Abstract:<p>In recent years, with the rapid development of smart city, prevalent pub/sub (publish/subscribe) streaming systems have been increasingly employed as upstream middleware layer in multi-tenant edge clouds, and feed large volume of data gathered from IoT devices of different tenants into downstream systems (e.g., data analytics and warehouse). A shared tenancy model where multiple untrusted applications or tenants utilize the same pub/sub system is generally exploited in edge cloud, which poses crucial challenges including privacy-sensitive data/metadata access threat and critical metadata modification by unauthorized tenants. A centralized monitoring node is invariably adopted in existing security strategies (such as ACL, TLS), which causes the pub/sub streaming model vulnerable to external malicious attacks and single point failure.</p><p>In this paper, inspired by outstanding features of blockchain including tamper-resistance, decentralization, strong consistency, and traceability, we propose BPS, a general and decentralized Blockchain-enhanced Pub/Sub communication model for multi-tenant edge cloud, to redesign pub/sub system internal security mechanisms. Specifically, by exploiting blockchain technology, BPS can detect the illegal operations and behaviors from both malicious tenants and untrusted publishers or subscribers. BPS directly leverages Merkel Hash Tree (MHT) of blockchain to verify the integrity of critical and confidential metadata. Regarding authorization, BPS introduces smart-contract-enabled fine-grained control over partition topic-classified messages by storing access control list (ACL) into an append-only blockchain ledger. Additionally, an incentive mechanism is employed in BPS to reward honest publishers and subscribers. We implement BPS prototype based on Kafka and EoS blockchain. Our security analysis and extensive experiments demonstrate that BPS outperforms the state-of-the-art pub/sub streaming system Kafka in security with minimal performance overhead.</p>

HyperPubSub: Blockchain based Publish/Subscribe

Power Trading Model for Distributed Power Generation Systems Based on Consortium Blockchains

Graph-pubsub

Trinity: A Distributed Publish/Subscribe Broker with Blockchain-based Immutability

PubChain: A Decentralized Open-Access Publication Platform with Participants Incentivized by Blockchain Technology

HyperService: Interoperability and Programmability Across Heterogeneous Blockchains

A Blockchain-Based Semi-Centralized Business System for Multi-Enterprise

A blockchain-based privacy protecting framework with multi-channel access control model for asset trading

Hyperledger Fabric: A Distributed Operating System for Permissioned Blockchains

Permissioned blockchain technologies for academic publishing

A P2P Surplus Energy Trade Among Neighbors Based on Hyperledger Fabric Blockchain

BPS: A reliable and efficient pub/sub communication model with blockchain-enhanced paradigm in multi-tenant edge cloud

A peer-to-peer approach to large-scale content-based publish-subscribe

Leveraging Public-Private Blockchain Interoperability for Closed Consortium Interfacing

Truck Platooning Aided Secure Publish/Subscribe System Based on Smart Contract in Autonomous Vehicular Networks

Peer-to-peer Energy Trading Based on a Hybrid Blockchain System

Secure Heterogeneous Multi-Robot Collaboration and Docking with Hyperledger Fabric Blockchain

An Implementation of Content-Based Pub/Sub System via Stream Computation

Galaxy: A Scalable BFT and Privacy-Preserving Pub/Sub IoT Data Sharing Framework Based on Blockchain

Equibit: A Peer-to-Peer Electronic Equity System

Reliable, Fair and Decentralized Marketplace for Content Sharing Using Blockchain