Blockchain

Chapter 12
Sector Applications and Solution Evaluation

Bachelors Program in IT
Blockchain   •   Bachelor

Sector Applications and Solution Evaluation

Introduction

Blockchain is often presented as a technology capable of transforming every industry. A more rigorous view is that blockchain is a specialized coordination and record-keeping technology. It creates the greatest value when several organizations need to share records, do not fully trust one another, require a common history of events, and cannot rely efficiently on a single controlling intermediary. It is less attractive when one organization controls all participants, when transactions must be changed frequently, when confidentiality is paramount, or when a conventional database already solves the problem at lower cost.

This chapter applies blockchain concepts to supply chains, finance, identity, healthcare, government, intellectual property, and the Internet of Things (IoT). It also presents decision frameworks and proof-of-concept methods for evaluating proposed solutions. The central professional skill is not merely knowing how blockchain works, but judging when it is justified.

Learning Objectives

By the end of this chapter, students should be able to:

  1. Explain how blockchain characteristics map to sector-specific problems.
  2. Analyze benefits, risks, and limitations in major application domains.
  3. Distinguish blockchain problems from ordinary database, integration, and governance problems.
  4. Apply a structured decision framework to technology selection.
  5. Design and evaluate a blockchain proof of concept (PoC).
  6. Assess privacy, regulation, interoperability, inclusion, and governance implications.

1. From Blockchain Features to Business Value

A blockchain typically provides a replicated ledger, cryptographic integrity, consensus among participating nodes, programmable transaction rules, and an auditable history. These features should not be treated as benefits automatically. Their value depends on the operating context.

1.1 The trust and coordination problem

Many business processes cross organizational boundaries. A manufacturer, logistics provider, customs authority, bank, insurer, retailer, and customer may each maintain separate records. Reconciliation between these records creates delays, disputes, duplicated data entry, and operational expense.

Blockchain can provide a shared state: a record that authorized participants can inspect and update according to common rules. The technology may reduce reconciliation, but it does not eliminate the need for governance. Participants must still agree on data definitions, access rights, liability, dispute handling, and correction procedures.

1.2 Core capabilities and limitations

CapabilityPotential valueImportant limitation
Shared ledgerReduces inconsistent copies and reconciliationDoes not guarantee that input data is true
Immutability or tamper evidenceSupports auditability and accountabilityIncorrect data may remain permanently recorded
ConsensusCoordinates independent participantsAdds latency, cost, and governance complexity
Smart contractsAutomates agreed rulesCode may contain defects and cannot understand all real-world circumstances
Cryptographic identitySupports authorization and signaturesLost keys and poor identity governance create serious risks
TokenizationRepresents rights or assets digitallyLegal recognition and custody must be established
TransparencyImproves traceability and monitoringExcessive visibility may violate confidentiality or privacy

The “oracle problem” is especially important. A blockchain can verify that a sensor, employee, or external system submitted a particular value, but it cannot by itself prove that the value describes reality. A temperature sensor may be faulty; a person may enter false information; an oracle may be compromised.

1.3 Public, private, and consortium arrangements

Public blockchains allow broad participation and are appropriate where open verification and censorship resistance are central. Permissioned blockchains restrict participation and are more common in enterprise settings requiring confidentiality, predictable performance, and identifiable organizations. Consortium systems distribute governance across several institutions rather than placing control with one firm.

The choice affects security, accountability, scalability, and cost. A permissioned ledger is not automatically decentralized in a meaningful sense; if one organization can unilaterally alter rules or exclude participants, its governance may resemble a centralized platform.

2. Applications by Sector

2.1 Supply chains and provenance

Supply chains involve multiple parties, handoffs, documents, and standards. Blockchain applications include product provenance, certification, recall management, trade documentation, and monitoring of high-value goods such as pharmaceuticals, food, minerals, and luxury products.

