Xage introduces Zero Trust remote access cloud solution for hard-to-secure environments

When a hacker broke into the computer systems of the Oldsmar Florida water supply last month, it sent up red flags across the operational tech world, whether that’s utilities or oil and gas pipelines. Xage, a security startup that has been building a solution to help protect these hard-to-secure operations, announced a Zero Trust remote access cloud solution today that could help prevent these kinds of attacks.

Duncan Greatwood, CEO at Xage, says flat out that if his company’s software was in place in Oldsmar, that hack wouldn’t have happened. Smaller operations like the one in Oldsmar tend to be one-person IT shops running older remote access software that’s vulnerable to hacking on a number of levels.

“It’s not difficult to compromise a virtual network computing (VNC) connection. It’s not difficult to compromise a stale account that’s been left on a jump box. What we started to do last year was deliver what we call a Zero Trust remote access solution to these kinds of customers,” Greatwood told me.

This involves controlling access device by device and person by person by determining who can do what based on them authenticating themselves and proving who they are. “It doesn’t rely on knowledge of a device password or a VPN zone password,” he explained.

The solution goes further with a secure traversal tunnel, which relies on a tamper proof certificate to prevent hackers from getting from the operations side of the house — whether that’s a utility grid, water supply or oil and gas pipeline — to the IT side where they could then begin to muck about with the operational technology.

Xage also uses a distributed ledger as a core part of its solution to help protect identity policies, logs and other key information across the platform. “Having a distributed ledger means that rather than an attacker having to compromise just a single node, it would have to compromise a majority of the nodes simultaneously, and that’s very difficult [if not impossible] to do,” he said.

What’s more, the ledgers operate independently across locations in a hierarchy with a global ledger that acts as the ultimate rules enforcer. That means even if a location goes offline, the rules will be enforced by the main system whenever it reconnects.

They introduced an on premise version of the Zero Trust remote access system last October, but with this kind of technology difficult to configure and maintain, some customers were looking for a managed solution like the one being introduced today. With the cloud solution, customers get a hosted solution accessible via a web browser with much faster deployment.

“What we’ve done with the cloud solution is made it really simple for people to adopt us by hosting the management software and the core Xage fabric nodes in this Xage cloud, and we’re really dramatically reducing that time to value for a remote access solution for IT,” Greatwood said.

You might be thinking that CISOs might not trust a cloud solution for these sensitive kinds of environments, and he admits that there is some caution in this market, even though they understand the benefits of moving to the cloud. To help ease these concerns, they can do a PoC in the cloud and there is a transfer tool to move back on prem easily if they are not comfortable with the cloud approach. So far he says that no early customers have chosen to do that, but the option is there.

Xage was founded in 2017 and has raised $16 million so far, according to Crunchbase data.


By Ron Miller

Tangle EE project joins Eclipse Foundation to bring distributed ledger apps to enterprise

As the number of IoT devices proliferate, and machines conduct transactions with machines without humans involved, it becomes increasingly necessary to have a permissionless system that facilitates this kind of communication in a secure way.

Enter the IOTA Foundation, a Berlin-based open source distributed ledger technology (DLT) project, which has hooked up with the Eclipse Foundation to bring IOTA DLT to the enterprise via the Tangle EE project. For starters, this involves forming a working group.

The distributed ledger idea first emerged as a way to distribute digital currency on the blockchain. Since then, there have been multiple ideas, both open source and commercial, to bring this concept to the enterprise to provide a secure, immutable and frictionless way to share data.

One such open source project is IOTA, which saw an issue with DLT as it was being implemented by other entities. “IOTA is the first distributed ledger technology that went beyond blockchain with a completely new architecture that resolves the bottleneck problems of blockchain that has prevented real world adoption,” Dominik Schiener, co-founder of IOTA Foundation told TechCrunch.

The broad vision is to provide a way for machines and devices to communicate securely. “We provide a protocol layer that enables both humans and machines to bulk transact value without fees, as well as ensure data integrity, which is of course, increasingly important in the age of Internet of Things where hundreds of billions of devices are being connected over the next decades,” Schiener said.

Tangle EE is the part of the project aimed at enterprise users — EE stands for Enterprise Edition — that can take this technology and enable larger organizations to build applications on top of the project. For starters the foundation is working with the Eclipse Foundation to bring corporate entities on board who can help better define the requirements of the large business user.

Dell Technologies and STMicroelectronics are the first major companies joining the project, but the hope is that through discussion and dialogue, Tangle EE will begin to gain traction. “The main reason why we created Tangle EE was because of the discussions that we’ve had with corporations. They really understood that we need to have a working group around IOTA to discuss the application layer, to discuss what kind of solutions we can develop broadly across industries, but also really start having more serious discussions about the protocol,” Schiener said.

Much like the Linux Foundation, the Eclipse Foundation will provide a governance framework for the project. “The Eclipse Foundation will provide a vendor-neutral governance framework for open collaboration, with IOTA’s scalable, feeless and permissionless DLT as a base,” Mike Milinkovich, executive director of the Eclipse Foundation explained in a statement.

If it gains traction, more companies will join in the coming months and years, and begin building out Tangle EE, while developing applications based on the protocol.


