IoTPatchPool: Incentivized delivery network of IoT software updates based on proofs-of-distribution

Leiba, Oded; Bitton, Ron; Yitzchak, Yechiav; Nadler, Asaf; Kashi, Davidoz; Shabtai, Asaf

doi:10.1016/j.pmcj.2019.04.010

Cited by 11 publications

(10 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, the wallets need to be provisioned, causing additional transactions on the blockchain. IoTPatchPool [30] presents another blockchain-based patch delivery network with an incentive for every successful delivery. The patch distribution is done via a distributed storage network like BitTorrent, while the blockchain network handles the security guarantees and incentives.…”

Section: General Architectures For Iot Patchingmentioning

confidence: 99%

“…We also describe the requirements related to the entities. The general architecture is based on the work presented in [30].…”

Section: Preliminarymentioning

confidence: 99%

“…Lee et al [29] propose a cryptocurrency incentive mechanism for encouraging a network of distributor networks to deliver patches to destination IoT devices. Leiba et al [30] propose a similar approach to [29], but with an efficient distribution mechanism. Both proposals enable a fair exchange of authenticated software updates and cryptocurrency payments.…”

Section: Introductionmentioning

confidence: 99%

“…https://bitinfocharts.com/comparison/bitcointransactionfees.html. IoTPatchPool [30] analyzed per-device fees to be around 10 cents. (ii) Latency: The delay caused due to the required number of block confirmation prevents the solution from scaling.…”

Section: Introductionmentioning

confidence: 99%

“…Patch size limitations: the IoTPatchPool [30] framework relies on the ZKCP protocol, which is limited in its current implementation for 55 kB.…”

mentioning

confidence: 99%

See 4 more Smart Citations

P4UIoT: Pay-Per-Piece Patch Update Delivery for IoT Using Gradual Release

Tapas

Yitzchak

Longo

et al. 2020

Sensors

Self Cite

View full text Add to dashboard Cite

P 4 UIoT—pay-per-piece patch update delivery for IoT using gradual release—introduces a distributed framework for delivering patch updates to IoT devices. The framework facilitates distribution via peer-to-peer delivery networks and incentivizes the distribution operation. The peer-to-peer delivery network reduces load by delegating the patch distribution to the nodes of the network, thereby protecting against a single point of failure and reducing costs. Distributed file-sharing solutions currently available in the literature are limited to sharing popular files among peers. In contrast, the proposed protocol incentivizes peers to distribute patch updates, which might be relevant only to IoT devices, using a blockchain-based lightning network. A manufacturer/owner named vendor of the IoT device commits a bid on the blockchain, which can be publicly verified by the members of the network. The nodes, called distributors, interested in delivering the patch update, compete among each other to exchange a piece of patch update with cryptocurrency payment. The pay-per-piece payments protocol addresses the problem of misbehavior between IoT devices and distributors as either of them may try to take advantage of the other. The pay-per-piece protocol is a form of a gradual release of a commodity like a patch update, where the commodity can be divided into small pieces and exchanged between the sender and the receiver building trust at each step as the transactions progress into rounds. The permissionless nature of the framework enables the proposal to scale as it incentivizes the participation of individual distributors. Thus, compared to the previous solutions, the proposed framework can scale better without any overhead and with reduced costs. A combination of the Bitcoin lightning network for cryptocurrency incentives with the BitTorrent delivery network is used to present a prototype of the proposed framework. Finally, a financial and scalability evaluation of the proposed framework is presented.

show abstract

Section: General Architectures For Iot Patchingmentioning

confidence: 99%

“…We also describe the requirements related to the entities. The general architecture is based on the work presented in [30].…”

Section: Preliminarymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

“…Patch size limitations: the IoTPatchPool [30] framework relies on the ZKCP protocol, which is limited in its current implementation for 55 kB.…”

mentioning

confidence: 99%

See 3 more Smart Citations

P4UIoT: Pay-Per-Piece Patch Update Delivery for IoT Using Gradual Release

Tapas

Yitzchak

Longo

et al. 2020

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

Patchman: Firmware Update Delivery Service Over the Blockchain for IoT Environment

Oktian,

Jo,

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Security-enhanced firmware management scheme for smart home IoT devices using distributed ledger technologies

Wijesundara,

Lee,

Tith

et al. 2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

With the increase of IoT devices generating large amounts of user-sensitive data, improper firmware harms users’ security and privacy. Latest home appliances are integrated with features to assure compatibility with smart home IoT. However, applying complex security mechanisms to IoT is limited by device hardware capabilities, making them vulnerable to attacks. Such attacks have recently become frequent. To address this issue, we developed a secure verification mechanism for firmware released by the device’s manufacturer. We proposed an IoT gateway for secure firmware verification and updating for smart home IoT devices utilizing the IOTA MAM (Masked Authenticated Messaging) protocol and a distributed file system with IPFS (Inter-Planetary File System) protocol. These two communication protocols ensure decentralized communication and firmware file distribution between the IoT device vendor and the IoT end device. The proposed scheme securely shares latest firmware content over IOTA and IPFS networks, performs a secure firmware update on IoT end devices and ensures authenticity and integrity of the firmware. Two types of validation methods were proposed for firmware updating and validation. We implemented the proposed scheme using three entities, Vendor, IoT gateway, and IoT end device. Our system yielded promising results in performing secure automated firmware updates on IoT end devices with very low computational power. The system’s functionality was implemented using IOTA’s MAM run on Raspberry Pi as an IoT gateway along with an ESP8266 Wi-Fi microcontroller, demonstrating the effectiveness of our approach. Our proposed methodology can be used for secure firmware distribution on home IoT applications.

show abstract

IoTPatchPool: Incentivized delivery network of IoT software updates based on proofs-of-distribution

Cited by 11 publications

References 27 publications

P4UIoT: Pay-Per-Piece Patch Update Delivery for IoT Using Gradual Release

P4UIoT: Pay-Per-Piece Patch Update Delivery for IoT Using Gradual Release

Patchman: Firmware Update Delivery Service Over the Blockchain for IoT Environment

Security-enhanced firmware management scheme for smart home IoT devices using distributed ledger technologies

Contact Info

Product

Resources

About