Harnessing the power of blockchain technology to solve IoT security &amp; privacy issues

Ouaddah, Aafaf; Elkalam, Anas Abou; Ouahman, Abdellah Ait

doi:10.1145/3018896.3018901

Cited by 27 publications

(19 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…FairAccess is an access control framework based on smart contracts, Blockchain, and token‐based access. The smart contracts are used to trade fulfillment of access control policies for access tokens using the Blockchain.…”

Section: Related Workmentioning

confidence: 99%

ControlChain: A new stage on the IoT access control authorization

Pinno

Grégio

Bona

2019

Concurrency and Computation

View full text Add to dashboard Cite

The IoT is changing the way we interact with the world. Very soon, almost all of our daily tasks will be made through self intelligent systems embedded in devices scattered all around us. Their mission is to turn our cities, transportation systems, buildings, homes, and bodies in smart environments. These environments will bring us more comfort, improve our performance, increase our profits, and take away time-consuming tasks. However, besides its great benefits, the IoT is also a big source of concerns, mainly because a good part of its devices will handle private and confidential information. Recently, cases of successful IoT invasions only worsen this scenario and show us that the today's adopted access control systems need to be replaced by more efficiently and secure ones. To overcome these access control problems, in this work, we present the ControlChain. The ControlChain is an access control authorization architecture that is heavily based on Blockchain technology. We also demonstrate the viability of the ControlChain through the E-ControlChain, a proof-of-concept developed to run over the Ethereum network.Our proposals follows the IoT tendency requirements and are user-transparent, user-friendly, fully decentralized, scalable, fault tolerant, and compatible with a wide range of today's access control models already used in the IoT. Finally, we also make a cost and a performance analysis of E-ControlChain, using a Raspberry Pi as an IoT device.

show abstract

Section: Related Workmentioning

confidence: 99%

ControlChain: A new stage on the IoT access control authorization

Pinno

Grégio

Bona

2019

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Maybe, the most similar work to our proposal is the FairAccess [18,4,38]. It is defined as an IoT access control framework based on smart contracts, Blockchain and token-based access.…”

Section: Blockchain-based Access Controlmentioning

confidence: 99%

“…They were chosen because, with minor additions, they bring compatibility with a large variety of access control models and mechanisms already used in the IoT [14], like RBAC [25,26,27,28], ABAC [29], UCON [30], CapBAC [31,32,33,34], ACL [15,16,20] and others [35,36,37]. It can also be extended to support token-based access, working in a similar way to FairAccess [38], however this feature is not implemented yet. Finally, we expose the theoretical analysis of ControlChain, a result of tests running E-ControlChain in IoT devices and its security analysis.…”

Section: Introductionmentioning

confidence: 99%

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

Pinno

Grégio

Bona

2017

GLOBECOM 2017 - 2017 IEEE Global Communications Conference

140

View full text Add to dashboard Cite

“…We think that using a Turing‐complete scripting language such the one used in Ethereum will enable our framework to transcode more complex and granular access control model. The use of SmartContract instead of scrinpting language in FairAccess will be explored in .…”

Section: Resultsmentioning

confidence: 99%

“…Then, in this version, access control conditions are exppressed by scripting language. However, the feasibility of using Smartcontract in our framework will be explored in . Authorization token: In our FairAccess framework, we define an Authorization Token as a digital signature that represents the access right or the entitlement defined by the creator of the transaction to its receiver in order to access a specific resource identified by its address. We introduce this authorization token as a new field stored on the blockchain as data, encrypted using the in‐built cryptocurrency public/private key mechanisms.In fact, the token‐based access control enforced by the blockchain technology provides many advantages in IoT context.…”

Section: Fairaccess's Om‐am Reference Modelmentioning

confidence: 99%

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

Ouaddah

Elkalam

Ouahman

2016

Security Comm Networks

Self Cite

570

275

View full text Add to dashboard Cite

Security and privacy are huge challenges in Internet of Things (IoT) environments, but unfortunately, the harmonization of the IoT-related standards and protocols is hardly and slowly widespread. In this paper, we propose a new framework for access control in IoT based on the blockchain technology. Our first contribution consists in providing a reference model for our proposed framework within the Objectives, Models, Architecture and Mechanism specification in IoT. In addition, we introduce FairAccess as a fully decentralized pseudonymous and privacy preserving authorization management framework that enables users to own and control their data. To implement our model, we use and adapt the blockchain into a decentralized access control manager. Unlike financial bitcoin transactions, FairAccess introduces new types of transactions that are used to grant, get, delegate, and revoke access. As a proof of concept, we establish an initial implementation with a Raspberry PI device and local blockchain. Finally, we discuss some limitations and propose further opportunities.

show abstract

Harnessing the power of blockchain technology to solve IoT security & privacy issues

Cited by 27 publications

References 7 publications

ControlChain: A new stage on the IoT access control authorization

ControlChain: A new stage on the IoT access control authorization

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

Contact Info

Product

Resources

About