By Ron Miller

Hyperledger Fabric, the open source distributed ledger, reaches release 2.0

The open source Hyperledger Foundation announced the release of Hyperledger Fabric 2.0 today, the first such project to reach a 2.0 release.

It’s a notable milestone. The blockchain as a business tool has certainly had a rocky road over the last few years, but there is still plenty to like about smart contracts that have automated compliance checks built in. Hyperledger Fabric 2.0 has lots of new features with that in mind.

The biggest updates involve forcing agreement among the parties before any new data can be added to the ledger, known as decentralized governance of the smart contracts. In practice, it means that the system will prevent any entity from writing to the ledger until there is consensus among the parties involved in the transaction, a basic blockchain tenet.

This is a requirement because the beauty and the curse of the distributed ledger is that it is an immutable record. Once you have written something in the ledger, it becomes very difficult to change it without the agreement of all those involved in the contract. You want to make sure you get it right before you commit something to the ledger.

Along those same lines, developers can build in automated checks along the way. As they say, this ensures the parties can “validate additional information before endorsing a transaction proposal.”

Brian Behlendorf, Executive Director at Hyperledger and a big advocate of open source distributed ledger technology, says this is a big milestone for the project and the organization as it looks to help organizations adopt distributed ledger technology.

“Fabric 2.0 is a new generation framework developed by and for the enterprises that are building distributed ledger capabilities into the core of their businesses. This new release reflects both the development and deployment experience of the Fabric community and confirms the arrival of the production era for enterprise blockchain,” Behlendorf said in a statement.

That remains to be seen. The rise of blockchain in business has moved at a slow pace, but this release shows that the open source community is still committed to building enterprise-grade distributed ledger technology. Today’s announcement is another step in that direction.


By Ron Miller

Xage now supports hierarchical blockchains for complex implementations

Xage is working with utilities, energy companies and manufacturers to secure their massive systems, and today it announced some significant updates to deal with the scale and complexity of these customers’ requirements including a new hierarchical blockchain.

Xage enables customers to set security policy, then enforce that policy on the blockchain. Company CEO Duncan Greatwood says as customers deploy his company’s solutions more widely, it has created a set of problems around scaling that they had to address inside the product including the use of blockchain.

As you have multiple sites involved in a system, there needed to be a way for these individual entities to operate whether they are connected to the main system or not. The answer was to provide each site with its own local blockchain, then have a global blockchain that acts as the ultimate enforcer of the rules once the systems reconnected.

“What we’ve done is by creating independent blockchains for each location, you can continue to write even if you are separated or the latency is too high for a global write. But when the reconnect happens with the global system, we replay the writes into the global blockchain,” Greatwood explained.

While classical blockchain doesn’t allow these kinds of separations, Xage felt it was necessary to deal with its particular kind of use case. When there is a separation a resynchronization happens where the global blockchain checks the local chains for any kinds of changes, and if they are not consistent with the global rules, it will overwrite those entries.

Greatwood says these changes can be malicious if someone managed to take over a node or they could be non-malicious such as a password change that wasn’t communicated to the global chain until it reconnected. Whatever the reason, the global blockchain has this power to fix the record when it’s required.

Another issue that has come up for Xage customers is the idea that majority rules on a blockchain, but that’s not always a good idea when you have multiple entities working together. As Greatwood explains, if one entity has 600 nodes and the other has 400, the larger entity can always enforce its rules on the smaller one. To fix that, they have created what they are calling a super majority.

“The supermajority allows us to impose impose rules such as, after you have the majority of 600 nodes, you also have to have the majority of the 400 nodes. Obviously, that will give you an overall majority. But the important point is that the company with 400 nodes is protected now because the write to the ledger account can’t happen unless a majority of the 400 node customer also agrees and participates in the write,” Greatwood explained.

Finally, the company also announced scaling improvements, which reduce computing requirements to run Xage by 10x, according to the company.


By Ron Miller

IBM-Maersk blockchain shipping consortium expands to include other major shipping companies

Last year IBM and Danish shipping conglomerate Maersk announced the limited availability of a blockchain-based shipping tool called TradeLens. Today, the two partners announced that a couple of other major shippers have come on board.

The partners announced that CMA CGM and MSC Mediterranean Shipping Company have joined TradeLens. When you include these companies together with Maersk, the TradeLens consortium now encompasses almost half of the world’s cargo container shipments, according to data supplied by IBM .

That’s important because shipping has traditionally been a paper-intensive and largely manual process. It’s still challenging to track where a container might be in the world and which government agency might be holding it up. When it comes to auditing, it can take weeks of intensive effort to gather the paperwork generated throughout a journey from factory or field to market. Suffice to say, cargo touches a lot of hands along the way.

It’s been clear for years that shipping could benefit from digitization, but to this point previous attempts like EDI have not been terribly successful. The hope is that by using blockchain to solve the problem, all the participants can easily follow the flow of shipments along the chain and trust that the immutable record has not been altered at any point.

As Marie Wieck, general manager for IBM Blockchain told TechCrunch at the time of last year’s announcement, the blockchain brings some key benefits to the shipping workflow.

“The blockchain provides a couple of obvious advantages over previous methods. For starters, [Wieck said] it’s safer because data is distributed, making it much more secure with digital encryption built in. The greatest advantage though is the visibility it provides. Every participant can check any aspect of the flow in real time, or an auditor or other authority can easily track the entire process from start to finish by clicking on a block in the blockchain instead of requesting data from each entity manually.”

