Abstract
The Internet of Things (IoT) is a new revolution defined by heterogeneous devices made up of intelligent, omnipresent items that are all hooked up to The internet. These devices are frequently implemented in different areas to offer innovative programs in various industrial applications, including intelligent urban, medicine, and societies. Such Internet of Things (IoT) equipment generates a large volume of private and safety information. Because IoT systems are resource-constrained in terms of operation, memory, and communication capability, safeguarding accessibility to them is a difficult task. In the blockchain concept, the majority, or even all network nodes, check the validity and accuracy of exchanged data before accepting and recording it, whether this data is related to financial transactions, measurements of a sensor, or an authentication message. In evaluating the validity of exchanged data, nodes must reach a consensus in order to perform a special action, in which case the opportunity to enter and record transactions and unreliable interactions with the system is significantly reduced. Recently, in order to share and access management of IoT devices’ information with a distributed attitude, a new authentication protocol based on blockchain has been proposed, and it is claimed that this protocol satisfies user privacy while preserving security. Today’s identification and authentication techniques have substantial shortcomings due to rapidly growing prevalence and implementation. As a result, the protection of such gadgets is critical to guarantee the program’s efficacy and safety. A decentralized authentication and access control method for lightweight IoT systems are proposed in this work and a blockchain-based system that enables identification and secures messaging with IoT nodes. The technique is built on fog information systems and the idea of a blockchain system; when contrasted to something like a blockchain-based verification system, the testing findings show that the suggested mechanism outperforms it. The authentication and verification system undergoes using the blockchain technique. Our method takes advantage of blockchain’s inherent advantages while also associated with development authentication systems. Our suggested blockchain-based approach, structure, and layout, in particular, provide for transparency, consistency, and provenance while also providing tamper-proof records. The article describes the general systems architectural style and the analysis and execution of a real scenario as just a prototype system. The authentication included give as protected prototype that can transmit data with secured protocol and achieves minimum error rate.
1. Introduction
IoT in many industries and formats may be installed everywhere. Such gadgets can talk with each other, acquire, share, and process data to provide a service [1]. Analysts at CISCO, Ericsson, as well as other organizations predict that by 2020, there will be more than 45 billion devices that are interconnected [2]. IoT is being used in a variety of industries, including household appliances, hospital instruments, and personal accessories. These gadgets must have particular qualities to enable such capability. They ought to be able to operate on a moderate energy basis and communicate with some other heterogeneous systems. They must also be capable of maintaining a steady connection with the back-end, if only one exists, and obtain updates as needed. The authentication method is a critical idea for managing system resources and connections in a secure manner. These categories should be reinterpreted in the IoT context compared to the previously indicated features. The issue of restricted resources must be considered in identification systems and authorization rules. According to a previous report issued by Gartner, the volume of interconnected devices could reach Twenty billion in 2019 [3]. IoT is already present in practically every aspect of life (for example, health and transportation), and numerous IoT programs simplify everyday tasks (i.e., home automation). Integrated recyclers, transportation infrastructure, smart grid, smart transportation, environmental sensing, traffic control, and a variety of other technologies are examples of these systems [4]. IoT systems produce a large amount of information, some of which could be sensitive. In intelligent medical systems, for instance, patient-attached devices create confidential information such as personal medical status [5, 6]. This information is then relayed to the clinic, where it is regularly checked to activate sirens in the case of emergencies. As a result, the privacy of this equipment, as well as the sensed data, is critical to ensuring the IoT program’s natural behavior, since all of the IoT program’s major decisions are dependent upon the collected data [7]. If a rogue device gains access to a Network infrastructure, it can destabilize the program’s regular function, resulting in severe consequences. Data processing [8], secrecy [9], authenticity [10], accessibility [11], and nonrepudiation [12] all seem to be aspects of IoT security. The authentication method, on the other hand, will be the first line of protection, limiting information exchange to those with appropriate rights. To preserve data integrity and security, secured IoT applications require an authentication process among IoT devices as well as other platforms. If not, these platforms would be subject to a range of security issues, including unauthorized access, theft of data, and information modification [13]. Blockchain technology may be divided into two categories, namely, permission less and permissioned (see below). A permissionless blockchain, often known as a public blockchain, is accessible to anybody who wants to use it. Despite the fact that it has enormous potential, similar to Bitcoin, it may not be suited for company owners that want to maintain control over the transaction processing system. Business processes may have special criteria and complicated procedures that necessitate the use of customizable solutions that limit the participation of outsiders in such processes. Aside from these issues, permissionless blockchain has other difficulties, including as scalability, regulatory institutions, and control over evolution. This has offered corporations the opportunity to investigate other possibilities, such as permissioned blockchain, which may be managed privately and can limit membership in the blockchain network to only those who are known and trusted. A permissioned blockchain, sometimes known as a private blockchain, is a kind of blockchain that has been granted permissions. This will completely change the way transactions are carried out in the future.
