage, time limits and systems. What is particularly critical is that the current blockchain is still facing the 51% attack problem, that is, a node has the ability to successfully tamper and forge blockchain data by mastering more than 51% of the calculation examples in the entire network.
It is worth noting that in addition to the risk of external malicious attacks, the blockchain also faces the threat of its endogenous risks. Yu Kequn reminded that how to build a complete secure application system around the equipment, data, applications, encryption, authentication and permissions of the entire blockchain application system is an important issue that all parties must face.
Wu Jiazhi also analyzed that as an emerging industry, practitioners in the blockchain industry lack security awareness, resulting in the current blockchain-related software and hardware having a low safety factor and a large number of security vulnerabilities. In addition, the entire blockchain ecosystem There are many links. In comparison, the relevant security practitioners are dispersed and it is difficult to form a joint force to solve the problem. Meeting the above challenges requires systematic solutions.
Content source: China News Service
6. Blockchain is the answer to the problem of risk control system
Finance has three elements: security, profitability, liquidity
What these three have in common is the conflict between the present and the future in space and time. Conflict is an unstable factor that must be restrained through the design of power, and the restraint of this power design is control. This control process corresponds to the principle of equivalent exchange, or conflict defensive design. Original link
Let’s take a look at the principles of this defensive design:
First, we need to do an evaluation. Let’s first look at the definition of risk assessment:
Before or after a risk event occurs (but it has not yet ended), the impact and possibility of losses caused by the event to people’s lives, lives, property, etc. quantitative assessment work.
In other words, risk assessment is to quantitatively evaluate the possible degree of impact or loss caused by an event or thing. From the perspective of information security, risk assessment is an assessment of the threats, weaknesses, and impacts faced by information assets (i.e., the set of information about an event or thing), as well as the possibility of risks caused by the combined effect of the three. sexual assessment. As the basis of risk management, risk assessment is an important way for organizations to determine information security needs and is part of the planning process of the organization's information security management system. We need to realize that people have motivations, while machines and programs only have instructions. This is an important difference between humans and machines.
The following are the problems faced in the process management of defensive design of risk control:
What is the object (or asset) to be protected? What is its direct and indirect value?
What potential threats do assets face? What causes the threat? How likely is it that the threat will occur?
What weaknesses exist in the assets that could be exploited by threats? Ease of useso what?
Once a threat event occurs, what kind of losses will the organization suffer or what negative impacts will it face?
What security measures should the organization take to minimize the losses caused by risks? ?
The process of solving the above problems is the process of risk assessment.
When conducting risk assessment, there are several correspondences that must be considered:
Each asset may face multiple threats
Threat sources (threat agents) There may be more than one
Each threat may exploit one or more system weaknesses
The risk control system is a system about motivation and process management. Motivation and process management are the basic logic of the risk control system. Have you noticed that these are all human designs. Human design is based on knowledge structure and empirical judgment. Based on the principles of cases and statistics, there is due diligence.
Yet inquiry is rooted in the uncertainty of space and time; inquiry is motivated by the desire to bring the future and the present into agreement. Please note that this is still a human design. Just as all investigation reports are written by people, the information and data that people refer to are also written by people. So, here comes the key point, can the programs set by humans be replaced by technology? This question may have been unanswerable in the past, but now it has an answer.
The answer may be blockchain.
7. Re-understanding the blockchain: Enlightenments brought by more than 1,550 application cases
Author: Ran Wei
(This article is excerpted from the "2021 Global Blockchain Application Market Report")
When we talk about blockchain, anyone who knows something about blockchain can explain more or more about related topics. Express some of your own opinions as little as possible. For example: from the perspective of technical system, blockchain is a new application of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm; from the perspective of functional attributes, blockchain is decentralized, non-tamperable, and full-process. Features such as leaving traces, traceability, collective maintenance, openness and transparency.
Looking back at the history of blockchain, there is no way around Bitcoin. On January 3, 2009, the Bitcoin genesis block with serial number 0 was born. A few days later, on January 9, 2009, Bitcoin block number 1 was born. When two blocks are connectedAt that time, the blockchain was “emerged”.
The inventor of Bitcoin, whose pseudonym is "Satoshi Nakamoto", may find it difficult to imagine: In the past 12 years, with Bitcoin as the center, a huge "cryptocurrency family" has spread all over the world. The financial market set off a "big wave" that continues to this day. During this period, innovation and risks related to cryptocurrency are intertwined, progress and bubbles coexist, and pursuit and criticism coexist, and it drives government departments of various countries to continuously improve the monetary and financial systems, social governance and supervision systems.