The TradeLens partners certainly see the benefits of digitizing the process. “We believe that TradeLens, with its commitment to open standards and open governance, is a key platform to help usher in this digital transformation,” Rajesh Krishnamurthy, executive vice president for IT & Transformations at CMA CGM Group said in a statement.

Today’s announcement is a big step toward gaining more adoption for this approach. While there are many companies working on supply chain products on the blockchain, the more shipping companies and adjacent entities like customs agencies who join TradeLens, the more effective it’s going to be.


By Ron Miller

Linux Foundation launches Hyperledger Grid to provide framework for supply chain projects

The Linux Foundation’s Hyperledger Project has a singular focus on the blockchain, but this morning it announced a framework for building supply chain projects where it didn’t want blockchain stealing the show.

In fact, the foundation is careful to point out that this project is not specifically about the blockchain, so much as providing the building blocks for a broader view of solving supply chain digitization issues. As it describes in a blog post announcing the project, it is neither an application nor a blockchain project, per se. So what is it?

“Grid is an ecosystem of technologies, frameworks and libraries that work together, letting application developers make the choice as to which components are most appropriate for their industry or market model.”

Hyperledger doesn’t want to get locked down by jargon or preconceived notions of what these projects should look like. It wants to provide developers with a set of tools and libraries and let them loose to come up with ideas and build applications specific to their industry requirements.

Primary contributors to the project to this point have been Cargill, Intel and Bitwise IO.

Supply chain has been a major early use case for distributed ledger applications in the enterprise. In fact, earlier today we covered an announcement from Citizens Reserve, a startup building a Supply Chain as a Service on the blockchain. IBM has been working on several supply chain uses cases, including diamond tracking and food supply protection.

But the distributed ledger idea is so new both for supply chain and the enterprise in general that developers are still very much finding their way. By providing a flexible, open-source framework, The Linux Foundation is giving developers an open option and trying to provide a flexible foundation to build applications as this all shakes out.


By Ron Miller

Oracle delves deeper into blockchain with four new applications

Oracle is a traditional tech company that has been struggling to gain traction in the cloud, but it could see blockchain as a way to differentiate itself. At Oracle OpenWorld today it announced the Oracle Blockchain Applications Cloud, a series of four applications designed for transactions-based processing scenarios using Internet of Things as a data source.

“Customers struggle with how exactly to go from concepts like smart contracts, distributed ledger and cryptography to solving specific business problems,” Atul Mahamuni, VP of IoT and Blockchain at Oracle told TechCrunch.

The company actually introduced a more generalized blockchain as a service offering at OpenWorld last year, but this year they have decided to focus more on specific use cases, announcing four new applications. The blockchain comes into account because of its nature as an irrefutable and immutable record.

In cases where there is a dispute over the accuracy of a particular piece of data, the blockchain can provide incontrovertible proof. As for the Internet of Things, that provides data points you can use to provide that proof. Your sensor feeds the data and it (or some reference to it) gets added to the blockchain, leaving no room for doubt.

The four applications involve supply chain-transaction data including a track and trace capability to follow a product through its delivery from inception to market, proof of provenance for valuables like drugs, intelligent temperature tracking (what they are calling Intelligent Cold Chain) and warranty and usage tracking. Intelligent Cold chain ensures that a product that is supposed to be kept cold didn’t get exposed to higher than recommended temperatures, while warranty tracking ensures that a product was being used in a proscribed fashion and should be subject to warranty claims.

Each of these plays to the some of Oracle’s strengths as a company that builds databases and ERP software. It can draw on the information it tends to collect any way as part of the nature of its business processes and add it to a blockchain and other applications when it makes sense.

“So what we do is we we get events and insights from IoT systems, as well as from supply chain ERP data, and we get those insights and translation from all of this and then put them into the blockchain and then do the correlations and artificial intelligence machine learning algorithms on top of those transactions,” Mahamuni explained.

This year perhaps even more so than the last couple, Oracle is trying to differentiate itself from the rest of the cloud pack, as it tries to right its cloud business. By building applications on top of base technologies like blockchain, IoT and artificial intelligence, while taking advantage of their domain knowledge around databases and ERP, they are hoping to show customers they can offer something their cloud competitors can’t.


By Ron Miller

Walmart is betting on the blockchain to improve food safety

Walmart has been working with IBM on a food safety blockchain solution and today it announced it’s requiring that all suppliers of leafy green vegetable for Sam’s and Walmart upload their data to the blockchain by September 2019 .

Most supply chains are bogged down in manual processes. This makes it difficult and time consuming to track down an issue should one like the E. coli romaine lettuce problem from last spring rear its head. By placing a supply chain on the blockchain, it makes the process more traceable, transparent and fully digital. Each node on the blockchain could represent an entity that has handled the food on the way to the store, making it much easier and faster to see if one of the affected farms sold infected supply to a particular location with much greater precision.

Walmart has been working with IBM for over a year on using the blockchain to digitize the food supply chain process. In fact, supply chain is one of the premiere business use cases for blockchain (beyond digital currency). Walmart is using the IBM Food Trust Solution, specifically developed for this use case.