Bitcoin’s fundamental technique is known as blockchain technology [14]. A developing network of information could be characterized as it. The blockchain inherited effective properties by construction, such as decentralized, tamper-proof blocks containing information that may be viewed by every node equitably. This notion can be applied to any application that necessitates the validation of information or activities by a trustworthy 3rd person. The blockchain enabled all confidence to be transferred network by replacing the trusted third party with such an accessible, unmanipulated block of information that is accessible in a distributed form. The smart contract is indeed an efficient solution that makes use of blockchain technology. An auto or self-executing software had first been described as just a smart contract in 1996. The Ethereum blockchain has functionality such as activities and records. A response (returned value) first from the smart card towards the user interface that interacts with this is called an event. The basic purpose of using events and records is to make it easier for contracts and the programmed that interact with them just to communicate.
Blockchains features, such as increased dependability, the integrity of the information, and flexibility, make it an excellent solution for identification issues. Smart contracts, which provide fine-grained network access over IoT systems, can also be integrated with blockchain. Furthermore, fog computing as well as blockchain-based provides solid foundations for developing and managing decentralized confidence and safety solutions for time-critical fog-enabled IoT networks [15]. Likewise, the researchers of [16] demonstrated a successful and powerful collaborative fog-based IoT network platform. We suggest a delay-sensitive blockchain-enabled security authentication methodology for IoT networks, based on the properties of fog computing as well as the decentralized nature of blockchain. The following are indeed the article’s main factors that contribute: (1)A revolutionary decentralized technique that enables identification and security systems over IoT applications, allowing them to operate in a safe and trustworthy atmosphere(2)A proof-of-concept of the suggested technique demonstrates its capability to handle IoT security goals(3)Evaluation of the suggested mechanism’s effectiveness against a state-of-the-art IoT biometric identification
2. Related Works
The Ethereum blockchain has functionality such as events and logs. A response (returned data) from the contract to a user experience that interacts with it is called an event. The basic purpose of using events and logs is to make it easier for contracts as well as the programmed that interact with them to communicate. Figure 1 depicts an example Ethereum Smart Contract Application environment. The customer first asks the contract for accessibility to a certain commodity or commodity. Secondly, the software system determines whether the asset is available for use and then collects the payment first from the customer. In this case, the customer was paying with Ethereum, a digital currency. Finally, the contract keeps the resources reserved for the present client. Fourth, the customer makes appropriate use of the service. Afterward, assuming all of the contractual terms were followed, the smart contract would bill the client like promised. It is vital to remember that perhaps the contract is completely self-contained, and the proprietor is not participating in any of the 4 stages [17]. (1)The customer demands that the smart contract provide him access to a certain resource or item(2)The smart contract checks to see whether the asset is available and then records the fee received from the customer. In this particular example, the customer is making a payment using the cryptocurrency Ethereum(3)The smart contract ensures that the resource is only available to the present client(4)The customer makes use of the resource in accordance with its approval(5)If everything went according to the contract conditions, the smart contract will charge the customer the amount agreed upon by the parties
2.1. Blockchain
A distributed database, or blockchain, is a historical reminder of all activities processed and reviewed in the community. The blockchain is indeed a peer-to-peer technology that is decentralized in character. Every network device where blockchain has been used keeps a complete transaction record. Such blockchains refresh in real-time as each transaction is validated [18]. The blockchain is created to use as a bank transaction technology, but it was first implemented in Bitcoin. This unforgeability, decentralized structure, and fault-tolerant, on the other hand, make it suited for the cyber defense environment. There are now various security methods [19] that leverage blockchain-based that can provide fundamental security criteria to safeguard a service, like access controls. The number of blocks linked along with a hashing technique is recorded in the logbook. Every block is split into 2 parts, one of which presents the number of completed and verified operations. A medical chart, a money activity, or a communication systems signal are all examples of transactions. Various data formats are used to organize such systems. The reversed hashing technique is employed, for instance, in Merkel’s tree structure, with the center core hashing kept as the block identifier [20]. The data block is indeed the second element of the blocks, and it stores packet headers such as the transactional date stamp, block hashes, and previous block hash. As just a result, a hash-supported network is formed from a collection of existing blocks. The chain grows increasingly resistant to falsification because it grows longer. Furthermore, because all following blocks are connected via hashing, if a malevolent user wants to change or modify the operations of a block, then she must perform the same modifications throughout all blocks. Figure 2 depicts the blockchain’s general premise as it is deployed on the internet. In the blockchain, there are primarily types of nodes. The first sort of node is referred to as an inactive station or verifying node; so, it is responsible for holding and receiving block data, but it cannot develop new blocks or initiate transactions. The mining network is the second sort of network, and it may also build blocks and verify transactions. A multitude of consensus techniques was employed to verify new blocks and tie them towards the original network.