At the same time, the blockchain that accompanies Bitcoin is also evolving rapidly, and has long gone beyond the scope of "Bitcoin's underlying technology" and has been applied to every corner of social and economic development.
So, what mechanism does blockchain work through? What are its advantages compared to traditional technologies and models? What is its application effect? In the "2021 Global Blockchain Application Market Report" jointly released by Capital Lab and Yuanwang Think Tank, we tried to provide a certain basis for the above issues through research on more than 1,550 application cases around the world in 2020 and the first quarter of 2021. Empirical answers. At the same time, based on the study of these cases, we can establish a new understanding of blockchain: blockchain is trust, blockchain is sharing, blockchain is transaction, blockchain is substitution, and blockchain is efficiency.
In the Bitcoin creation paper "Bitcoin: A Peer-to-Peer Electronic Currency System", "Satoshi Nakamoto" repeatedly emphasized that Bitcoin has the characteristics of not relying on a "trusted third party". That is the characteristic of “decentralization”.
On the other hand, the underlying technology of Bitcoin, the blockchain, is precisely designed for "trust." In other words, reshaping "trust" in the digital age is the most basic function of the blockchain, but this trust has been transformed from trust between people and legal entities to trust between machines and machines. Trust between blocks and between nodes. Interestingly, the subsequent “smart contract” function has further strengthened this trust through its integration with the blockchain.
Identity coding and authentication are the first steps to achieve the above-mentioned trust mechanism, and the distributed identity (Decentralized Identity, DID) system is the core of it. With DID applications, everyone from individuals to organizations to IoT devices, from physical items to virtual products, can be given digital "identities" and achieve trusted interactions. It is precisely because of this that blockchain-based certificate storage, empowerment, verification, circulation, and transactions can be realized, and only then can blockchain be implemented in various industries.
Application cases from around the world show that new trust mechanisms provide new rules and motivation for social and economic operations:
l China is comprehensively promoting blockchain electronic certificates ofApplications allow enterprises and residents to enjoy more efficient and convenient government services;
l "One fish, one code", "One fruit, one code", "One tea, one code" and other applications are promoting global agricultural products Anti-counterfeiting traceability and upgrading of food safety systems;
l Through the combination of blockchain, big data, and artificial intelligence, the credit "portrait" of an enterprise is more accurate and can be obtained faster and more cost-effectively. Lower financing services;
l Charitable institutions have put charity donations on the chain to form a more transparent and standardized charity tracking and management system;
l Relevant cities in China have launched a blockchain-based gas cylinder product traceability management system, and the credibility of the source of gas cylinder file information and the level of gas cylinder safety management have been greatly improved;
l Germany is developing its distributed energy assets Establish a digital registration system based on identity authentication to promote the development and trading of renewable energy and cope with the arrival of the digital energy era...
Among the three types of blockchain (public chain, alliance chain, private chain), alliance chain has been the most widely used. In addition to considerations of technical performance, operational efficiency, operability, expected results, etc., this is mainly because all parties in the alliance already have a certain foundation of trust. This also shows from another perspective that in blockchain applications beyond cryptocurrencies such as Bitcoin, "multi-centering" rather than complete "decentralization" is a more realistic option.
In addition, it is undeniable that unlike the proof-of-work mechanism that Bitcoin “mining” relies on, the blockchain cannot completely ensure the integrity of the on-chain data from the source in the actual application process. Authenticity. In other words, a certain alliance member or node may provide false data intentionally or unintentionally. However, with the help of the blockchain's non-tampering, traceability, multi-party consensus and other characteristics, the alliance can identify counterfeiting behavior and impose corresponding punishments, such as "kicking" the counterfeiting members from the node. Therefore, in a sense, blockchain-based trust largely establishes alliance members’ awe for the authenticity of data and deters data fraud.