“We built the IBM Food Trust solution using IBM Blockchain Platform, which is a tool or capability that that IBM has built to help companies build, govern and run blockchain networks. It’s built using Hyperledger Fabric (the open source digital ledger technology) and it runs on IBM Cloud,” Bridget van Kralingen, IBM’s senior VP for Global Industries, Platforms and Blockchain explained.

Before moving the process to the blockchain, it typically took approximately 7 days to trace the source of food. With the blockchain, it’s been reduced to 2.2 seconds. That substantially reduces the likelihood  that infected food will reach the consumer.

Photo:  Shana Novak/Getty Images

One of the issues in a requiring the suppliers to put their information on the blockchain is understanding that there will be a range of approaches from paper to Excel spreadsheets to sophisticated ERP systems all uploading data to the blockchain. Walmart spokesperson Molly Blakeman says that this something they worked hard on with IBM to account for. Suppliers don’t have to be blockchain experts by any means. They simply have to know how to upload data to the blockchain application.

“IBM will offer an onboarding system that orients users with the service easily. Think about when you get a new iPhone – the instructions are easy to understand and you’re quickly up and running. That’s the aim here. Essentially, suppliers will need a smart device and internet to participate,” she said.

After working with it for a year, the company things it’s ready for broader implementation with the goal ultimately being making sure that the food that is sold at Walmart is safe for consumption, and if there is a problem, making auditing the supply chain a trivial activity.

“Our customers deserve a more transparent supply chain. We felt the one-step-up and one-step-back model of food traceability was outdated for the 21st century. This is a smart, technology-supported move that will greatly benefit our customers and transform the food system, benefitting all stakeholders,” Frank Yiannas, vice president of food safety for Walmart said in statement.

In addition to the blockchain requirement, the company is also requiring that suppliers adhere to one of the Global Food Safety Initiative (GFSI), which have been internationally recognized as food safety standards, according to the company.


By Ron Miller

Hacera creates directory to make blockchain projects more searchable

In the 1990s when the web was young, companies like Yahoo, created directories of web pages to help make them more discoverable. Hacera wants to bring that same idea to blockchain, and today it announced the launch of the Hacera Network Registry.

CEO Jonathan Levi says that blockchains being established today risk being isolated because people simply can’t find them. If you have a project like the IBM -Maersk supply chain blockchain announced last month, how does an interested party like a supplier or customs authority find it and ask to participate? Up until the creation of this registry, there was no easy way to search for projects.

Early participants include heavy hitters like Microsoft, Hitachi, Huawei, IBM, SAP and Oracle, who are linking to projects being created on their platforms. The registry supports projects based on major digital ledger communities including Hyperledger, Quorum, Cosmos, Ethereum and Corda. The Hacera Network Registry is built on Hyperledger Fabric, and the code is open source. (Levi was Risk Manager for Hyperledger Fabric 1.0.)

Hacera Network Registry page

While early sponsors of the project include IBM and Hyperledger Fabric, Levi stressed the network is open to all. Blockchain projects can create information pages, not unlike a personal LinkedIn page, and Hacera verifies the data before adding it to the registry. There are currently more than 20 permissioned networks in the registry, and Hacera is hoping this is just the beginning.

Jerry Cuomo, VP of blockchain technologies at IBM, says for blockchain to grow it will require a way to register, lookup, join and transact across a variety of blockchain solutions. “As the number of blockchain consortiums, networks and applications continues to grow we need a means to list them and make them known to the world, in order to unleash the power of blockchain,” Cuomo told TechCrunch. Hacera is solving that problem.

This is exactly the kind of underlying infrastructure that the blockchain requires to expand as a technology. Cuomo certainly recognizes this.”We realized from the start that you cannot do blockchain on your own; you need a vibrant community and ecosystem of like-minded innovators who share the vision of helping to transform the way companies conduct business in the global economy,” he said.

Hacera understands that every cloud vendor wants people using their blockchain service. Yet they also see that to move the technology forward, there need to be some standard ways of conducting business, and they want to provide that layer. Levi has a broader vision for the network beyond pure discoverability. He hopes eventually to provide the means to share data through the registry.


By Ron Miller

The blockchain begins finding its way in the enterprise

The blockchain is in the middle of a major hype cycle at the moment, and that makes it hard for many people to take it seriously, but if you look at the core digital ledger technology, there is tremendous potential to change the way we think about trust in business. Yet these are still extremely early days and there are a number of missing pieces that need to be in place for the blockchain to really take off in the enterprise.

Suffice it to say that it has caught the fancy of major enterprise vendors with the likes of SAP, IBM, Oracle, Microsoft and Amazon all looking at providing some level of Blockchain as a service for customers.

While the level of interest in blockchain remains fluid, a July 2017 survey of 400 large companies by UK firm Juniper Research found 6 in 10 respondents were “either actively considering, or are in the process of, deploying blockchain technology.”

In spite of the growing interest we have seen over the last 12-18 months, blockchain lacks some basic underlying system plumbing, the kind any platform needs to thrive in an enterprise setting. Granted, some companies and the open source community are recognizing this as an opportunity and trying to build it, but many challenges remain.