The consensus method allows nodes inside the blockchain system to agree upon the addition of a new block to a chain. Proof-of-work (PoW) is among the Bitcoin network’s consensus mechanisms. A mathematics riddle is introduced to the PoW method, that must be answered by mining nodes for a block to be validated. The puzzle’s complexity could be adjusted based on the mining node’s computational resources as well as the time required to verify new blocks. The PoW technique is utilized in contexts when computing power is not a constraint [21]. One of the key motivations for nodes to join as minors is that miners were compensated for contributing new transactions. Other consensual methods include the Proof-of-stack (PoS) method, Byzantine fault tolerance method [22], and the ripple method, in addition to PoW. The PoS methodology is suggested to resolve the constraints of the PoW technique. There are nodes termed forgers in the PoS process that validate new blocks. The forgers are chosen based on their current account and the amount of money they are willing to put in a stack. A staked node has a better likelihood of validating a block and adding this to the genesis blockchain. Ripple uses the XRP Ledger Consensus Protocol to reach networks consensus. Each node inside the ripple network maintains a Unique Node Listing (UNL), which is used in this technique. A data model called Candidates Set is used to batch all operations. To be included in the ledger, every transaction in the candidate set must receive 80 percent of the votes [23]. The protocol is low in energy consumption. It is, however, widely regarded as centralized because it involves a vote from the subset of nodes.
2.2. IoT Authentication Traditional Models
A model for establishing trust in the identity of IoT machines [24] and devices in order to protect data and control access when information travels over an unsecured network, such as the Internet, is called Internet of Things (IoT) authentication. In order for linked IoT devices and equipment to be trusted to defend against control orders from unauthorized people or devices, strong IoT authentication is required. Strong IoT authentication is required. A second benefit of authentication is that it prevents attackers from posing as IoT devices in the goal of gaining access to data stored on servers such as recorded conversations, photos, and other potentially sensitive information.
A basic way would be to have a login and password to log into every device. Since each registered person’s responsibilities and privileges are established and saved on the devices mostly by the administrator, this approach provides sufficient security controls (owner). This solution, unfortunately, generates significant expense but does not scalable because the client must identify every system separately [25]. Traditional IoT devices, such as IP cameras and Internet-connected home utilities, use this technology. A much more sophisticated alternative is to use single-sign-on technologies for authentication. Whenever OAuth2 is used as an authentication process, for example, individuals attempt to access devices by logging in to a trustworthy OAuth2 supplier. Google, Facebook, and other reputable third parties can be used [26]. The trustworthy entity allows access if they authenticate properly and then have the proper authorization. By identifying the trusted source, all devices administered by the same person can be accessible. Secondly, the client authorizes the application to interact with the authentication server, also known as the OAuth2 providers shown in Figure 3.
Because the user can access numerous entities by identifying a single entity, this method saves time and effort. In addition, the OAuth2 supplier is usually a reputable third party, making integration of such a system easier. At the same time, relying on a centralized organization increases the risk of one-time failures, which jeopardizes the reliability of the existing approach. Furthermore, if a user account or a central entity is hacked, then the whole system is hacked. Phishing, which has a high rate of success, is an important attack method that could cause this approach to fail [27]. Furthermore, spear-phishing efforts are becoming more intense, accurate, and intelligent in recent years, with the potential to fool even the most informed individuals.