A typical process records events such as production, packaging, shipment, customs clearance, receipt, and sale. A digital identifier links a physical item or batch to ledger events. Participants can then trace the chain of custody and identify affected products during a recall.

The strongest use cases have:

  • many independent participants;
  • costly disputes or recalls;
  • valuable provenance information;
  • standardized events and identifiers; and
  • an incentive for participants to contribute reliable data.

Blockchain does not make a product authentic merely because its identifier appears on a ledger. Physical-digital binding requires tamper-resistant labels, secure scanning, trusted inspectors, or other controls. Supply-chain systems also face data-entry errors, incomplete participation, incompatible enterprise systems, and commercial confidentiality concerns.

2.2 Finance and financial infrastructure

Finance was an early area of blockchain experimentation because financial assets are already represented as records and transactions require strong auditability. Applications include cross-border payments, securities settlement, trade finance, collateral management, syndicated lending, tokenized deposits, and central bank digital currency research.

A blockchain may reduce settlement friction by allowing authorized parties to share a synchronized transaction state. Smart contracts can automate delivery-versus-payment, in which an asset transfer occurs only when the corresponding payment condition is satisfied. Tokenization may permit fractional ownership or programmable restrictions, but it does not remove securities law, custody duties, anti-money-laundering requirements, or market-abuse controls.

Financial evaluation must consider:

  • settlement finality and reversibility;
  • transaction throughput and latency;
  • privacy of balances and trading activity;
  • key custody and recovery;
  • legal ownership and insolvency treatment;
  • interoperability with existing payment and market systems; and
  • operational resilience.

For many internal banking processes, a shared database or messaging standard may be more economical. Blockchain becomes more compelling when institutions require a common settlement record but do not want one participant to control it completely.

2.3 Digital identity

Identity systems establish who a person or organization is and what claims can be trusted. Blockchain can support decentralized identifiers, verifiable credentials, and selective disclosure. For example, a university could issue a digitally signed qualification that a graduate presents to an employer without requiring the employer to contact the university for every verification.

The ledger should generally store identifiers, public keys, revocation status, or hashes rather than sensitive personal data. This follows the principle of data minimization. Personal data written permanently to an immutable public ledger may conflict with privacy rights, correction obligations, and retention policies.

Identity architecture must distinguish authentication from authorization and from the underlying identity proofing process. A cryptographic key proves control of a key, not necessarily that the key belongs to a specific person. Reliable systems therefore need credential issuers, recovery mechanisms, accessibility provisions, revocation, guardianship arrangements, and support for people who lose devices or keys.

2.4 Healthcare

Healthcare applications include provider credentials, consent management, claims processing, clinical data exchange, pharmaceutical traceability, and research data provenance. A ledger can record that a consent was granted, a document was issued, or a data exchange occurred. It is generally unsuitable for storing complete medical records directly because of volume, privacy, correction, and access-control requirements.

A practical architecture often keeps clinical data in secure databases or distributed storage and places hashes, permissions, audit events, or pointers on a ledger. Even then, a hash can reveal information if an attacker can test candidate documents, and a pointer can become a privacy risk. Healthcare systems must address emergency access, minimum necessary disclosure, patient autonomy, data quality, clinical safety, and national health regulation.

The key question is not “Can blockchain store the record?” but “Which evidentiary or coordination problem requires a shared ledger, and how can patient data remain controlled?”

2.5 Government and public administration

Government uses may include land registries, licenses, procurement, benefits, tax records, voting-related infrastructure, and interagency records. A ledger can improve auditability and reduce opportunities for unauthorized alteration. However, public-sector systems involve constitutional rights, administrative review, accessibility, public accountability, and long-term stewardship.

A blockchain-based land registry, for example, cannot by itself resolve disputed ownership, fraudulent original deeds, unequal access to registration, or errors in historical records. Governance must define who can correct an entry, how appeals work, and how courts interact with the system. In voting, a ledger may help audit certain processes, but remote electronic voting also raises coercion, endpoint security, ballot secrecy, availability, and verification challenges. A visible transaction record is not equivalent to a trustworthy election.