Obstacles to adoption

Even though the blockchain clearly has many possible use cases, some people still have trouble separating it from its digital currency roots, and Joshua McKenty, who helped develop Open Stack while working at NASA and now is head of Cloud Foundry at Pivotal, sees this as a real problem, one that could hold back the progress of blockchain as an enterprise technology.

He believes that right now bitcoin and blockchain are akin to Napster and peer to peer (P2P) technology in the late 90s. When Napster made it easy to share MP3 files illegally on a P2P network, McKenty believes, it set back business usage of P2P for a decade because of the bad connotations associated with the popular use case.

“You couldn’t talk about Napster [and P2P] and have it be a positive conversation. Bitcoin has done that to blockchain. It will take us time to recover what bitcoin has done to get to something that is really useful [with blockchain],” he said.

Photo by Spencer Platt/Newsmakers – Getty Images

A recent survey by Deloitte of over 1000 participants in 7 countries found that outside the US in particular this perception held true. “When asked if they believed that blockchain was just “a database for money” with little application outside of financial services, just 18 percent of US respondents agreed with that statement versus 61 percent of respondents in France and the United Kingdom,” the report stated.

Richie Etwaru, founder and CEO at Hu-manity and author of the book, Blockchain Trust Companies sees it as a matter of trust. Companies aren’t used to dealing from a position of trust. In fact, his book argues that the entire contract system exists because of a total lack of it.

“The hurdle [to widespread blockchain adoption in the enterprise] is that those who have traditionally designed or transformed business models in large enterprise settings have systematically and habitually treated trust and transparency as second, sometimes third level characteristics of a business model. The raw material needed are the willingness and executive level alignment and harmonization around the notion that trust and transparency are the next differentiators,” Etwaru explained.

The volatility of new technology

Blockchain was originally created as a system to track bitcoin (digital currency) ownership, and it’s still used extensively for that purpose, but a trusted and immutable record has great utility to track virtually anything of value and enforce a set of rules. We have seen companies like po.et trying to use it to enforce content ownership, Hu-manity, which wants to enforce data ownership, and the IBM TrustChain consortium to track the provenance of diamonds from mine to store.

Photo: LeoWolfert/Getty Images

Rob May, who is CEO at Talla and whose company helped launch a blockchain called BotChain to track the authenticity of bots, says finding good use cases could help ultimately determine the technology’s success or failure. “Blockchain has a bunch of different use cases, and they are usually either all lumped together or poorly understood separately,” May said.

He believes that in many instances today, companies don’t understand the advantages of blockchain, which he identifies as immutability, trust and tokenization, the latter of which can help finance blockchain initiatives (but which can also contribute to confusion with digital currency use cases).

“Right now, businesses are missing real blockchain opportunities and instead throwing blockchain in places where it doesn’t belong. For example, they are trying to use it for smart contracts, and that stuff isn’t ready. They also try to use it for cases that require a lot of speed, and again blockchains aren’t ready,” he said.

Finally, he says, if you don’t require immutability, trust and tokenization, you might want to consider a different approach other than blockchain.

Please identify yourself

Like any network, identity will be at the core of any blockchain network because it is imperative that you understand whom you are communicating with. Charles Francis, a senior analyst at Accenture says for now blockchains will remain private for the most part, but authentication will become increasingly important as we eventually have blockchain-to-blockchain communications.

Photo:  NicoElNino/Getty Images

“Initially blockchain-to-blockchain connections will be manually set up and you will manage your network in a private model and bad actors will be immediately obvious,” he explained. But he believes that we will require a system in place to ensure we are authentically who we say we are as we move beyond private networks.

Jerry Cuomo, IBM Fellow and VP of Blockchain says that there will come a time when there are multiple networks and we will need to set up systems for them to communicate. “There won’t be one blockchain network to rule them all. It’s a very safe bet. Once you make that statement, these systems need to work together,” he said. “All [the different pieces of networks] need identity and the identity better play across networks. My identity on one network better be the same on another network,” he explained.

For Etwaru it comes back to trust, and a trusted identity would be a natural extension of that. “Transformational blockchain use cases require a network of trading partners to start to operate in a more trusted and transparent way, not just one individual,” he said.

Moving toward adoption

All this said, there is still a steady march toward adoption in the enterprise. As Talla’s May says, there may be open questions, but that just represents a big opportunity for smart companies. “If you are interacting with a network instead of a single company, whose throat do you choke when something goes wrong? I think you will see many companies in the blockchain space do what Red Hat did for Linux. Enterprises need consulting help and better frameworks to think about how [blockchain] networks will work, since Ethereum isn’t a product per se in the traditional sense,” he said.

Gil Perez, SVP for products and innovation, as well as head of digital customer initiatives at SAP says he’s seeing companies with real projects in production. “It is beyond just wanting to do something. We’re doing large scale implementations and pilots. For example, we did one in the pharmaceutical industry with over a billion transactions,” he said.

In fact, SAP has a total of 65 companies working on various projects at different stages of progress at the moment. Perez says the next level of adoption will require a way to involve multiple parties, not just a single company, as with a supply chain example, which involves moving goods and paperwork across multiple countries involving many individuals.

Photo: allanswart

He also points out the importance of making sure there is good data because ultimately, if you have bad data in an immutable record, that is going to be a serious problem. That requires the companies involved to come together and agree to a common system to enter and agree upon each piece of information that moves through the system and that is a work in progress.

