CoChat
Sign Up
Cited by 124Blockchain Technology Applications and SecurityAccess Control and TrustIoT and Edge/Fog Computing

Trust-Based Blockchain Authorization for IoT

Open access
Putra, Guntur Dharma, Dedeoglu, Volkan, Kanhere, Salil S., Jurdak, Raja, Ignjatovic, Aleksandar·2021·IEEE Transactions on Network and Service Management
DOI 10.1109/tnsm.2021.3077276
Open this paper in CoChat — free accountOpen PDF

Abstract

Authorization or access control limits the actions a user may perform on a computer system, based on predetermined access control policies, thus preventing access by illegitimate actors. Access control for the Internet of Things (IoT) should be tailored to take inherent IoT network scale and device resource constraints into consideration. However, common authorization systems in IoT employ conventional schemes, which suffer from overheads and centralization. Recent research trends suggest that blockchain has the potential to tackle the issues of access control in IoT. However, proposed solutions overlook the importance of building dynamic and flexible access control mechanisms. In this paper, we design a decentralized attribute-based access control mechanism with an auxiliary Trust and Reputation System (TRS) for IoT authorization. Our system progressively quantifies the trust and reputation scores of each node in the network and incorporates the scores into the access control mechanism to achieve dynamic and flexible access control. We design our system to run on a public blockchain, but we separate the storage of sensitive information, such as user’s attributes, to private sidechains for privacy preservation. We implement our solution in a public Rinkeby Ethereum test-network interconnected with a lab-scale testbed. Our evaluations consider various performance metrics to highlight the applicability of our solution for IoT contexts.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/tnsm.2021.3077276

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Different blockchain architectures can be categorized as access control models based on Bitcoin blockchain improvement and access control models with smart contracts.

    “Different blockchain architectures can be categorized as access control models based on Bitcoin blockchain improvement and access control models with smart contracts [83].”

    From A Survey of IoT Privacy Security: Architecture, Technology, Challenges, and Trends (2024) · cites this paper as [83]

    The Related Works section distinguishes access-control proposals that mainly rely on blockchain records and off-chain processes from proposals that use smart contracts. It does not describe the former as improvements to the Bitcoin blockchain or present the claimed two-category taxonomy. (LLM, conf=0.84)

    Experimental — accuracy not yet measured

  • Hueber et al. proposed a block scheme-based access control architecture that stores access control policies on the blockchain and manages them through blockchain transactions.

    “Using the blockchain to check the user's legitimacy in access control, Hueber et al. [83] proposed a block scheme-based access control architecture, which stores access control policies on the blockchain and manages these policies through blockchain transactions”

    From A Survey of IoT Privacy Security: Architecture, Technology, Challenges, and Trends (2024) · cites this paper as [83]

    In §V.A, “Access Control Primitives” (page unavailable), the paper describes storing an access policy on the blockchain through a transaction and using it for authorization. That supports the architecture described, but the cited paper is by Putra et al.; the passages do not support attributing this proposal to Hueber et al. (LLM, conf=0.84)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 29