3. Problem Definition
3.1. Authentication
The foundation of security in the Internet of Things is guaranteeing the authenticity of a device’s identification when it connects to the network [28]. Authentication is a network method for determining if a user has access to specific resources. There are three types of authentications: Knowledge, Ownership, and Rights.
3.2. Safety
Maintaining the stability of IoT devices ensures that the IoT is secure. It is still vulnerable to attacks from hostile users while performing the work due to software or system faults. To prepare for further penetration, the attacker will usually change the network entity to escape from a back door into the device and edit the device key configuration file [29], which interferes with the entire network. We monitor changes to vital data regularly to detect potential violations as soon as possible.
3.3. Presumptions
3.3.1. Verification of Registration
Use permit channels where the network administrator manages the authorization permissions. Anything that wants to connect to the network must first register in the blockchain. The permissions channel access control layer only allows devices with legal identifiers to store information in the blockchain [30].
3.3.2. Safe Route of Communication
Consider a safe connection to avoid intermediate attacks. As a result, no one else can intercept or change the messages. The accuracy of the data is the primary purpose of such a secure communication route [31]. The nodes can communicate with each other and verify the details precisely.
With the fast growth of voice control technology, improving the accuracy of speech recognition in many Internet of Things sectors has proven to be an intractable challenge to tackle. Because there are many different conversation situations, determining the context of a dialogue scene is a critical challenge for voice control systems to address. The fact, on the other hand, is that the amount of training data available for dialogue systems is always inadequate. In this study, we primarily address the issue of data scarcity in dialogue systems via the use of data augmentation techniques [32].
The example is carried out using collection of datasets from the Los Alamos National Laboratory enterprise network was used to gather network and computer (host) events. The Unified Host and Network Dataset was created from this collection of network and computer (host) events. The sample networks and attacks are collected from the dataset of unified Host and Network dataset [33].
3.3.3. Organization within a Short Timeframe
When a function is inserted in the blockchain, simply request the ledger of a less quantity of knots instead of a more quantity of knots. As the timing nodes are randomly selected, it can be assumed that they are reliable.
4. Proposed System Architecture and Design
This paper has presented a blockchain solution with a unique system design. This fills the gaps in current solutions. It should also be portable, unlike the block stack, and workover any network with minimum dependencies. It is designed for IoT devices with low computing capacity. It also proposes the idea to implement OAuth with a smart contract that allows users to connect once and control all approved devices without having to check-in for each IoT device separately. Smart contracts can also be executed by IoT equipment, allowing them to become self-sufficient. It will go through a series of testing on a working prototype, as well as the outcomes of those tests. The testing will include performance tests as well as attacks targeted against them. The use of Ethereum as the basis for this solution has several advantages. Ethereum has a strong development structure in place, as well as a built-in incentive for minors to help with hashing problems. Besides, the Ethereum lite client protocol can be used on IoT devices with little processing power and memory, which is necessary for the proposed solution. The process of verification is followed by authentication phase, verification phase, and security phase. When the user sends the request to the authentication, the request undergoes various processing under smart contract, and the security is checked at the security phase. Later, the verification is successful the person enable to access the data.
4.1. Assumptions
Here is a list of steps to implement such a solution. (i)One or more IoT devices are available to the user(ii)The user’s private key to the Ethereum key store has not been hacked(iii)The user belongs to the Ethereum network(iv)Ethereum blockchain links the user to the IoT device(v)User to implement their smart contract
The system’s total capabilities allow it to change the ultimate hypothesis. Building centralized smart contracts that authenticate users on individual IoT devices is conceivable. One of the goals of this section, however, is to avoid relying on a single source of data. Users should be encouraged to create their intelligent contracts so that they can exercise full control over their systems. Use an authorization route in which the permission privileges are managed by the network manager.
4.2. Architecture of the System
The phases of the authentication procedure are described in the message sequencing diagram in Figure 4. (1)The user authenticates his Ethereum wallet address to the smart contract. The input samples are taken in real time from the client side during the access of data(2)If the client is genuine, the smart contract provides the receiver an access token as well as the shipper’s Ethereum address. The intelligent contract data is accompanied by the client and the IoT tools(3)The user assembles a package that comprises information such as the user’s IP address, Ethereum public key, token access, and duration. The Ethereum private key is used to sign this package and is then sent with the relevant public key. If required, the package will be encrypted, and then there is no need for the protocol to work. Then it is the integrity of the message that matters; so, it is signed(4)When the delivery is received, the IoT gadget controls its contents. If successful, the device allows the user to access from the IP address of the sender for the period provided. Otherwise, the request is refused if one of these tests fails
4.3. Security in Authentication Phase
This phase is categorized by the Server Processing Unit (SPU). The input data from the -th input user is selected who needs the permission to access. The particular id of the user tends to be IDrm and belongs to the group of users with the id of GIDm.