May sees blockchain technology transforming the way we do business in the future and providing a more standard way of interacting than today’s hodgepodge of vendor approaches.

“Now that blockchain is here, what if we could launch a standard and have shared marketplace by all apps in a space? So as a developer, you write your [application] add-on one time and it works with any [similar application] that supports that standard, and they share one giant marketplace. But how do you get them to share a marketplace? Blockchain and tokens provide decentralization and incentives such that, if you set the right rules, maybe you could do it. That could be transformational,” he said.

As with any new technology, the more it scales the more the tools and adjacent technologies are required. We are still in the early stages of discovering what those are, and before the technology can take off in a big way, we will need more underlying infrastructure in place. If that happens, blockchain could be just as transformational as May suggests.


By Ron Miller

SAP latest enterprise player to offer cloud blockchain service

SAP announced today at its Sapphire customer conference it was making the SAP Leonardo Blockchain service generally available. The latter is a cloud service to help companies build applications based on digital ledger-style technology.

Gil Perez, senior vice president for product and innovation and head of digital customer initiatives at SAP, says most of the customers he talks to are still very early in the proof of concept stage, but not so early that SAP doesn’t want to provide a service to help move them along the maturity curve.

“We are announcing the general availability of the SAP Cloud Platform Blockchain Services.” This is a generalized service on top of which customers can begin building their blockchain projects. He says SAP is taking an agnostic approach to the underlying ledger technology whether it’s the open source Hyperledger project, where SAP is a platinum sponsor, MultiChain or any additional blockchain or decentralized distributed ledger technologies.

Perez said part of the reason for this flexibility is that blockchain technology is really still being defined and SAP doesn’t want to commit to any underlying ledger approach until the market decides which way to go. He says this should allow them them to minimize the impact on customers as the technology evolves.

They join other enterprise companies like Oracle, IBM, Microsoft and Amazon who have previously released blockchains services for their customers. For SAP, which many companies use for the back-office management of everything from finance to logistics, the blockchain could present some interesting use cases for its customers such as supply chain management.

In this case, the blockchain could help reduce paperwork, bring products to market more quickly and provide an easy audit trail. Instead of requesting a scanned copy of a signed document, you could simply click on a node on the blockchain and see the approval (or denial) and follow the products through the shipping process to the marketplace.

But Perez stresses that just because it’s early doesn’t mean they aren’t working on some pretty substantial projects. He cited one with a pharmaceutical company to ensure the provenance of drugs that involved over a billion transactions already.

SAP is simply trying to keep up with what customers want. Prior to the GA announced today, the company conducted a survey of 250 customers and found, that although it was early days, there is enterprise interest in exploring blockchain technology. Whether this initiative can expand into a broader business is hard to say, but SAP sees blockchain as logical adjacent technology to their core offerings.


By Ron Miller

Meet the speakers at The Europas, and get your ticket free (July 3, London)

Excited to announce that this year’s The Europas Unconference & Awards is shaping up! Our half day Unconference kicks off on 3 July, 2018 at The Brewery in the heart of London’s “Tech City” area, followed by our startup awards dinner and fantastic party and celebration of European startups!

The event is run in partnership with TechCrunch, the official media partner. Attendees, nominees and winners will get deep discounts to TechCrunch Disrupt in Berlin, later this year.
The Europas Awards are based on voting by expert judges and the industry itself. But key to the daytime is all the speakers and invited guests. There’s no “off-limits speaker room” at The Europas, so attendees can mingle easily with VIPs and speakers.

What exactly is an Unconference? We’re dispensing with the lectures and going straight to the deep-dives, where you’ll get a front row seat with Europe’s leading investors, founders and thought leaders to discuss and debate the most urgent issues, challenges and opportunities. Up close and personal! And, crucially, a few feet away from handing over a business card. The Unconference is focused into zones including AI, Fintech, Mobility, Startups, Society, and Enterprise and Crypto / Blockchain.

We’ve confirmed 10 new speakers including:


Eileen Burbidge, Passion Capital


Carlos Eduardo Espinal, Seedcamp


Richard Muirhead, Fabric Ventures


Sitar Teli, Connect Ventures


Nancy Fechnay, Blockchain Technologist + Angel


George McDonaugh, KR1


Candice Lo, Blossom Capital


Scott Sage, Crane Venture Partners


Andrei Brasoveanu, Accel


Tina Baker, Jag Shaw Baker

How To Get Your Ticket For FREE

We’d love for you to ask your friends to join us at The Europas – and we’ve got a special way to thank you for sharing.

Your friend will enjoy a 15% discount off the price of their ticket with your code, and you’ll get 15% off the price of YOUR ticket.

That’s right, we will refund you 15% off the cost of your ticket automatically when your friend purchases a Europas ticket.

So you can grab tickets here.

Vote for your Favourite Startups

Public Voting is still humming along. Please remember to vote for your favourite startups!