2.6 Intellectual property and royalties

Blockchain can timestamp creative works, record licenses, track rights transfers, and automate royalty distribution. It may support evidence of when a file or claim existed, but timestamping does not prove authorship or originality. Nor does a token automatically confer copyright, patent ownership, or permission to exploit a work.

Rights-management systems must represent complex legal relationships: territories, media, duration, sublicensing, collective rights, moral rights, and exceptions. Smart contracts are useful for simple, well-defined payment rules, but legal interpretation and dispute resolution remain necessary. The system should also address fraudulent uploads, duplicate claims, and the difference between owning a token and owning an underlying intellectual-property right.

2.7 Internet of Things

IoT devices generate events about location, condition, energy use, manufacturing, and building operations. Blockchain can provide device registration, firmware provenance, event logging, machine-to-machine payments, and shared access records across organizations.

Resource-constrained devices may not be able to run full ledger software. Gateways or edge services therefore submit signed summaries. This creates a trust boundary: the ledger preserves submitted events, but the gateway remains a possible point of failure. IoT systems also require secure hardware, key rotation, patching, privacy controls, and mechanisms for handling compromised devices.

A blockchain is especially useful when devices operated by different owners must interact under shared rules. It is usually unnecessary for a single organization’s internal sensor database unless tamper evidence or independent audit is a specific requirement.

3. A Decision Framework for Technology Selection

A disciplined evaluation begins with the problem rather than the technology. The following questions provide a practical screening framework.

3.1 The blockchain suitability test

  1. Is there a genuine multi-party coordination problem? If only one organization needs to write and use the data, a conventional database is usually preferable.
  2. Do participants lack complete trust in one another? If a trusted central operator is acceptable, blockchain may add unnecessary complexity.
  3. Is a shared history important? Blockchain is more relevant when disputes, provenance, or independent audit matter.
  4. Are transactions structured and rule-based? Smart contracts are strongest when events and conditions can be specified precisely.
  5. Can data be shared legally and ethically? Privacy, confidentiality, and sector regulations may rule out particular designs.
  6. Can reliable data enter the system? If the main problem is inaccurate source data, a ledger alone will not solve it.
  7. Is the network effect achievable? A system with too few participating organizations may provide little value.
  8. Are performance requirements compatible? Required throughput, latency, availability, and finality must be tested rather than assumed.
  9. Can governance be established? The parties need rules for admission, upgrades, disputes, liability, and emergencies.
  10. Does the incremental value exceed total cost and risk? Compare blockchain with databases, APIs, shared data platforms, and process redesign.

3.2 Multi-criteria evaluation

Organizations can score alternatives using weighted criteria. Let the score for option j be:

Sj = ∑i=1n wi rij

where wᵢ is the weight of criterion i, rᵢⱼ is the rating of option j on criterion i, and ∑wᵢ = 1. Ratings must use a defined scale, such as 0 to 5. Criteria may include trust reduction, auditability, privacy fit, performance, integration effort, governance feasibility, and total cost. This is a decision aid, not an objective proof; sensitivity analysis should test whether changing weights changes the preferred option.

3.3 Total cost and value

Evaluation should include development, integration, infrastructure, cybersecurity, compliance, training, support, governance, migration, and retirement costs. Benefits may include reduced reconciliation, fewer disputes, faster settlement, lower fraud losses, improved audit preparation, and new revenue opportunities.

A simplified net present value model is:

NPV = ∑t=0T \frac{Bt - Ct}{(1+r)t}

Here Bₜ is benefit in period t, Cₜ is cost in period t, r is the discount rate per period, and T is the evaluation horizon. The model assumes benefits and costs can be estimated in monetary terms and that the discount rate is appropriate. Intangible benefits and risks should be reported separately rather than hidden in arbitrary estimates.