The input Processing unit sends the signal to the Iot device using the verification code with the details of (IDrm, GIDm) to verify the authentication using smart contract and give the authentication access to the verified user. The 48 connections between the reader and the SPU take place via a secure channel and are accessible from a single location.
The computation of input is carried out as represented in equation (1)
The input broadcasted through the processing unit. The condition that authenticate the input user to the IoT devices is represented as the following equation (2): where equations (3) and (4)represent the tagging smart contract input to verify the authentication process using blockchain technology. where represents the sequence number of Ti, and Sg represents the group secret. Rm receives (NTj, QTj, rTj) from the tag , thanks to the reader Rm. The reader can only extract ei if and only if NTj is legitimate, in which case .
Similarly, it accumulates the information from all of the tags associated with the group until the timer expires or the group is deleted. The reader then delivers the information (IDrm, GIDm,, e1, e2,..., ej) to the SPU through a secure communication channel. This is done by comparing the received information and responses (IDrm, GIDm,, Re1, Re2, Re3), where re1, Re2, and Re3 are pseudorandom numbers that are created for each tag individually. The reader maintains a record of critical information required for authentication in its memory.
In order to connect with the initial tag, the reader establishes a Temp ID for each tag in the group. The reader Rm computes and ( T1 IDRm) using the formulas and TempIDT1. Group g receives (QT1, TempIDT1, First, re1) from the reader and is assigned to the first tag in the group. In addition, the tag computes TempIDT1 and compares it to the one that was received. and are computed by the tag and sent to the reader in the form of (TempIDT1, CT1, ZGIDg) to the reader. As soon as CT1 is determined to be genuine, the reader transmits the following tags to the next tag in the group: (QT2, TempoIDT2, ZGIDg, re2). Reader has private secret knowledge about all of the active tags after obtaining the specifics of all of the tags in the group or after the time out.
4.4. Verification Phase of the System
In order to activate tags, the reader provides the following information to BPS: (IDrm, GIDm, , e1,...eq), where e1,...eq are the sequence numbers of the active tags. If certain tags are successfully validated, the presence of the object is confirmed. With this information, BPS is notified of any tags that are not verified successfully.
4.5. Input Attack
Algorithm 1 explains how to extract the group secret Sg from the given parameters and how to do it effectively. Assume that the attacker has obtained a copy of all of the communications sent between the tags and a reading device. Let and rTj be the bit vectors of length l for the reader and the -th tag, respectively, where is the number of readers and tags. The group secret Sg has a length of l characters, and .
The attack rate may happen based on the input criteria shown in equation (5):
Using the recognizability rule in conjunction with the assumption ,
Freshness rule is explained in equation (7):
As long as thinks that is new, tag has every right to believe that any formula in which is a component is likewise new. As a result, is accomplished.
The aim is shown to be effective in ensuring that the reader feels that the tag communicated and is current. Using the assumptions AR5 and the possession rule , this may be shown in a manner similar to that of the objective . As a bonus, this assures that the message did not come from the reader. In order to demonstrate , we must first apply .
Using the parser output and the previous step result, we apply and obtain
Applying , we get
The cloud server authenticates the reader and retrieves the OID, which is subsequently used to get more information from the database.
5. Model of the System
Blockchain can accommodate complex and evolving conditions as an accessible, secure, and decentralized consensus system for transactions. The stability of the application was not impaired by the breakdown of some units. Malware nodes cannot infiltrate the network through distributed authentication. The registry will not be modified even if a few nodes are hacked.
Whenever a new device is added to a multinode network, the device credentials must be stored in the blockchain. For each device, the blockchain ledger contains the user’s IP address, Ethereum public key, token access, duration, and other data. There are three steps for system operation. All equipment must follow the blockchain registration process before it can be authenticated.
If a device needs to join the network, the information recorded in the blockchain will be used to authenticate it. Following authentication, the integrity of a device’s vital information hash will be checked to detect possible intrusion activities. Figure 5 shows how our system works, while Figure 6 shows the system model.
