Internet of Things (IoT) two-factor authentication using blockchain
Download as pptx, pdf3 likes344 views
This document discusses the application of enterprise Ethereum blockchains to enhance IoT communication security, focusing on multi-factor authentication and multi-party authorization methods. It highlights the security vulnerabilities in current IoT systems and proposes the use of blockchain technology to mitigate these risks, detailing various consensus algorithms and architectural considerations. The findings suggest that implementing such blockchain solutions can improve security even in partially compromised IT networks.
Internet of Things (IoT) two-factor authentication using blockchain
- 1. IoT Two Factor Authentication Using Blockchain David Hyland-Wood [email protected] 13 November 2019
- 2. Methods for Securing Spacecraft Tasking and Control via an Enterprise Ethereum Blockchain David Hyland-Wood, Peter Robinson, Roberto Saltini, Sandra Johnson, Christopher Hare
- 5. Abstract We discuss the applicability of enterprise Ethereum blockchains to the problem of IoT communication security, analyse the properties of blockchain consensus algorithms suitable for use with IoT devices, and suggest appropriate information architectures.
- 6. The Need for Improved IoT Security
- 7. “Some studies show that a mere 28% of IoT devices enjoy encryption, as do a mere 25% of IoT data repositories.” Chris Matyszczyk, ZDNet “45% (of surveyed enterprises) have an encryption strategy applied consistently across their enterprise.” 2019 Global Encryption Trends Study
- 10. Spotty ComSec Spacecraft and ground-based systems that control them are at risk of both active hacking and denial-of-service attacks. Although few spacecraft operators publicly acknowledge cybersecurity incidents, governmental transparency regulations in the United States have allowed evidence of some incidents to be acknowledged: ● attacks that led to unauthorised access to “networks that control spacecraft” at NASA JPL (NASA, June 2019) ● acknowledgement that U.S. Air Force satellites are “jammed by commercial equipment easily acquired by state and nonstate actors” (Air Force Research Institute, November 2011)
- 11. Blockchains as a proposed solution space
- 12. Credit: Wüst and Gervais, 2017
- 13. Credit: Wüst and Gervais, 2017
- 14. Proof of Authority Consensus Algorithms with Immediate Finality Algorithm Message traffic to/from satellite Change needed to onboard software Byzantine Fault Tolerant Resilience to lost messages Honey Badger O(n2) O(b) Yes No Tendermint O(n2) O(b) Yes No DBFT O(n2) O(b) Yes No Algorand1 O(n2) O(b) Not always No IBFT O(n2) O(b) Not always No IBFT 2.0 O(n2) O(b) Yes Yes n: number of nodes b: block size1 finality not guaranteed
- 16. (a) Devices as a regular blockchain node. (b) Devices as a mining (validator) blockchain node. (c) Devices may read from the blockchain. (d) Devices requests transactions to be written to the blockchain.
- 17. Comparison of blockchain-IoT device relationships Architecture Message traffic to/from IoT devices Change needed to existing onboard software Regular node High High Mining node High High Read-only Low Low to Medium Write request Low Medium
- 18. Multi-factor authentication & multi-party authorisation
- 19. a command is executed only if validatedA command is executed Using multi-factor authentication or multi-party authorisation: In common usage: a command is sent a command is sent command is validated via a blockchain read
- 24. (a) An operator proposes a command to be sent to a spacecraft. (b) Some number of automated processes (zero or more) confirm command syntax and perhaps applicability in the operational context. (c) Some number of humans (zero or more) confirm the command should proceed. (d) The smart contract sets the entry of the command approval table associated with the hash of the command to the Boolean value True. (e) The operator sends the command to the spacecraft. (f) The spacecraft hashes the command and verifies that the entry of the approval table associated with the hash is set to True. (g) The spacecraft executes the command if and only if the command verification was successful. NB: The blockchain nodes come to consensus after each write to any copy of the smart contract.
- 25. Results ● We analysed how existing IoT systems may improve their communication security by using blockchains for multi-factor authentication and/or multi-party authorisation. ● We then suggested specific blockchain properties to choose: ○ an enterprise Ethereum blockchain to implement multi-factor authentication, multi-party authorisation or both ○ via a smart contract ○ on a private or consortium network ○ with user permissions ○ and an IBFT 2.0 consensus algorithm.
- 26. Results ● We contend that such systems may be used in the presence of partially compromised IT networks.
- 27. IoT Two Factor Authentication Using Blockchain David Hyland-Wood [email protected] 13 November 2019
- 29. Acknowledgments 29 ● Cow: Image by Karsten Paulick (https://pixabay.com/users/Kapa65-61253/) via Pixabay. Free for commercial use under the Pixabay license. No attribution required. ● RFID tag on child’s wrist: U.S. Navy photo by Chief Journalist Al Bloom. US Government Work. https://www.doncio.navy.mil/chips/ArticleDetails.aspx?ID=3303 ● Emotion Recognition by Flickr user fotologic, CC-BY-2.0 license, https://www.flickr.com/photos/fotologic/23742687222 ● Barcode scanner: Wikimedia Commons user IAEA 3, CC BY-SA 2.0, https://commons.wikimedia.org/wiki/File:Package_tracking_barcode_scanner_3.jpg ● Ncipher 2019 Global Encryption Trends Study, https://go.ncipher.com/rs/104-QOX-775/images/2019-Ponemon-France-Encryption-Trends- Study-fr-ar.pdf ● Chris Matyszczyk, 1 in 5 IT security professionals fear their connected toilets will be hacked, October 15, 2019, https://www.zdnet.com/article/1-in-5-it-professionals-fear-their-connected-toilets-will-be-hacked/