If "trust" is the foundation of blockchain applications, data sharing is the core of blockchain applications. Without data sharing, there will be no cooperation, and the practical application of blockchain will be impossible.
l The State Administration of Foreign Exchange's "Cross-border Financial Blockchain Service Platform" pilot has been fully launched, promoting foreign trade exports through information exchange between foreign exchange bureaus, taxation, banks and enterprise-related market entities. Business development;
l The "Insurance/Claims Alliance Chain" jointly established by 11 insurance companies in Taiwan has been put into operation, and each company has achieved "single application and common documents" on this platform;
l Contour、TradeBlockchain platforms such as Lens are reshaping the global supply chain and providing impetus for the digital transformation of international trade through data collaboration among enterprises, financial institutions, shipping companies, terminals, customs and other institutions...
l In China, through data collaboration, various government departments have realized "one data, one source, one source for multiple uses, one network, and full network operation";
l Through The "Judicial Chain" platform enables all types of electronic evidence to be seamlessly connected with judicial institutions such as notarization, arbitration, judicial appraisal, and courts, which improves the efficiency of the judicial system while reducing costs;
l Targeting grassroots nationwide The court's "cross-domain collaboration mechanism for trial auxiliary matters" can realize "cross-domain service and cross-domain evidence collection" between courts in different regions, effectively improving the efficiency of trial auxiliary matters and trial quality and efficiency, and reducing judicial operation costs... ….
l China's "Guangdong-Hong Kong-Macao Greater Bay Area Combination Port" project was officially launched, which can support the interconnection and interoperability of trade parties among the five major customs jurisdictions of the Greater Bay Area and become the first connected port in the Greater Bay Area , customs, logistics, enterprise, finance and other trade processes, interconnected and shared blockchain network;
l Japan's KDDI Telecom, Hitachi, Kansai Electric Power, Sekisui Construction and other large enterprises have established blocks Chain Alliance NEXCHAIN to form a cross-industry real estate information sharing and management model and promote cross-industry innovation;
l The French Renault Group completed the test of its blockchain project "XCEED" for zero Sharing compliance information between component suppliers and automakers and simplifying compliance certification….
Although the above application cases in finance, government affairs and various industries are only a few typical cases, they are enough to illustrate that: on the one hand, data sharing is an inherent requirement of blockchain applications. In terms of specific implementation, everything must start from breaking "data islands" and "information asymmetry"; on the other hand, the application practice of blockchain has in turn promoted cross-level, cross-department, cross-industry, cross-region, and cross- Data sharing and unprecedented cooperation across national borders.
It can also be seen from the above cases that based on the transparency, security, trustworthiness and other characteristics of the blockchain, data sharing allows cooperation that originally seemed impossible to be achieved, and more Open innovation results; data sharing can effectively improve the operating efficiency of business systems, financial systems and social governance systems; various organizations promote their own organizational changes and process changes while sharing and cooperating with external institutions.
Based on trust and sharing, "transaction" is the most intuitive and deepest manifestation of the value of blockchain applications. Currently, blockchain is opening a new chapter in the transformation of transaction models in various industries around the world.
From the perspective of functional architecture, blockchain-based transactions are by no means just transaction links.It is a transformation that integrates the unique functions of the blockchain and is an integrated integration of blockchain applications such as anti-counterfeiting traceability, supply and demand docking, warehousing logistics, payment/settlement, supply chain financing, insurance, and network security.
From the perspective of application form, blockchain-based transactions transcend the traditional concept of product or service transactions and represent the realization of the value of a wider range of data in circulation.
From the perspective of application scenarios, transactions based on blockchain involve the upgrading of the physical industry, the digital advancement of the financial industry, and the innovative application of the "token economy".
In the physical industry, take the application of agricultural blockchain as an example: on the one hand, supply chain traceability based on blockchain has become an important barrier to food safety; but on the other hand, for growers or For farmers, the supply chain traceability function is far from enough. How to help them expand the sales of agricultural products and obtain more income as much as possible is the "hard truth" for blockchain technology to continue to promote agricultural development. In other industries, the same applies.
Against the above background, new trading platforms in the global physical industry continue to emerge:
l The Indian government uses blockchain platforms to help farmers in remote areas sell agricultural products to reduce the While eliminating intermediate fees, obtain higher income;
l The Swiss company Cerealia builds a blockchain-based agricultural product trading and financing platform to promote the export of agricultural products in emerging market countries around the world;
l The world's largest independent refined sugar producer, Al Khaleej Sugar Company of the United Arab Emirates, launched DigitalSugar.io, a blockchain-based sugar product trading platform, to realize spot-based international raw sugar trading;
l Ganzhou, Jiangxi Province, has launched an international timber electronic trading platform based on blockchain, which will manage the entire timber transaction process on the chain, and will provide the timber market with full industry chain services such as cloud warehouse supervision, logistics, finance, and insurance;
< br /> l Shandong Province launched the Shandong Internet Traditional Chinese Medicine Trading Platform, which will use blockchain and other technologies to achieve online integrated services of quality control, trading, payment, settlement and supervision;
l Suzhou Phase Weitang Town in the urban area has released a blockchain-based pearl online trading platform, which will store the core parameters and test reports of pearls on the chain, and will also add functions such as supply chain management, trade finance, smart contracts, payment settlement, and incentive mechanisms;
l Honeywell launched GoDirect Trade, an online trading platform for new and second-hand aircraft parts, providing a valuable reference for large manufacturers on how to apply blockchain to parts trading and circulation... ….
