EthCC 2: Vincent Le Gallic

hello we develop Rockside the company behind website is abductions to do blockchain studio was created in 2018 we are 11 people 8 developers and we are based in Paris Singapore in Tokyo it's Frederic EP engineering and I'm Vincent co-founder and CTO to create a rock side we talk with a lot of company different with different size like stuff or consulting film and thanks to the L feedback we build a rock side which aims to simplify blockchain for company and we identify three big challenge we thought this a challenge in a triptych part first part is not management the second part is a blockchain consortium and the last part is a key keys management so let's talk about not management challenges as a company to exist in peer-to-peer network I have to be a peer it's a very simple idea for developer but for company is a little complicated because the blockchain is a very new concept when I love my nerd I have to find a system to interact with my node with the token for example because because I have to keep the control and I have to find a system to monitor my nod and to find solution to revoke access enough my RPC endpoint for example so we want to show you how rock side address this type of challenge so so let's go for a short demo so this is rock side we hope you like it for the needs of this presentation when star walk side inside our own private cloud so when you will install rock side inside your infrastructure you will have something like that so here's the on three point of the solution what we want is to create a node that is a consortium it's for later after so when you you quit a node you have to choose which network you want to to to attach to if you have a production project you will go to the minute if you want to have a proof-of-work test network you can go to rub stone and if you want to have a proof of authority network you can go to rinkeby so let's go for Austin so it's a some small form that you have to to answer with a small information such as what kind of synchronization we want so a first thing is okay you can choose the implementation the client can what kind of change you want to use gate is okay so in a few clicks you already have running nodes so it will begin to synchronize in few minutes on a contact to some peers one important point that Vincent told you before is that company want to control the access to the RPC so we never exposed the true RPC of the node it son capsulated in by oxide and so if in your company you have some developers one day developer lives we can revoke the access to the RPC so your RPC is never compromised so that is the first demonstration of how simple it is to create nodes in rocks I'll yeah for TOEFL we just want to simplifies the way developer can integrate with the tool they use every day so it's a some soccer shortcuts where you can just copy and and indicate in your trough all coughing file yeah so what just did you see that is the architecture of peroxide when we design work side we want to focus in the decentralisation so we are not block Shen as a service provider as the thing you already in understand when you want to quit not with rock side everything is on your own infrastructure so we have to port the rock side slave that will be in charge of creating the node and will contain all the information about the node like the chain data or the icon that it will be on working unit so everything stay inside the rock side slave nothing go to the other part that is the rock side on join the rocks I online is the entry point of the solution it would be in charge of controlling the different slave and will give order to them these two two components you can enter it anyway in adjure or Google Cloud or in your own server inside your own infrastructure while you just see with the demonstration is that a Vincent when he clicked on the quid nut button the unsigned sent an order to the slave say a critter roastin node so everything goes so simply yeah let's go for consumption today we think blockchain companies are not ready for we saw a lot of company not really for using the public public collection so the first step for them will be too good to consortium reduction but consumption Russian is not so simple first more than for public auction cause from production to have their own node is really important is the way you exist inside the consortium so to own your own icon and to have your own validation not is the way you exist in that consortium to create a consortium first you have to set up Genesis you have to indicate which can of what a block time you want to use for example like is a 15 second good or five second better you will have to indicate the different account that will be in charge of validating the connection and when you have the attorneys file you have to share it between the different member of the consortium when we have the genesis file we can begin to start via node unlock the icon that is in short to of validating the transaction and to do this things in the right order we have to connect to the other peers network and when we are synchronized I will be just can begin to validate transaction and start the mining process if you don't do that in the right order if everybody start panning on side in few in a few second your consortium is running and it's already in a conflict so even when you know the procedure it's a lot of time to do it and says what we want to save for companies save the time of installing their own consortium right now let's talk about security few days before we speak with we spoke with a company that installed its own consortium they walk freely on it very happy everything more fine one day after they just want to to begin to use their croissants firm and just realize that all the phone will be installed because as you know have some boats on the internet that we are scanning the different address and if you find something is not secured so although it's arenít why would that happen because they didn't secure secure eyes the RPC aware node so everybody can access it when you have your production when it's secured you have to interact with it when you have a public node it's a quite simple you can use at your scan but on your own consumption blockchain you will have to install your blog explorer by yourself so that is not really complicated but maybe in your team you we have to have some people make a benchmark between the different solution existing on the on the market and spend time to install it because all these complexities some companies can be tempted to use some blockchain as a service provider and it will have a risk of centralization we saw so many consortium running on the same Kludd provider it will be s of edger semi Kuhn with all the member inside the same icons but that is not the spirit of the deduction and it can be risk for the for the for the for the consortium yeah and a photo another part is when you use that kind of solution you don't own your private key if one day you want to to leave and choose another solution everything inside the club provider and you cannot