4. Proof-of-Concept Method

A PoC is a bounded experiment designed to test uncertain assumptions. It is not a production deployment and should not be judged only by whether a ledger can be made to run.

4.1 Define the hypothesis

A strong hypothesis is measurable: “A consortium ledger can reduce invoice-reconciliation time by 40% while meeting confidentiality and response-time requirements.” The team should identify the baseline process, participants, data, success metrics, and failure conditions.

4.2 Select a narrow workflow

Choose one end-to-end process with limited participants and representative complexity. Map current processes, systems, controls, exceptions, and manual work. Identify which events must be shared and which should remain private.

4.3 Design the minimum viable architecture

Specify the ledger type, consensus approach, identity model, smart-contract functions, off-chain storage, APIs, monitoring, key management, and recovery procedures. Do not place data on-chain merely because storage is available. Record only what requires shared integrity or ordering.

4.4 Test realistic conditions

A PoC should test normal transactions and exceptions: duplicate submissions, revoked credentials, unavailable participants, conflicting updates, erroneous data, key loss, privacy requests, and software upgrades. Performance testing should use realistic transaction sizes and concurrency. Security testing should include unauthorized access, compromised credentials, malicious insiders, and smart-contract defects.

4.5 Evaluate against a baseline

Compare the PoC with the best conventional alternative. Useful measures include reconciliation time, processing cost, error rate, audit effort, transaction latency, throughput, availability, energy use, user effort, and number of unresolved exceptions. A successful PoC may conclude that blockchain is unsuitable; that is a valuable result if it prevents an expensive deployment.

5. Illustrative Case: Pharmaceutical Cold-Chain Traceability

Background

A regional pharmaceutical network includes manufacturers, distributors, hospitals, pharmacies, and a regulator. Certain vaccines must remain within a specified temperature range. Records are exchanged through email, spreadsheets, enterprise systems, and paper documents.

Problem

When a temperature excursion occurs, participants cannot quickly determine which shipments, batches, and patients may be affected. Disputes arise because organizations maintain inconsistent timestamps and custody records. The regulator wants an auditable process without requiring every organization to surrender operational control to one competitor.

Analysis

The case has several blockchain-suitable characteristics: multiple independent parties, a need for shared event history, costly recalls, and a requirement for reliable audit. It also has major risks. Sensor readings may be inaccurate, organizations may refuse to share commercially sensitive data, and patient information must not be exposed.

Approach and solution

The consortium designs a permissioned ledger. Each shipment batch receives a digital identifier. Manufacturers, logistics firms, and receiving institutions submit signed custody events. Temperature gateways send signed readings or periodic summaries. Detailed sensor data remains in controlled off-chain storage; the ledger records hashes, event times, custody changes, and references. Access is role-based, and the regulator receives read access to relevant events.

Smart-contract rules reject impossible state transitions, such as a shipment being received before it was dispatched, and flag a temperature excursion for investigation. The design includes a correction process: an erroneous event is not silently deleted; a new authorized correction references the original event and records the reason.

Outcome

In the PoC, the consortium demonstrates faster identification of affected batches and reduced reconciliation effort. It also discovers that sensor calibration and organizational data standards are larger problems than ledger integrity. The production recommendation is conditional: deploy the ledger only after establishing sensor assurance, data governance, participation agreements, and privacy controls.

Learning points

  1. Blockchain improved shared evidence, not physical product quality.
  2. Off-chain storage was necessary for volume and confidentiality.
  3. Governance and standards were as important as software.
  4. A conventional shared platform might have been sufficient if one neutral operator were accepted.
  5. Exception handling and correction procedures must be designed before deployment.

6. Governance, Ethics, and Regulation

Blockchain systems distribute technical control, but responsibility cannot be distributed so widely that no party is accountable. Governance should specify membership, voting, software upgrades, validator duties, incident response, audit rights, dispute resolution, sanctions, and system closure.

