Modbus Access Control System Based on SSI over Hyperledger Fabric Blockchain

Abstract

Security is the main challenge of the Modbus IIoT protocol. The systems designed to provide security involve solutions that manage identity based on a centralized approach by introducing a single point of failure and with an ad hoc model for an organization, which handicaps the solution scalability. Our manuscript proposes a solution based on self-sovereign identity over hyperledger fabric blockchain, promoting a decentralized identity from which both authentication and authorization are performed on-chain. The implementation of the system promotes not only Modbus security, but also aims to ensure the simplicity, compatibility and interoperability claimed by Modbus.

DSMAC: Privacy-Aware Decentralized Self-Management of Data Access Control Based on Blockchain for Health Data

“…A holder keeps and shares the received credentials with a verifier. A verifier accepts and approves credentials presented by a holder [30].…”

Towards decentralized and scalable architectures for Access Control Systems in IIoT environments

“…To address the limitations of 4A, the 5A contribution (Fig. 1) design an Self-Sovereign Identity (SSI) system, over Modbus IIoT, that while maintaining the benefits achieved in 4A, solves the identity problems [7]. Therefore, 5A proposes an ACS based on SSI over HFB that, through a decentralized identity system, compliant with both DID standard and verifiable credentials, promotes, at the chaincode level, not only on-chain authentication, and authorization but also advanced operations such as signature verification, i.e., blockchain is again more than a VDR, it is an identity and access management system itself, which includes an ACS.…”

A secure and decentralized SSI authentication protocol with privacy protection and fine-grained access control based on federated blockchain

“…Users store their identity data locally on the device and provide the required information to those who need it for verification. With the development of blockchains [4,5], blockchain-based SSI authentication protocols [6][7][8][9][10]were proposed recently. In 2018, Gra ¨ther et al [6] applied blockchain-based SSI to education certificate management to prevent education certificate forgery; Soltani et al [7] proposed a selfsovereign identity model for users onboarding on blockchain.…”

“…In 2018, Gra ¨ther et al [6] applied blockchain-based SSI to education certificate management to prevent education certificate forgery; Soltani et al [7] proposed a selfsovereign identity model for users onboarding on blockchain. In 2021, Abraham et al [8] introduced a SSI model utilizing identity wallets to ensure that the identity data control remains with the related user; Aruna et al [9] used a secure data migration to and from the cloud using SSI which facilitates peer-to-peer transactions; Figueroa-Lorenzo et al [10] presented a solution based on self-sovereign identity on hyperledger fabric blockchain. However, these current SSI authentication protocols pay little attention to privacy protection and the fine-grained access control of identity information.…”