A design science research framework for continuous integrity verification of electronic data capture terminals using cryptographic tamper-evident enclosure and blockchain-based certification

Abstract

Background: The expansion of digital payment infrastructure has increased the role of Electronic Data Capture (EDC) terminals as distributed transaction endpoints in merchant environments. Existing controls include device certification, encryption, secure boot, firmware signing, anti-tamper mechanisms, and transaction monitoring. However, EDC terminals may still face post-certification integrity risks, including physical tampering, firmware reflashing, device identity spoofing, runtime manipulation, and fragmented audit evidence. This study develops NEUROSHELL as a conceptual Design Science Research (DSR) artefact for continuous integrity condition monitoring of EDC terminals. In this article, physical-layer cybersecurity refers to the protection and monitoring of the terminal enclosure, tamper status, firmware state, cryptographic device identity, and certification status, rather than to generic hardware security alone. Methods: This study used a DSR approach based on problem identification, threat modelling, design requirement derivation, artefact construction, conceptual evaluation, and validation-pathway planning. Data sources included scholarly literature, regulatory documents, technical standards, cybersecurity reports, and conceptual design materials. The framework was evaluated conceptually through comparative analysis, mapping of security objectives and stakeholder governance, and analysis of implementation feasibility. Findings: The study produced NEUROSHELL as an integrated integrity assurance framework. It combines cryptographic tamper-evident enclosure, secure boot and firmware attestation, device-bound cryptographic identity, runtime integrity proof, blockchain-based certification ledger, dashboard-based monitoring, and risk-based fail-secure response. The framework is designed to support lifecycle verification across onboarding, boot-time activation, runtime operation, firmware updates, anomaly detection, and recovery. Conclusion: NEUROSHELL shifts EDC terminal security from static certification to lifecycle-based integrity assurance, but it remains a conceptual framework that requires prototype implementation, tamper-simulation testing, latency benchmarking, false-positive analysis, and expert validation. Novelty/Originality of this article: The novelty lies in unifying physical-layer protection, firmware assurance, cryptographic identity, runtime proof, privacy-preserving blockchain certification, dashboard monitoring, and fail-secure response into a continuous integrity verification framework for EDC terminals.