Abstract:With opportunities brought by the Internet of Things (IoT), it is quite a challenge to maintain concurrency and privacy when a huge number of resource-constrained distributed devices are involved. Blockchain have become popular for its benefits, including decentralization, persistence, immutability, auditability, and consensus. Great attention has been received by the IoT based on the construction of distributed file systems worldwide. A new generation of IoT-based distributed file systems has been proposed with the integration of Blockchain technology, such as the Swarm and Interplanetary File System. By using IoT, new technical challenges, such as Credibility, Harmonization, large-volume data, heterogeneity, and constrained resources are arising. To ensure data security in IoT, centralized access control technologies do not provide credibility. In this work, we propose an attribute-based access control model for the IoT. The access control lists are not required for each device by the system. It enhances access management in terms of effectiveness. Moreover, we use blockchain technology for recording the attribute, avoiding data tempering, and eliminating a single point of failure at edge computing devices. IoT devices control the user’s environment as well as his or her private data collection; therefore, the exposure of the user’s personal data to non-trusted private and public servers may result in privacy leakage. To automate the system, smart contracts are used for data accessing, whereas Proof of Authority is used for enhancing the system’s performance and optimizing gas consumption. Through smart contracts, ciphertext can be stored on a blockchain by the data owner. Data can only be decrypted in a valid access period, whereas in blockchains, the trace function is achieved by the storage of invocation and the creation of smart contracts. Scalability issues can also be resolved by using the multichain blockchain. Eventually, it is concluded from the simulation results that the proposed system is efficient for IoT.

An automatized Identity and Access Management system for IoT combining Self-Sovereign Identity and smart contracts

Secure IoT access at scale using blockchains and smart contracts

A secure blockchain-enabled vehicle identity management framework for intelligent transportation systems

An Attribute-Based Access Control for IoT Using Blockchain and Smart Contracts

Smart Contract-Based Access Control for the Internet of Things

Secure Ownership Management and Transfer of Consumer Internet of Things Devices with Self-sovereign Identity

A decentralized lightweight blockchain-based authentication mechanism for Internet of Vehicles

SmartDID: A Novel Privacy-preserving Identity based on Blockchain for IoT

Blockchain-Based Access Control and Behavior Regulation System for IoT

An Interoperable Blockchain Security Frameworks Based on Microservices and Smart Contract in IoT Environment

Blockchain-Based IoT Access Control System: Towards Security, Lightweight, and Cross-Domain

UniquID: A Quest to Reconcile Identity Access Management and the Internet of Things

Self-Sovereign Identity: Use-cases, Technologies, and Challenges for Industrial IoT

Dynamic Access Control and Trust Management for Blockchain empowered IoT

Identity Identification and Management in the Internet of Things

Blockchain-Assisted Secure Intra/Inter-Domain Authorization and Authentication for Internet of Things

SIoT identity management with the ability to preserve owner privacy and built‐in resistance to Sybil attacks

A Comparative Survey on Blockchain Based Self Sovereign Identity System

A Systematic Comparison between the Ethereum and Hyperledger Fabric Blockchain Platforms for Attribute-Based Access Control in Smart Home IoT Environments

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things

DIdM-EIoTD: Distributed Identity Management for Edge Internet of Things (IoT) Devices