5.1. Node Functions
Based on the different goals of the permissions chain, nodes can be classified as consensual or nonconsensual. Consensus nodes take part in the consensus process, generate blocks, and send them to nodes that disagree. Table 1 shows the responsibilities of the two types of nodes.
5.2. Registration of Appliances
All nodes in the Internet of Things must be recorded using the blockchain. Each device generates a pair of keys based on its security key module. The private information is stored on the device and encryption, while the public key is stored on a blockchain ledger. The consensus nodes treat data information as a recording occurrence, resulting in the formation of blocks. During the registration system, it must preserve the hash value of vital data in the blockchain, such as the local configuration file and firmware, to prepare for eventual data security certification.
Blockchain-based solutions may offer tamper-proof records as well as decentralization, which can be used to augment existing methods of recording. This paper-based smart contract-based approach may be utilized for the authentication and access control of Internet of Things devices. As a result of being created and executed in real-world circumstances utilizing readily accessible devices and technology, the solution has the advantage of being readily deployable as required. The technique was effective in allowing genuine users to access their IOT devices once they were validated. Aside from that, it was impervious to well-constructed assaults that attempted to hijack genuine sessions and brute force credentials.
5.3. A Technique of Peer-to-Peer ID Verification
Assuming that sends a request to connect to on a network, which includes the message, the authentication of the identifier is as follows.
| ||||||||||||||||||||
When receives the message, it uses ’s ID to look for ’s public key in the local blockchain ledger. If ’s public key is discovered in a local blockchain ledger, it can be used to verify ’s identity. , on the other hand, looks for consensus nodes for ’s public key. If ’s public key is obtained, certifies ’s identity. Otherwise, is not a member of the blockchain system, and will decline ’s connection request. The P2P authentication technique is shown in Algorithm 1.
The hash of critical information from every equipment device was preserved in the blockchain during the logging procedure. While performing a task, IoT nodes transmit a critical data integrity check request to the nearest unit. If the verification fails, a critical configuration file has been changed, and a warning has been given. After hashing the data, the information obtained and log records made by the tools during the process of the work can be accompanied to blockchain for protection and security auditing. Aside from firmware and IoT device configuration, the files are important.
6. Implementation
6.1. Environmental Deployment
We decided to use the IoT application script for authorization. Using the open-source Hyperledger Fabric program, we created a blockchain network using the Raspberry Pi. Every Raspberry Pi joins the blockchain network as a node, with units joining in a random sequence.
Depending on the multichannel and route technologies, blockchain may be separated into various subnets, and IoT units can create a variety of subnets based on business needs. When a subnet interacts with another subnet, there are no distractions. The topology of a blockchain system is seen in Figure 7.
The blockchain is a distributed ledger that keeps all transactions across the whole blockchain network. The data arrangement of blocks is the same as that of Bitcoin. Transactions, on the other hand, are events like equipment registration, authorization, and identity checks. The data arrangement of the block is shown in Figure 8.
6.2. The Chain’s Transactions
Transactional operations serve as the link between peripherals and blockchain. 3 varieties of transactions were identified by smart and intelligent contracts. Intelligent contracts take requests from devices and respond by doing various blockchain actions, like reading and writing, in response to those needs. The relationship inbetween the equipment and the blockchain is depicted in Figure 9.
6.3. Key Generation Technique Based on CRG
Each IoT device consists of a pair of keys: a private key and a public key. The two keys are used to identify the device. The public key can be created using the elliptical multiplying curve and a private key is a random number.
Finding an entropy generator that is secure and reliable is the most essential stage in generating the private key. A cryptographically pseudointellectual number generator is commonly used as a randomized resource to guarantee that the production of selected random data is unpredictable or nonrepetitive. CRG constructs cryptographic hash functions using a pseudorandom number generation. CRG constructs secure cryptography pseudorandom numbers including additional pseudorandom capabilities, as opposed to statistics and smaller pseudorandom numbers generators. We collect various IoT device information, such as storage utilization status, disc space available, I/O, the amount of operation, and CPU speed, to generate an estimated random seed in our system.
The public key may be calculated using the private key thanks to the elliptical curve steps. The equation is irreversible. Here, is indeed the private key, seems to be the constant point of the generating point, and is the public key of the generating point. If the public key is established, determining the correct key by vigorously testing including all possible values to obtain the private key is exceedingly tough. Figure 10 shows how to create the keys. The information’s security is verified by the blockchain.
