2023, Moriggl, Pascal, Asprion, Petra, Schneider, Bettina, Dornberger, Rolf

Daten gehören heute zu den zentralen Elementen digitaler Geschäftsmodelle, daher ist ein Bewusstsein für angemessene Maßnahmen zum Schutz von Daten und insbesondere personenbezogener Daten essenziell. Die Datenschutzgrundverordnung der Europäischen Union (EU) ist eine Folge der Diskussionen zum Schutz der Privatsphäre im digitalen Raum. Die Verordnung zwingt Organisationen dazu, sicherzustellen, dass ihre Prozesse zur Verarbeitung von Daten mit den relevanten Regularien übereinstimmen. Seit einigen Jahren wird die Blockchain-Technologie zunehmend beliebter, um den Austausch von Daten zu unterstützen. Die neue Technologie macht es möglich, auf eine zentrale Datenhaltung zu verzichten. Das Ziel dieser Forschung war es, Entscheidungsträgerinnen und Entscheidungsträgern bei der Auswahl einer geeigneten Blockchain-Konfiguration zu helfen, die den gesetzlichen Datenschutzanforderungen gerecht wird. Mit Hilfe der „Design-Science“-Methodik haben wir einen sogenannten morphologischen Kasten, sowie ein dazugehöriges Raster entwickelt, die als „Bewertungswerkzeuge“ für die Blockchain-Konfiguration „Hyperledger Sawtooth“ verwendet werden können. Die Forschungsergebnisse können mit wenigen Anpassungen verallgemeinert werden, um auch andere Blockchain-Konfigurationen zu bewerten.

2020, Moriggl, Pascal, Asprion, Petra, Schneider, Bettina, Dornberger, Rolf

2019, Asprion, Petra, Hübner, Philipp, Moriggl, Pascal, Bui, Tung X.

Interoperability and traceability of digital supply chains are becoming a major competitive factor. Businesses operating in supply chains need to share interoperable information and systematically track product and service deliveries. This research investigates a novel approach to model digital supply chains and operationalizes this through a "Distributed Ledger System" in combination with "Smart Contracts". Based on design science, relevance and rigor for a novel approach are derived. As resulting ‘artifacts’, exemplary supply chains using colored Petri-nets are modeled as a structured and automatable instance for the sketched ‘Token-flow Supply Chains’. For the operation of our visionary scenario, a baseline concept with an associated architecture is drafted. We argue that the outlined approach and related artifacts are predestined to achieve a new quality of performance and innovation including bridging the current challenges for digital supply chains.

2023, Moriggl, Pascal, Asprion, Petra, Schneider, Bettina, Scherb, Christopher, Bui, Tung X.

Components built into space vehicles and equipment (space products) must meet different regulatory requirements; in detail, each component must be certified and sustainably traceable at all times. Space engineers have expressed the need for an interoperable system to collect, manage and route certifications for components, parts and materials that go into space products. The lack of a unified approach in the European space industry is a challenge for companies involved in product development. This research proposes an open-source, secure, fast and distributed ledger technology (DLT) based solution that fits into any IT environment and is well adapted to the needs of manufacturing companies in the space sector. The results show that a blockchain-based solution based on ‘Hyperledger Fabric’ combined with the InterPlanetary File System is viable. The results can guide other researchers and practitioners to consider DLTs when changing their certification management paradigm with suppliers, customers and auditors.

2020, Asprion, Petra, Schneider, Bettina, Moriggl, Pascal, Grimberg, Frank, Dermol, Valerij

Lego Serious Play (LSP) is a methodology that helps people brainstorm and discuss complex ideas through storytelling and metaphors. LSP has been successfully applied as a mechanism for creative learning and team building. In this paper, we discuss using LSP to teach core topics of Cyber Security and Resilience (CS&R) in higher education. Initial results suggest that LSP has a positive impact on student learning, while also improving student engagement both, within the course and in their business environment. While the use of LSP discussed here focuses on its implementation in CS&R courses, this highly transferable methodology can be applied across the spectrum of disciplines and for multiple purposes. In addition, it can also be used to facilitate cyber security awareness or risk assessment workshops in various environments.

2019, Moriggl, Pascal

The outlined research reviews recent advancements in distributed ledger technology that promises to be an improvement for current supply chain setups. On one hand, requirements demanded by end consumers ask for increased transparency about product data like origin, quality certification or sustainability reassurance. On the other hand, global supply chains have become increasingly difficult to manage due to the increased rate of change and overall complexity. A potential way to improve current supply chains could be to ensure provenance relying on distributed ledger technology, and support data sharing among stakeholders in a network that helps satisfying transparency demands from end consumers and network partners. Supply chain participants need to be able to trust the system and rely on standards, frameworks, and techniques that guide their efforts towards achieving the requirements imposed by the end consumers. One aspect is the ability to mutually share data about a product and provide a single point of truth. Based on industry expert interviews, a significant resistance to implement a solution based on existing technology was so far the fear of having to rely on a centralized data broker, which imposed questions about monopoly laws and data control. With the upcoming of DLT, a new technology became available that might offer to defuse exactly those threats and even improve other supply chain challenges (automation, interoperability, governance). Therefore, this research aims at exploring the technology further by following design science research principles that produce a prototype to be applied to real and relevant business problems.

2022, Schneider, Bettina, Ballesteros, Ruben, Moriggl, Pascal, Asprion, Petra, Bork, Dominik, Barat, Souvik, Asprion, Petra, Marcelletti, Alessandro, Morichetta, Andrea, Schneider, Bettina, Kulkarni, Vinay, Breu, Ruth, Zech, Philipp

A decentralized autonomous organization (DAO) is an emerging entity facilitated through blockchain technology. It operates under the principle of a decentralized governance structure void of hierarchical leadership, and decisions are made based on community consensus. As DAO and its mechanisms are still in an early stage, its potential evolution and future influence on enterprises remain unclear. This work elaborates on this emerging type of organization through a literature review and case studies of DAOs to demonstrate the current state of the art. The findings presented include a brief discussion of the technology that facilitates these organizations. Additionally, advancements and the common characteristics of existing DAOs are presented. Examining current and defunct DAOs revealed the challenges these organizations should address to reach their full potential in future application areas. Finally, it is concluded which organizations and industries could most likely benefit from the DAO concept in future.

2020, Moriggl, Pascal, Asprion, Petra, Kramer, Fabienne, Asprion, Petra, Bāliņa, Signe, Forbrig, Peter, Kampars, Jānis, Kirikova, Mārīte, Møller, Charles, Morichetta, Andrea, Roelens, Ben, Sandkuhl, Kurt

In the application of Electronic Health Records (EHR), cybersecurity is an essential control and needs to be strongly considered to fulfill data protection requirements. Regarding cybersecurity needs in Healthcare, blockchain-based technologies seem promising due to the inherent security features. Therefore, this study investigates in cybersecurity requirements for EHR and whether a blockchain-based solution can cover these. There are already approaches which apply Blockchain for EHR, but these do not explicitly consider cybersecurity, which forms the research gap. As a unit of analysis, 'Hyperledger Sawtooth' as an enterprise blockchain platform was used. The results showed that Hyperledger Sawtooth performs quite well regarding the coverage of cybersecurity-relevant requirements for EHR. However, there are 'natural' divergences concerning specific cybersecurity attributes between blockchain-based and non-blockchainbased systems. The outcome of this study is a generic assessment tool which can be used to assess the coverage of cybersecurity requirements for both blockchainbased and non-blockchain-based EHR systems.