In the financial industry, blockchain is developing from securities trading, asset securitization, trade financing, cross-border settlementPromote the digital advancement of financial transactions in terms of calculation and calculation:
l The Australian National Stock Exchange launched ClearPay, a digital securities trading platform based on distributed ledger technology, which can provide multi-currency and real-time DVP settlement on the same day. And will replace the original exchange settlement system;
l The Swiss company Finka launched a related securitization token investment platform based on livestock from Bolivia’s organic pastures to promote the development of the local livestock industry;< br />
l The American company Securitize has established a Japanese real estate investment platform based on digital securities, aiming to revitalize idle real estate in rural Japan and enhance the vitality of the rural economy;
l Postal Savings Bank of China Completed the first cross-blockchain platform forfaiting transaction with China Construction Bank, and Hua Xia Bank Kunming Branch implemented forfaiting resale business in the secondary market for the first time;
l Nanjing Iron and Steel separately cooperated with Australia's Rio Tinto and Brazil's Vale completed an iron ore transaction based on blockchain;
l Baosteel Co., Ltd. and Australia's Rio Tinto completed the first blockchain-based RMB cross-border settlement transaction...
Of course, while blockchain promotes the advancement of financial transaction business, dark sides such as hype, scams, money laundering, and cyber attacks related to blockchain and cryptocurrency continue to follow. How to continue to promote financial innovation while also carrying out efficient risk prevention and control and effectively cracking down on illegal crimes is an important issue that requires long-term response. From a global perspective, China has responded with clear attitudes, strict measures, and effective measures in this regard.
The transaction changes realized by the blockchain in the real industry and financial industry are only the initial stage of the blockchain changing the traditional transaction method. The "Token Economy" is the blockchain "transaction" A higher level of functionality.
Under the framework of the "token economy", from electronic certificates to skill certificates, from credit records to public welfare activity participation records, from social media tracks to carbon emission reduction actions, when various data become When an encrypted digital proof of rights is circulated and exchangeable, it is given the function of "token".
Regardless of the investment/speculation craze of "Non-Fungible Token (NFT)", we can already see many early applications of "token economy" around the world:
l The HotCity project supported by the Austrian government uses a crowdsourcing model combined with blockchain and gamification tokens to encourage residents to submit heating waste heat hotspots to meet urban heating needs more efficiently;< br />
l Ford provides commercial and municipal fleets with hybrid vehiclesEstablish a "green mile" to help improve urban air quality;
l Weibin District, Xinxiang City, Henan Province, in its blockchain industrial park project, issues tokens based on a merchant and enterprise points system to establish a new Commercial service platform;
l Chengdu released a blockchain-based community governance product "Liandong Community". Residents can obtain "Time Bank" points from the platform through volunteer services and other activities, and redeem them Benefits and discounts provided by community merchants;
l The Electric Vehicle Charging Network Working Group (EVGI) of the global non-profit organization "Mobile Open Blockchain Initiative" launches global standards for decentralized car charging technology The system covers the Tokenized Carbon Credit (TCC) scenario;
l The blockchain reward platform MiL.k cooperates with Korean retailers to provide blockchain-based points management services for its members. Members can convert existing points into local MLK tokens through the MiL.k platform, or exchange them into other third-party points...
As can be seen from the above cases and more, the "token economy" has several distinctive features:
The "token economy" gives assets to a wider range of data Attributes and tradable attributes, and through cross-domain and cross-platform mutual trust and circulation, can improve the operating efficiency of the entire social and economic system;
"Token economy" is a new value creation and The realization process does not necessarily use currency directly as the medium of exchange, but is more reflected in the exchange, mutual benefit and reallocation of various elements and resources;
"Token economy" is often combined with incentive mechanisms. At the same time, through incentives for "good people and good deeds", "good companies" and "good institutions", the social value system and social credit system will be effectively reshaped.
