Collaborative Access Control for IoT -- A Blockchain Approach

Yongtao Huang,I-Ling Yen,Farokh Bastani

2024-05-25

Abstract:The Internet of Things (IoT) necessitates robust access control mechanisms to secure a vast array of interconnected devices. Most of the existing IoT systems in practice use centralized solutions. We identify the problems in such solutions and adopt the blockchain based decentralized access control approach. Though there are works in the literature that use blockchain for access control, there are some gaps in these works. We develop a blockchain embedded access control (BEAC) framework to bridge the gaps. First, blockchain based solutions for access control require an enabling P2P network while existing P2P overlays do not support some required features. We develop a novel P2P infrastructure to seamlessly support our BEAC framework. Second, most of the works consider blockchain based access control for a single access control model, and we develop a generic blockchain mechanism and show that it can support the embedding of various access control models. Finally, existing works adopt existing blockchain mechanisms which may incur a high communication overhead. We develop a shortcut approach to improve the number of message rounds in the access protocol. Our experiments demonstrate the efficacy of our system, showing that the shortcut mechanism can reduces access time by approximately 43%.

Distributed, Parallel, and Cluster Computing,Cryptography and Security

What problem does this paper attempt to address?

The paper aims to address the access control issues in the Internet of Things (IoT). Existing IoT systems often rely on centralized solutions, which suffer from security and flexibility limitations. The paper proposes a Blockchain-based Embedded Access Control (BEAC) framework to overcome these issues. Specifically:

1. **Problem**: Centralized or vendor-specific access control methods in IoT lead to inflexibility and restrictions, and can potentially pose security risks.
2. **Solution**: The paper develops a BEAC framework that includes:
- Designing a novel peer-to-peer (P2P) infrastructure to support seamless device access across the Internet and local networks.
- Developing a generic blockchain mechanism capable of embedding multiple access control models to cater to the needs of different IoT domains.
- Proposing a protocol truncation to reduce the number of message rounds in the access protocol, resulting in performance improvement and reduction of access time by approximately 43%.

3. **Challenges and improvements**:
- Existing P2P networks do not support certain functionalities, so the paper constructs a new P2P infrastructure to support the BEAC framework.
- Most works only consider a single access control model, whereas the BEAC framework supports multiple models.
- The paper optimizes the blockchain protocol to reduce communication overhead.

4. **Structure**: The BEAC framework is divided into three layers, including the underlying internet infrastructure, P2P enhancement layer, and BEAC core layer, each handling different tasks such as P2P connectivity, identity verification, and access control.

In conclusion, this paper aims to solve the security access control issues of IoT devices through blockchain technology, providing a more flexible, secure, and efficient solution.