Privacy requires purpose limitation, data minimization, access control, encryption, retention policies, and careful treatment of metadata. Even pseudonymous addresses can become identifiable through transaction analysis. Designs should support revocation and correction through append-only amendments, off-chain deletion where appropriate, or privacy-preserving techniques.

Ethical evaluation should consider exclusion, unequal access to devices and connectivity, surveillance, labor effects, environmental costs, and the consequences of irreversible errors. Smart contracts should be auditable, tested, and subject to human override where legal or safety requirements demand it. Artificial intelligence may help classify anomalies or predict fraud, but AI outputs should not be treated as unquestionable facts recorded permanently on a ledger. Model provenance can be recorded, while decisions still require explainability, monitoring, and human accountability.

7. Best Practices and Contemporary Directions

Effective projects usually follow these principles:

  • start with a process and stakeholder problem, not a token;
  • use interoperable identifiers and open data standards;
  • keep sensitive or large data off-chain when appropriate;
  • apply least-privilege access and strong key recovery;
  • design governance before production deployment;
  • test the oracle and physical-digital interfaces;
  • compare against a conventional baseline;
  • plan for upgrades, correction, migration, and retirement; and
  • measure social and regulatory outcomes as well as technical performance.

Contemporary development is moving toward tokenized real-world assets, verifiable credentials, privacy-enhancing computation, interoperable digital identity, layer-two scaling, and integration with IoT edge systems. These developments may improve feasibility, but they do not remove fundamental questions about law, trust, incentives, data quality, and governance.

Chapter Summary

Blockchain creates value primarily as a shared coordination mechanism among parties that need a tamper-evident history but do not want one participant to control the record completely. Supply chains benefit from provenance and custody records; finance from shared settlement and programmable assets; identity from verifiable credentials; healthcare from auditable consent and exchange events; government from transparent records; intellectual property from rights and royalty tracking; and IoT from device provenance and machine interactions.

In every sector, blockchain has limitations. It does not guarantee truthful input, solve identity proofing, replace legal rights, or eliminate governance. Privacy, scalability, interoperability, key management, correction, and participation must be addressed explicitly. A structured suitability test, multi-criteria comparison, economic analysis, and narrowly scoped PoC provide a defensible basis for choosing blockchain or a conventional alternative. The most valuable professional conclusion may be that blockchain is not required.

Key Terms

Blockchain: A replicated, cryptographically linked record system maintained according to agreed rules.

Consortium blockchain: A permissioned blockchain governed by multiple organizations.

Consensus: A process by which network participants agree on valid state or transactions.

Digital identity: A representation of a person or organization used for authentication and claims.

Distributed ledger: A synchronized record replicated across multiple nodes.

Immutability: The practical difficulty of altering historical records without detection or agreement.

Oracle: A service that supplies external data to a blockchain system.

Permissioned network: A network in which participation and actions are controlled by authorization.

Provenance: Evidence of an asset’s origin, history, and custody.

Proof of concept: A limited experiment testing technical and organizational feasibility.

Selective disclosure: Sharing only the identity attributes necessary for a purpose.

Smart contract: Program code that executes agreed transaction rules.

Tokenization: Digital representation of an asset, right, or claim.

Traceability: Ability to follow an item or event through a process.

Trusted intermediary: A central organization relied upon to maintain records or perform validation.

Verifiable credential: A digitally signed claim that can be independently checked.

Permissionless blockchain: A network generally open to participation without prior organizational approval.

Data minimization: Collecting and retaining no more personal data than necessary.

Review Questions

Short Answer Questions

  1. Why does blockchain not guarantee the truth of data entered by an oracle?
  2. State two conditions under which a conventional database is preferable to blockchain.
  3. What is the difference between a public and a permissioned blockchain?
  4. Why should healthcare data generally not be stored directly on a blockchain?
  5. What is the purpose of a proof of concept?

