Blockchain technology ensures immutability and transparency but inherently exposes stored data to all network participants, making it unsuitable for domains requiring confidentiality. This paper presents a privacy-preserving traceability framework that redefines transparency as selective verifiability. The proposed architecture integrates a Hyperledger-based blockchain with Private Data Collections (PDCs) and a novel hash-verifiable binding mechanism linking each physical item to its digital certificate without revealing sensitive identifiers. A deterministic binding identifier (SHA-256 composite hash) connects the NFC tag, digital certificate, and production batch, enabling public verification of authenticity while keeping private data on-chain. A one-shot certification logic further prevents certificate reuse or cloning by transforming authenticity into a single-use cryptographic event. The system has been fully implemented and tested within the licorice supply chain of Southern Italy, demonstrating practical feasibility and extensibility to other sectors such as healthcare and luxury goods.

SPECTRA: Selective Proof and Edge-Centric Traceability : A Privacy-Preserving Blockchain for Distributed and Confidential Verification

Pugliese, Silvia
Conceptualization
;
Felicetti, Carmelo
Conceptualization
;
Veltri, Pierangelo
Validation
;
Curcio, Stefano
Supervision
2026-01-01

Abstract

Blockchain technology ensures immutability and transparency but inherently exposes stored data to all network participants, making it unsuitable for domains requiring confidentiality. This paper presents a privacy-preserving traceability framework that redefines transparency as selective verifiability. The proposed architecture integrates a Hyperledger-based blockchain with Private Data Collections (PDCs) and a novel hash-verifiable binding mechanism linking each physical item to its digital certificate without revealing sensitive identifiers. A deterministic binding identifier (SHA-256 composite hash) connects the NFC tag, digital certificate, and production batch, enabling public verification of authenticity while keeping private data on-chain. A one-shot certification logic further prevents certificate reuse or cloning by transforming authenticity into a single-use cryptographic event. The system has been fully implemented and tested within the licorice supply chain of Southern Italy, demonstrating practical feasibility and extensibility to other sectors such as healthcare and luxury goods.
2026
Blockchain
Distributed trust
Edge computing
Pervasive systems
Privacy preservation
Supply chain traceability
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/20.500.11770/414740
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • ???jsp.display-item.citation.isi??? ND
social impact