To sign a file, blockchain uses distributed ledger technology rather than traditional file signatures. Data falsification and theft are nearly impossible. The file storage system within the blockchain is depicted in Figure 11. Files are first saved as hash values, which are then added together to form the hash. This procedure is carried out until a root hash value is discovered. Merkle Tree is the name given to the generated database table (hash tree). To sign a file, the hashed route from every file towards the root hashes is needed.
It is only necessary to overwrite the hash record in the signature route when checking the integrity of a file. After then, compare the new hash value to the original hash.
6.4. Performance Analysis
Throughput and latency are system performance indicators that are mostly dependent on the Hyper ledger Fabric blockchain platform; hence, these details will not be detailed here.
The PBFT (Practical Byzantine fault tolerance) provides for the detection of anomalous behavior and the synchronization of data in the ledger to achieve blockchain network coherence. The strength of PBFT is critical to the safety of our system. The number of miners (offending nodes) in a Byzantine fault tolerance system with nodes is , as long as . The arrangement will expire in a certain amount of time, and the loyalty party (honest nodes) will finally reach an agreement shown in Figure 12.
The ideal situation was evaluated initially, once the solution prototype had been successfully tested. With the help of his or her MIST Ethereum client, an authorized user invokes the smart contract function: login admin. The smart contract delivers the authentication token as well as the user’s Ethereum address to both the user and the IOT device at the same time, saving time and effort. In the test, the first step was finished in less than 4 seconds on a private blockchain, according to the results. The user then establishes a connection with the IOT device by submitting the authentication package.
Figure 13 represents the authentication system inputs. By running a few malicious attacks on the IOT authentication script, it was discovered that it was possible to bypass the verification procedures. The following malicious attacks were tested:
Because the attacker’s source IP must match the source IP specified in the signed authentication message, a replay attack was unsuccessful, attempting to modify the signed authentication message failed because the script checks the signature of the message.
Due to the fact that the public key should point to the Ethereum address of a genuine user, injecting the attacker’s own authentication package resulted in an error.
Figure 14 represents the authentication system in the proposed blockchain technology. A man-in-the-middle may be able to smell outgoing authentication packets if he gets close enough.
However, the integrity of the signed authentication message is safeguarded since he or she is unable to change it.
In terms of security, our technology offers the following advantages. (1)Prevent malicious nodes from gaining access. We use a string of permissions to perform peer-to-peer authentication, and the access control layer effectively prevents dangerous nodes from entering(2)The ability to withstand DDoS attacks. The suggested system is decentralized, as all nodes share a register. Even if certain nodes are under DDoS attack, the system will continue to function(3)Close the back door in the firmware. We store important data hash values such as firmware and configuration files on the blockchain because of its inviolable nature. Any node on a network can check the integrity of a piece of data and find the firmware back door instantly
The next stage is to compare the suggested solution to prior solutions that have been offered in order to ensure that it is of high quality. The assessment measure is based on whether or not the supplied authentication method was able to resolve issues that had arisen with the previous authentication mechanisms that had been suggested for IOT devices. The evaluation metrics are more explicitly established in this comparison than in the previous one. Availability is defined as the removal of the bottleneck and the capacity to operate without a single point of failure. The term “scalability” is used to describe the additional overhead that occurs as new devices are added to the application’s use. Decentralization refers to the capacity of an authentication application to operate without relying on a central entity that, if disrupted, may cause the system to malfunction. Tamper proofing is the guarantee that stored data and transactions will not be tampered with after they have been recorded in the system’s log files.
7. Conclusions and Future Work
We looked at the cons of classic IoT for identification and security services in this article. We also presented a blockchain paradigm for IoT security and authentication. The system’s implementation was also described in length. In addition, to test the proposed system, we are developing a prototype system based on Hyperledger Fabric. In comparison to other research, ours has the advantages of being generic and simple. It is appropriate for deployment on lightweight tools such as the Internet of Things due to its minimal implementation cost. Furthermore, the multichain structure adds an extra layer of security between distinct regions of trust. The focus of future work will be on integrating vast amounts of IoT data with traditional blockchain-based financial transaction data.
| ||||||||||||||||||||||||||||||||
Data Availability
The data used to support the study are included within the article.
Conflicts of Interest
The authors of this manuscript declared that they do not have any conflict of interest.