SDIdA-IoT: self-sovereign digital identification and authentication framework for IoT devices using blockchain
摘要
The Self-Sovereign Digital Identification and Authentication Framework harnesses blockchain’s decentralized and immutable architecture to empower IoT devices with secure, autonomous identities thus redefining trust and scalability in connected environments. Digital identification and authentication of IoT devices face many challenges due to the unique characteristics of IoT ecosystems. Unauthorized and malicious access to IoT devices remains a primary concern, undermining privacy and security. We proposed a novel Self-Sovereign Digital Identification and Authentication Framework for IoT Devices (SDIdA-IoT) using Blockchain to overcome the security threats related to the identity and credentials of IoT devices. The existing blockchain-based frameworks depend on heavy cryptographic techniques and centralized authority for authentication. The SDIdA-IoT is a decentralized Self-Sovereign model wherein IoT devices are inherently self-interested (autonomous) in managing their identities. SDIdA-IoT integrates ECCPAES (Elliptical Curve Cryptography Polymorphic Advance Encryption Standard) with XECDSA (Extended Elliptical Curve Digital Signature Algorithm) to provide secure communication and authentication of IoT devices in resource-constrained environments. ECCPAES offers better resistance to brute force and man-in-the-middle attacks, while XECDSA provides robust data integrity and authenticity. This framework is designed to utilize the Ethereum blockchain, wherein smart contracts allow the open and decentralized registration, authentication, and attestation of devices in a self-sovereign, autonomous, and tamper-proof environment. Our SDIdA-IoT framework performs better than other existing models like SCAB-IoT, etc. The computational cost, storage cost, and communication cost are reduced by 25%, 16%, and 7%, respectively, compared to SCAB-IoT and other frameworks like LSB, Fabric IoT, etc. Additional improvement is also noticed in transaction throughput, registration time, identification time, average authentication latency, signature generation, signature verification, etc. The framework effectively counters cyberattacks such as brute force, replay, and Sybil attacks, enhancing security across IoT ecosystems and providing efficient IoT authentication and identity management.