get back your data so what we want to avoid so the start of a demo of rock style so it's time we go to consumption let's consider three companies across companies Benetton ladies and Quicksilver and they want to quit a consortium to manage the fidelity point of their customer yeah we make a proof of authority so to simplify the demo levees and Benetton agreed on using the same online so they will connect their own slave on the online so what we do right now we are creating the account for levies that will be in charge of validating the transaction so what happened is that the online asked the slave of levies to create an account and I get the public key we do the same for Benetton and but in their own slave but Quicksilver decided to run is node by itself on the side so it will provide us the public key of the icon that would be in charge of validating introduction and when the consortium will be started we will send him the genitive side so you can join us on his side another part we want to have some fun that we can use in our network so we indicate the address but we will want to have money on it so everything seems ready let's go so what is the happening Rhino is the engine give the order to the different slave to create the consortium okay let's works good and right now Livius and Benetton already have our nerves running we can send the Genesis to Quicksilver so we'll be able to to join the consortium here to generate this file to be sure everything works fine we'll make a transaction so we'll go to one of the node use the RPC we can see we already are in a black free so let's go to the airport connect metamath to our node so we indicate the upper CF of the node and it's not working yeah so we have lot of money we send it to the other raccoons you're selfish so normally we should see the transaction a happier in our block Explorer and as you can see Fred let me send money to Vincent maybe you'll turn surprised but why we can see our face in the in the in the contract it's because we add some feature that lets you decorate your address there is small teacher but it can make the deflection more readable so you I forgot something no okay so let's go back to the yeah let's go back to the summarize what did you is Jessie okay so why we think we do colostrum in a right way is because we don't apply as every member of the consortium choose our solution one member can use Rockside two of us can they can use the same online we can each one have its own instance of Rockside another way is a the last one don't use Rockside we just show you the use case where the genesis fight is Cretan on the on rock side is another use case where you use work site to generate consortium by importing already existing Genesis file so everybody is free and the custom is free to use their own solution another big point is there was no vendor or locking if you work side on your slave server you have your docker container running so if you want to stop using rock side you just start rock side the container will keep training the provide key are in your file system and the same for the chain data so it's your production you do what we don't feel it because we make a lot of tests we can assure that your concert from will stop with no program all the time and you have all the tool already in stelae to to monitor your blockchain and see what happened in your blushing yeah okay let's talk about key management challenges at I take blockchain studio as example when we deploy smart contract with our continuous integration system I don't like to have my my store my private key in in my computer on our my my build factory machine so the first problem is how to have a representation of my key of my private key and when a member of my team leave the company if he had access only once that one time to the private key I consider it compromised so to address this a challenge we develop MVP our ID is a use ashika volt it is a open source solution and we developed a frigging to to asha cobalt and as i will show you a demonstration i as a security team bus i manage the production studio team with github you can imagine another system like octa or another or a CSO so my team of developer is on github and I won't use this existing system to to manage the access and the right to sign transaction so the step one is manage my organization to the directory user of my company the step two is a creat policy in the world so we will show you how to create a policy here in our MVP the policia say the policy is the capability to sign with this public keys the vault never exposes the private key so the step tree is a map authentication data and policy I want to say this user can use this policy I will choose a rock site Ronny okay step 4 as as a rock side 20 I want to use this system and I want to deploy a smart contract with those with us private key I get my personal access token on key tab on a Firefox and I said my personal access token in my troffer project our ID is is just with this representation just if I'm out on skated on my network I can sign transaction with this public key maybe we can show as a trifle project it is a how to say empty empty total project we just clone the repository so we set three three parameters RPC endpoint this is a Rockside endpoint and behind this endpoint we have our our our pricking and our vault the sermon Parimal a parameter is the public key the sender the phone and the Kitab token is as a way to to authenticate me on under the network so we will try to deploy a contract just with this tree information yes to offer me great Network is is it just an option of travel maybe you can show my local instance of oxide yes this is a localized a stencil for oxide it's normally time block is a very high on my er consortium which protection so I send a clear transaction from treffen we can him and the transaction is is assigned by the vault and and broadcast to the network and no just by removing Rockside trainee from my organization on github let's let's try to remove Rock site 20 okay if Rock side 20 try to use again this public key we can imagine he leaves the company I hope the vault answer with an arrow so you can see a user is not part of the week about organization so the you can choose a Tsushima because the step 7 verify out with a personal access token fail so we think it is a MVP in a common line but we imagine a lot of use case of this friggin and we work with another system of authentication and with another system of vault yeah ok so we hope you like Rockside actually we just introduced you the some of the challenges we we received from the companies and we hope the solution we are providing will be respectable action philosophy we just have to make an SM announcement we realized Rockside re-access and it's available in a rock side that I oh so starting today you can begin to use it try it by yourself on sending us feedback so thank you for your attention and if you have a question you are calm and things to the team that is a in the in the room let's make a good job okay thank you good eating beer [Applause]