Long Answer Questions

  1. Explain how blockchain can create value in supply-chain provenance and discuss its limitations.
  2. Analyze the benefits and risks of blockchain-based digital identity systems.
  3. Compare blockchain applications in finance and government, paying attention to governance and regulation.
  4. Explain why tokenization does not automatically transfer legal ownership of an asset.
  5. Describe the stages of a robust blockchain proof of concept.

Analytical / Application Questions

  1. A university wants to issue tamper-evident academic credentials. Recommend a blockchain or non-blockchain architecture and justify your decision using the suitability test.
  2. A hospital consortium wants to share complete patient records on a public blockchain. Identify the main risks and propose a safer alternative architecture.
  3. A logistics consortium reports that its blockchain reduced reconciliation time but increased integration costs. Design a balanced evaluation using technical, economic, governance, and ethical measures.

Multiple Choice Questions with Answers

Question 1

Which condition most strongly supports using a consortium blockchain?

A. One organization alone owns and controls all records

B. Several independent organizations need a shared, auditable history

C. Transactions must remain entirely unstructured

D. No participant is willing to follow common governance rules

Correct Answer: B. Several independent organizations need a shared, auditable history

Question 2

What is the oracle problem?

A. The inability to encrypt a blockchain

B. The inability of a ledger to verify that external input reflects reality

C. The inability to create digital identities

D. The inability to store transaction timestamps

Correct Answer: B. The inability of a ledger to verify that external input reflects reality

Question 3

Why should sensitive healthcare information usually be kept off-chain?

A. Blockchains cannot record hashes

B. Healthcare data never requires auditability

C. Privacy, correction, retention, and access requirements make permanent ledger storage risky

D. Permissioned networks cannot control access

Correct Answer: C. Privacy, correction, retention, and access requirements make permanent ledger storage risky

Question 4

Which item is most appropriate for a blockchain-based academic credential system?

A. A permanently public copy of the student’s medical history

B. A verifiable credential and revocation status

C. An unencrypted private key stored on the ledger

D. A record with no issuing institution

Correct Answer: B. A verifiable credential and revocation status

Question 5

In the weighted scoring formula, what does wᵢ represent?

A. The rating of option j

B. The number of network nodes

C. The weight assigned to criterion i

D. The discount rate

Correct Answer: C. The weight assigned to criterion i

Question 6

A proof of concept should primarily:

A. Guarantee nationwide production deployment

B. Test defined technical and organizational assumptions

C. Avoid comparison with conventional systems

D. Store all available organizational data on-chain

Correct Answer: B. Test defined technical and organizational assumptions

Question 7

Which statement about supply-chain blockchain systems is correct?

A. A ledger automatically proves that a physical product is genuine

B. Blockchain removes the need for data standards

C. Physical-digital binding and reliable data entry remain necessary

D. All supply-chain data must be public

Correct Answer: C. Physical-digital binding and reliable data entry remain necessary

Question 8

What does selective disclosure mean in digital identity?

A. Revealing every attribute to every verifier

B. Sharing only the attributes necessary for a particular purpose

C. Deleting all credentials after issuance

D. Allowing anonymous alteration of credentials

Correct Answer: B. Sharing only the attributes necessary for a particular purpose

Question 9

Which is a major governance requirement for an enterprise blockchain?

A. A policy prohibiting software upgrades

B. Rules for membership, disputes, upgrades, and incident response

C. Elimination of all human oversight

D. Unrestricted access to confidential records

Correct Answer: B. Rules for membership, disputes, upgrades, and incident response

Question 10

What is the most defensible conclusion when a conventional database meets all requirements at lower risk and cost?

A. Blockchain must still be selected because it is newer

B. Blockchain should be selected for marketing reasons

C. The conventional database is the preferable solution

D. Both systems must always be deployed together

Correct Answer: C. The conventional database is the preferable solution

Blockchain
Chapter 12 of 15