Awards by category:

Hottest Media/Entertainment Startup

Hottest E-commerce/Retail Startup

Hottest Education Startup

Hottest Startup Accelerator

Hottest Marketing/AdTech Startup

Hottest Games Startup

Hottest Mobile Startup

Hottest FinTech Startup

Hottest Enterprise, SaaS or B2B Startup

Hottest Hardware Startup

Hottest Platform Economy / Marketplace

Hottest Health Startup

Hottest Cyber Security Startup

Hottest Travel Startup

Hottest Internet of Things Startup

Hottest Technology Innovation

Hottest FashionTech Startup

Hottest Tech For Good

Hottest A.I. Startup

Fastest Rising Startup Of The Year

Hottest GreenTech Startup of The Year

Hottest Startup Founders

Hottest CEO of the Year

Best Angel/Seed Investor of the Year

Hottest VC Investor of the Year

Hottest Blockchain/Crypto Startup Founder(s)

Hottest Blockchain Protocol Project

Hottest Blockchain DApp

Hottest Corporate Blockchain Project

Hottest Blockchain Investor

Hottest Blockchain ICO (Europe)

Hottest Financial Crypto Project

Hottest Blockchain for Good Project

Hottest Blockchain Identity Project

Hall Of Fame Award – Awarded to a long-term player in Europe

The Europas Grand Prix Award (to be decided from winners)

The Awards celebrates the most forward thinking and innovative tech & blockchain startups across over some 30+ categories.

Startups can apply for an award or be nominated by anyone, including our judges. It is free to enter or be nominated.

What is The Europas?

Instead of thousands and thousands of people, think of a great summer event with 1,000 of the most interesting and useful people in the industry, including key investors and leading entrepreneurs.

• No secret VIP rooms, which means you get to interact with the Speakers

• Key Founders and investors speaking; featured attendees invited to just network

• Expert speeches, discussions, and Q&A directly from the main stage

• Intimate “breakout” sessions with key players on vertical topics

• The opportunity to meet almost everyone in those small groups, super-charging your networking

• Journalists from major tech titles, newspapers and business broadcasters

• A parallel Founders-only track geared towards fund-raising and hyper-networking

• A stunning awards dinner and party which honors both the hottest startups and the leading lights in the European startup scene

• All on one day to maximise your time in London. And it’s PROBABLY sunny!

europas8

That’s just the beginning. There’s more to come…

europas13

Interested in sponsoring the Europas or hosting a table at the awards? Or purchasing a table for 10 or 12 guest or a half table for 5 guests? Get in touch with:
Petra Johansson
[email protected]
Phone: +44 (0) 20 3239 9325


By Mike Butcher

Veridium Labs teams with IBM and Stellar on carbon credit blockchain

Veridium Labs has been trying to solve a hard problem about how to trade carbon offset credits in an open market. The trouble is that more complex credits don’t have a simple value like a stock, and there hasn’t been a formula to determine their individual value. That has made accounting for them and selling them on open exchanges difficult or impossible. It’s a problem Veridium believes they can finally solve with tokens and the blockchain.

This week the company announced a partnership with IBM to sell carbon offset tokens on the Stellar blockchain. Each company has a role here with Veridium setting up the structure and determining the value formula. Stellar acts as the digital ledger for the transactions and IBM will handle the nuts and bolts of the trade activity of buying, selling and managing the tokens.

Todd Lemons, CEO and cofounder of Veridium Labs, which is part of a larger environmental company called EnVision Corporation, says that even companies with the best of intentions have struggled with how to account for the complex carbon credits. There are simpler offset credits that are sold on exchanges, but ones that seek to measure the impact of a product through the entire supply chain are much more difficult to determine.  As one example, how does a company making a candy bar source its cocoa and sugar. It’s not always easy to determine through a web of suppliers and sellers.

Moving forward

To partly solve this problem, another Envision company, InfiniteEARTH developed a way to account for them called the Redd+ forest carbon accounting methodology. It is widely accepted to the point that it has been incorporated in the Paris Climate Agreement, but it doesn’t provide a way to turn the credits into what are called fungible assets, that is an easily tradable one. The problem is the value of a given credit shifts according to the overall environmental impact of producing a good and getting it to market. That value can change according to the product.

Jared Klee, blockchain manager for token initiatives at IBM, says that buying and accounting for Redd+ credits on the company balance sheet has been a huge challenge for organizations. “It’s a major pain point. Today Redd+ credits are over the counter assets and there is no central exchange,” he said. That means they are essentially one-off transactions and the company is forced to hold these assets on the books with no easy way to account for their actual value. That often results in a big loss, he says, and companies are looking for ways to comply in a more cost-efficient way.

Putting it together

The three companies — Veridium, IBM and Stellar — have come together to solve this problem by creating a digital token that acts as a layer on top of the carbon credit to give it a value and make it easier to account for. In addition, the tokens can be bought and sold on the blockchain.

The blockchain provides all the usual advantages of a decentralized record keeping system, immutable records and encrypted transactions.

Veridium is working on the underlying formula for token valuation that measures “carbon density per dollar times product group,” Lemons explained. “That can be coded into a token and carried out automatically,” he added. They are working with various world bodies like the United Nations and The World Resource Institute to help figure out the values for each product group.

All of the details are still being worked out as the idea works its way through the various regulatory bodies, but the companies hope to be making the tokens available for sale some time later this year.

Ultimately this is about finding ways to help businesses comply with environmental initiatives and remove some of the complexity inherent in that process today. “We hope the tokens will provide less friction and a much higher adoption rate,” Lemons said.


