Blockchain and Safeguards: The Potential of Distributed Ledger Technology for Nuclear Safeguards Information Management Cindy Vestergaard Director, Nuclear Safeguards Program, The Stimson Center Thursday, 8 November 2018, 9:00am – 10:30am

DLT for an SSAC (Cindy Vestergaard, Stimson Center) Operator SSAC Opportunities - optimize reconciliation process, reducing time and costs - immediate notification of security breaches - verifiable, immutable history of transactions/data - avoid risk of single points of failure that could disable the network and makes recovery easier given data is replicated throughout the system - enables data analytics to identify patterns Goal: Secure streamlining of information flows and SSAC database between operators and SSAC Tech: Permissioned DLT platform (possible use of IoT sensors, AI algorithms, etc) Timeline: 1- 1.5 years: 3-6 months for mapping the SSAC ecosystem, 3-6 months for developing RFP, 3-6 months for first proof of concept Challenges Stakeholders Political/Legal: Member State acceptability of new technologies -National policies on transmission of sensitive information -Long lag times in adapting national legislation to emerging technologies Sustainability: costs for development and maintenance (routinely updating DLT platform) Stakeholder engagement early in the process of implementing a new technology is critical: - Operators (industry and laboratories) - SSAC (national regulator) - Potential to be used for NCAs (see next slide)

DLT for NCAs (2+ SSACs) (Cindy Vestergaard, Stimson Center) IAEA Opportunities - real-time reporting between SSACs - optimize reconciliation process, reducing time and costs - immediate notification of security breaches - replicated data avoids risk of single points of failure - verifiable, immutable history of transactions/data - enables data analytics to identify patterns Goal: Secure streamlining of information flows for NCA reporting (and nuclear trade) between 2 or more SSACs Tech: Permissioned DLT platform (possible use of IoT sensors, AI algorithms, etc) Timeline: 1- 1.5 years: 3 months mapping DGR information flows, 3-6 months for developing RFP, 3-6 months for first proof of concept Challenges Stakeholders Political/Legal: Member State acceptability of new technologies -Natl policies on transmitting sensitive info -Long lag times in adapting national legislation to emerging technologies Sustainability: costs for development and maintenance (routinely updating DLT platform) Operators (industry and laboratories) SSACs to a specific NCA Potential for IAEA to be linked in on a specific transfer (thereby improving transit matching) Regional safeguards regimes such as Euratom and ABACC NSG to tag and track items

DLT for Operator (DGR) (Cindy Vestergaard, Stimson Center) Opportunities Goal: long-term data integrity and secure data storage for operator of a deep geological repository (DGR) Tech: Permissioned (possibly even centralized) DLT platform (additional use of IoT sensors, AI algorithms, etc) Timeline: 9-12 months - 3 months for mapping information flows, 3 months for developing RFP, 3-6 months for first proof of concept As an emerging facility, operators of DGRs could use DLT from the beginning to: fully integrate safety, physical security and safeguards considerations with emerging tech optimize reconciliation process, reducing time and costs achieve full digital integration and be first to test a proof of concept before operations begin Real-time reporting to SSAC Challenges Stakeholders Political/Legal: Member State acceptability of new technologies -Natl policies on transmitting sensitive info -Long lag times in adapting national legislation to emerging technologies Tech: reliance on continuous containment and surveillance (C/S) safeguards measures after enclosement Sustainability: costs for development and maintenance (routinely updating DLT platform) - DGR operator - Utilities providing SNF to DGR - SSAC