Generally speaking, the "token economy" will spawn new production factors, reshape production relations, and greatly liberate social productivity; the "token economy" represents the direction of the "information Internet" The evolution of the "Internet of Value" indicates the most exciting future of the digital economy; the "token economy" based on the blockchain has begun to take shape and has begun to bring changes to economic operations, social governance, and everyone's lifestyle. Continuously visible change. All types of institutions and individuals should be mentally and physically prepared for this change.
Like other new technologies, in the process of application and popularization, blockchain continues to produce substitution effects in terms of platforms, media, models, methods, etc.: physical documents are replaced by electronic documents, and credit records are replaced by electronic documents. Tokens are replaced, manual review is replaced by data verification, and the city management platform is replaced by the "city brain"...
Such substitutions have become the norm:
l Argentina’s central bankBegins to carry out proof-of-concept for a new blockchain clearing system, which may replace the existing clearing system;
l Korea Minting and Security Printing Corporation (KOMSCO) expands blockchain digital gift certificate business, to replace paper gift certificates and achieve record revenue growth while the issuance of banknotes and coins has dropped significantly;
l Courts across China have begun to use blockchain electronic seals in the enforcement of real estate seizures Replace traditional paper seals;
l The Shanghai court system is exploring the use of digital trial records to replace manual trial transcripts through the adoption of new technologies such as artificial intelligence and blockchain;
l Japanese company SUSMED launched a "Clinical Data Monitoring System Demonstration Using Blockchain Technology" pilot, indicating that the necessary monitoring processes in clinical trials of drugs or medical devices can be replaced by blockchain systems;
l Alipay and Wukong Car Rental have cooperated to launch a "face-swiping" car rental service. Through blockchain technology and a credit-free model, tourists can rent a car by simply "swiping their face" and return the vehicle through mobile operations;
< br /> l Under the COVID-19 epidemic, local governments in China have intensively launched "non-face-to-face, no-contact, zero errands" government services combined with blockchain technology, replacing traditional offline service methods and providing remote recruitment services during the epidemic. This provides a strong guarantee for the smooth progress of bidding, "cloud" customs clearance, financial support, and resumption of work and production...
In addition, we can also see that through the use of blockchain technology, various enterprise-level services are also realizing substitution and evolution: from paper contracts to electronic contracts, to program-based, Blockchain contracts that can automatically execute smart contracts. Blockchain is pushing contract signing into the era of "chain signing"; from offline human resources companies to online human resources platforms to the blockchain-based human resources market , global human resources services have experienced continuous changes from the 1.0 era to the 2.0 era, and then to the 3.0 era.
Generally speaking, when the blockchain "invades" various industries, it will "mercilessly" delete all unnecessary links and processes, all unnecessary manual operations, and accelerate the The era of paperless, unmanned and automated is coming.
In the process of our analysis of more than 1,550 blockchain application cases around the world, words like "improve", "accelerate", "shorten", "lower", "reduce", "save", " Words such as "save" appear frequently in front of our eyes. These words show that the improvement of efficiency is the common pursuit of all parties involved in blockchain applications and is also the most direct result of the substitution effect of blockchain.
Numerous application practices are contributing to this:
l The Kenyan company Shamba Records hasFarmers provide blockchain traceability, transaction and financing services, which currently cover more than 6,000 small farmers and help them increase their income by at least 40%;
l Areas where companies such as NTT DATA and Mitsubishi have invested The blockchain trade platform TradeWaltz has completed a trial run, and the results show that the platform can reduce the workload of traditional trade processes by up to 50%;
l Walmart Canada has integrated it with the DL Freight blockchain platform through the application of it. Invoice disputes between carriers have been significantly reduced by 97%;
l The State Grid Corporation of China’s power transaction certificate traceability inquiry platform has been put into operation, automating the entire authenticity review process for registered users, saving 99 % of the trusted manual review time;
l COSCO Shipping Lines and Shandong Port Group Qingdao Port have cooperated to launch a blockchain paperless import delivery model, which can save customers nearly 10% of the time for picking up goods on average per container. 24 hours;
l Zhejiang Taizhou uses the "Internet of Things + Blockchain" recycling system to solve the problem of marine pollution control. Compared with traditional processing methods, this recycling system can save 94% of labor costs and 84% operating costs….
In summary, through the joint action of trust mechanism, sharing mechanism and transaction mechanism, blockchain has formed an obvious substitution effect, improved the operational efficiency of finance, government affairs and various industries, and will Continue to create systemic change. This change is reshaping the relationship between people and machines, people and society, and people and the environment, and clearly points to three ultimate goals: efficiency, well-being, and environmental protection.