By Ron Miller

Xage introduces fingerprinting to protect industrial IoT devices

As old-school industries like oil and gas increasingly network entities like oil platforms, they become more vulnerable to hacking attacks that were impossible when they were stand-alone. That requires a new approach to security and Xage (prounounced Zage), a security startup that launched last year thinks it has the answer with a concept called ‘fingerprinting’ combined with the blockchain.

“Each individual fingerprint tries to reflect as much information as possible about a device or controller,” Duncan Greenwood, Xage’s CEO explained. They do this by storing configuration data from each device and controller on the network. That includes the hardware type, the software that’s installed on it, the CPU ID, the storage ID and so forth.

If someone were try to inject malware into one of these controllers, the fingerprint identification would notice a change and shut it down until human technicians could figure out if it’s a legitimate change or not.

Whither blockchain?

You may be wondering where the blockchain comes into this, but imagine a honey pot of these fingerprints were stored in a conventional database. If that database were compromised, it would mean hackers could have access to a company’s entire store of fingerprints, completely neutering that idea. That’s where the blockchain comes in.

Greenwood says it serves multiple purposes to prevent such a scenario from happening. For starters, it takes away that centralized honey pot. It also provides a means of authentication making it impossible to insert a fake fingerprint without explicit permission to do so.

But he says that Xage takes one more precaution unrelated to the blockchain to allow for legitimate updates to the controller. “We have a digital replica (twin) of the system we keep in the cloud, so if someone is changing the software or plans to change it on a device or controller, we will pre-calculate what the new fingerprint will be before we update the controller,” he said. That will allow them to understand when there is a sanctioned update happening and not an external threat agent trying to mimic one.

Checks and balances

In this way they check the validity of every fingerprint and have checks and balances every step of the way. If the updated fingerprint matches the cloud replica, they can be reasonably assured that it’s authentic. If it doesn’t, he says they assume the fingerprint might have been hacked and shut it down for further investigation by the customer.

While this sounds like a complex way of protecting this infrastructure, Greenwood points out that these devices and controllers tend to be fairly simple in terms of their configuration, not like the complexities involved in managing security on a network of workstations with many possible access points for hackers.

The irony here is that these companies are networking their devices to simplify maintenance, but in doing so they have created a new set of issues. “It’s a very interesting problem. They are adopting IoT, so they don’t have to do [so many] truck rolls. They want that network capability, but then the risk of hacking is greater because it only takes one hack to get access to thousands of controllers,” he explained.

In case you are thinking they may be overstating the actual problem of oil rigs and other industrial targets getting hacked, a Department of Homeland Security report released in March suggests that the energy sector has been an area of interest for nation-state hackers in recent years.


By Ron Miller

BotChain wants to put bot-to-bot communication on the blockchain

Increasingly we are going to be having bots conducting business on a company’s behalf. As that happens, it is going to require a trust mechanism to ensure that bot-to-bot communication is legitimate. BotChain, a new startup out of Boston wants to be the blockchain for registering bots.

The new blockchain, which is built on Ethereum, is designed to register and identify bots and provide a way for companies to collaborate between bots with auditing capabilities built in. BotChain has the potential to become a standard way of sharing data between bots in a trusted way.

The idea is to have an official and sanctioned place for companies to register their bots securely. As the organization describes it, “BotChain offers bot developers, enterprises, software companies, and system integrators the critical systems, standards, and means to validate, certify, and manage the millions of bots and billions of transactions powered by AI.

Photo: allanswart

The company was created by the team at Talla, a bot startup in Cambridge, but the goal is to open this up to much larger community of partners and expand. In fact, early partners include Gupshup, a platform for developers and Howdy.ai, B2B enterprise bot developers along with Polly, CareerLark, Disco (formerly Growbot), Zoom.ai, and Botkeeper.

BotChain is the brainchild of Rob May, who is CEO at Talla. He was formerly co-founder and CEO at Backupify, which was sold to Datto in 2014. He recognized that as bot usage increases, there needed to be a system in place to help companies using bots to exchange information, and eventually even digital currencies to complete transactions in a fully digital context.

May believes that blockchain is the best solution to build this trust mechanism because of the ledger’s nature as an immutable and irrefutable record. If the entities on the blockchain agree to work with one another, and the other members allow it, there should be an element of confidence inherent in that.

He points to other advantages such as being decentralized so that no single company can control the data on the blockchain, and of course nobody can erase a record once it’s been written to the chain. It also provides a way for bots to identify one another in an official way and for participating companies to track transactions between bots.

Talla opened this up to a community of users because it wants BotChain to be a standard way for bots to exchange information. Whether that happens or not remains to be seen, but these types of projects could be important building blocks as companies look for ways to conduct business confidently, even when there are no humans involved.

BotChain has raised $5 million USD in a private token sale to institutional investors such as Galaxy Digital, Pillar, Glasswing and Avalon, according to the company.

In addition, they will be conducting another token pre-sale starting this Friday to raise additional funds from community stakeholders. “This token sale is a way to give [our community] access. Purchasing these tokens allows users to start registering their assets and create chains of immutable records of what their machines have done,” May explained. He said the company expects to raise $20 million this year from stakeholder token sales.

You can learn more about Botchain from this video:


By Ron Miller