8. What applications can blockchain technology have in the insurance industry?
Blockchain technology also has incomparable advantages in the insurance industry. From the perspective of data management, the application of blockchain technology by insurance companies can effectively improve risk management and control capabilities, including the risk supervision of insurance companies and the risk management of policyholders.
The application of blockchain technology in the insurance industry can strengthen the internal risk supervision of insurance companies. Blockchain technology can record the daily operating processes of insurance companies on nodes, and can achieve in-process control over the company's capital flow, investment status, compensation amounts and other businesses, and improve the company's risk management and control capabilities.
In addition, blockchain technology is safe, reliable, and cannot be tampered with at will, ensuring that the information obtained by the policy holder is true and effective, thereby enhancing the policy holder's risk management capabilities.
9. Blockchain security rules
Blockchain security rules, the first rule:
Storage is everything
A person’s property ownership and security property, fundamentally depends on how the property is stored and the right to define it. In the Internet world, massive user data is stored on the platform’s servers. Therefore, the ownership of this data is still a mystery, just like the ownership of your and my social IDs.It is difficult to say who it is, but user data assets have pushed up the market value of the platform, and as users, they have not enjoyed the market value dividend. The blockchain world has led to changes in storage media and methods, allowing the ownership of assets to be delivered to individuals.
Extended information
The risks faced by the blockchain system are not only attacks from external entities, but also attacks from internal participants, as well as component failures, such as software failures. Therefore, before implementation, it is necessary to develop a risk model and identify special security requirements to ensure an accurate grasp of risks and response plans.
1. Security features unique to blockchain technology
● (1) Security of written data
Under the action of the consensus mechanism, only when most nodes (or multiple key nodes) in the entire network When everyone agrees that the record is correct at the same time, the authenticity of the record can be recognized by the entire network, and the record data is allowed to be written into the block.
● (2) Security of reading data
Blockchain does not have inherent security restrictions on information reading, but it can control information reading to a certain extent, such as encrypting certain elements on the blockchain, The key is then handed over to the relevant participants. At the same time, the complex consensus protocol ensures that everyone in the system sees the same ledger, which is an important means to prevent double payments.
● (3) Distributed Denial of Service (DDOS)
Attack Resistance Blockchain’s distributed architecture gives it point-to-point, multi-redundant characteristics, and there is no single point of failure, so it is more resistant to denial of service attacks. The method is much more flexible than a centralized system. Even if one node fails, other nodes are not affected, and users connected to the failed node cannot connect to the system unless there is a mechanism to support them to connect to other nodes.
2. Security challenges and response strategies faced by blockchain technology
● (1) The network is open and undefended
For public chain networks, all data is transmitted on the public network, and all nodes joining the network You can connect to other nodes and accept connections from other nodes without any obstacles. There is no authentication or other protection at the network layer. The response to this type of risk is to require greater privacy and carefully control network connections. For industries with higher security, such as the financial industry, it is advisable to use dedicated lines to access the blockchain network, authenticate the accessed connections, exclude unauthorized node access to avoid data leakage, and pass the protocol stack level firewall Security protection to prevent network attacks.
● (2) Privacy
Transaction data on the public chain are visible to the entire network, and the public can track these transactions. Anyone can draw conclusions about something by observing the blockchain, which is not conducive to the legal privacy of individuals or institutions. Protect. The response strategies for this type of risk are:
First, the certification agency acts as an agent for users to conduct transactions on the blockchain, and user information and personal behaviors do not enter the blockchain.
Second, instead of using a network-wide broadcast method, the transmission of transaction data is limited to nodes that are conducting relevant transactions.
Third, use permission control for access to user dataOnly visitors with the key can decrypt and access the data.
Fourth, use privacy protection algorithms such as "zero-knowledge proof" to avoid privacy exposure.
● (3) Computing power
Blockchain solutions using proof-of-work are faced with the problem of 51% computing power attack. With the gradual concentration of computing power, it is objectively possible that organizations that control more than 50% of the computing power will emerge. Without improvement, it cannot be ruled out that it will gradually evolve into the law of the jungle where the jungle prevails. The response strategy for this type of risk is to use a combination of algorithms and realistic constraints, such as joint management and control using asset mortgages, legal and regulatory means, etc.
- 上一篇： 深圳市工信部对区块链的规定,工信部区块链专业委员会
- 下一篇： 区块链与信托租赁,区块链与信托的关系