  1. R. S. Sandhu and P. Samarati, "Access control: principle and practice," IEEE Communications Magazine, vol. 32, no. 9, pp. 40-48, 1994.
  2. A. Ouaddah, H. Mousannif, A. Abou Elkalam, and A. Ait Ouahman, "Access control in the Internet of Things: Big challenges and new opportunities," Computer Networks, vol. 112, pp. 237-262, 2017. [Online]. Available: https://doi.org/10.1016/j.comnet.2016.11.007 · DOI
  3. O. Novo, "Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT," IEEE IoT Journal, vol. 5, no. 2, pp. 1184-1195, 2018.
  4. S. Ding, J. Cao, C. Li, K. Fan, and H. Li, "A Novel Attribute- Based Access Control Scheme Using Blockchain for IoT," IEEE Access, vol. 7, pp. 38 431-38 441, 2019. [Online]. Available: https: //ieeexplore.ieee.org/document/8668769/
  5. R. Di Pietro, X. Salleras, M. Signorini, and E. Waisbard, "A Blockchain-based Trust System for the Internet of Things," in Proceedings of the 23Nd ACM on Symposium on Access Control Models and Technologies, ser. SACMAT '18. ACM, 2018, pp. 77-83. [Online]. Available: http://doi.acm.org/10.1145/3205977.3205993 · DOI
  6. M. binti Mohamad Noor and W. H. Hassan, "Current research on Internet of Things (IoT) security: A survey," Computer Networks, vol. 148, pp. 283-294, 2019.
  7. M. P. Andersen, S. Kumar, M. AbdelBaky, G. Fierro, J. Kolb, H.-S. Kim, D. E. Culler, and R. A. Popa, "WAVE: A decentralized authorization framework with transitive delegation," in USENIX Security, 2019.
  8. O. J. A. Pinno, A. R. A. Gregio, and L. C. De Bona, "ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT," 2017 IEEE GLOBECOM, pp. 1-6, 2018.
  9. A. Dorri, S. S. Kanhere, R. Jurdak, and P. Gauravaram, "Lsb: A lightweight scalable blockchain for iot security and anonymity," Journal of Parallel and Distributed Computing, vol. 134, pp. 180 -197, 2019.
  10. S. Pal, T. Rabehaja, A. Hill, M. Hitchens, and V. Varadharajan, "On the integration of blockchain to the internet of things for enabling access right delegation," IEEE Internet of Things Journal, vol. 7, no. 4, pp. 2630-2639, 2020.
  11. Y. Zhang and X. Wu, "Access Control in Internet of Things: A Survey," DEStech Transactions on Engineering and Technology Research, no. apetc, 2018.
  12. I. R. Chen, F. Bao, and J. Guo, "Trust-Based Service Management for Social Internet of Things Systems," IEEE Transactions on Dependable and Secure Computing, vol. 13, no. 6, pp. 684-696, 2016.
  13. I. R. Chen, J. Guo, and F. Bao, "Trust Management for SOA-Based IoT and Its Application to Service Composition," IEEE Transactions on Services Computing, vol. 9, no. 3, pp. 482-495, 2016.
  14. J. Bernal Bernabe, J. L. Hernandez Ramos, and A. F. Skarmeta Gomez, "TACIoT: multidimensional trust-aware access control system for the Internet of Things," Soft Computing, vol. 20, no. 5, pp. 1763-1779, may 2016. [Online]. Available: https://doi.org/10.1007/s00500-015-1705-6 · DOI
  15. B. Gwak, J. H. Cho, D. Lee, and H. Son, "TARAS: Trust-Aware Role- Based Access Control System in Public Internet-of-Things," in Pro- ceedings -17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications and 12th IEEE International Conference on Big Data Science and Engineering, Trustcom/BigDataSE 2018. IEEE, 2018, pp. 74-85.
  16. G. D. Putra, V. Dedeoglu, S. S. Kanhere, and R. Jurdak, "Trust management in decentralized iot access control system," in 2020 IEEE International Conference on Blockchain and Cryptocurrency, 2020.
  17. I. R. Chen, J. Guo, D. C. Wang, J. J. Tsai, H. Al-Hamadi, and I. You, "Trust-Based Service Management for Mobile Cloud IoT Systems," IEEE Transactions on Network and Service Management, vol. 16, no. 1, pp. 246-263, 2019.
  18. H. Al-Hamadi, I. R. Chen, and J. H. Cho, "Trust Management of Smart Service Communities," IEEE Access, vol. 7, pp. 26 362-26 378, 2019.
  19. D. E. Kouicem, Y. Imine, A. Bouabdallah, and H. Lakhlef, "Decen- tralized Blockchain-Based Trust Management Protocol for the Internet of Things," IEEE Transactions on Dependable and Secure Computing, 2020.
  20. W. B. Daoud, M. S. Obaidat, A. Meddeb-Makhlouf, F. Zarai, and K. F. Hsiao, "TACRM: trust access control and resource management mech- anism in fog computing," Human-centric Computing and Information Sciences, vol. 9, no. 1, pp. 1-18, dec 2019.
  21. V. A. Siris, P. Nikander, S. Voulgaris, N. Fotiou, D. Lagutin, and G. C. Polyzos, "Interledger Approaches," IEEE Access, vol. 7, pp. 89 948- 89 966, 2019.
  22. M. A. Ferrag, M. Derdour, M. Mukherjee, A. Derhab, L. Maglaras, and H. Janicke, "Blockchain technologies for the internet of things: Research issues and challenges," IEEE Internet of Things Journal, vol. 6, no. 2, pp. 2188-2204, 2019.
  23. K. L. Huang, S. S. Kanhere, and W. Hu, "On the need for a reputation system in mobile phone based sensing," Ad Hoc Networks, vol. 12, pp. 130 -149, 2014. [Online]. Available: http://www.sciencedirect.com/science/article/pii/S1570870511002174
  24. M. Castro, B. Liskov et al., "Practical byzantine fault tolerance," in OSDI, vol. 99, no. 1999, 1999, pp. 173-186.
  25. G. Wood et al., "Ethereum: A secure decentralised generalised trans- action ledger," Ethereum project yellow paper, vol. 151, no. 2014, pp. 1-32, 2014.
  26. E. Androulaki, A. Barger, V. Bortnikov, C. Cachin, K. Christidis, A. De Caro, D. Enyeart, C. Ferris, G. Laventman, Y. Manevich, S. Muralidharan, C. Murthy, B. Nguyen, M. Sethi, G. Singh, K. Smith, A. Sorniotti, C. Stathakopoulou, M. Vukolić, S. W. Cocco, and J. Yellick, "Hyperledger fabric: A distributed operating system for permissioned blockchains," in Proceedings of the Thirteenth EuroSys Conference, ser. EuroSys '18. New York, NY, USA: Association for Computing Machinery, 2018. [Online]. Available: https://doi.org/10.1145/3190508.3190538 · DOI · Paper page
  27. S. Pal, T. Rabehaja, M. Hitchens, V. Varadharajan, and A. Hill, "On the Design of a Flexible Delegation Model for the Internet of Things Using Blockchain," IEEE Transactions on Industrial Informatics, 2019.
  28. Q. Zhou, H. Huang, Z. Zheng, and J. Bian, "Solutions to scalability of blockchain: A survey," IEEE Access, vol. 8, pp. 16 440-16 455, 2020.
  29. M. S. Ali, K. Dolui, and F. Antonelli, "IoT Data Privacy via Blockchains and IPFS," in Proceedings of the Seventh International Conference on the Internet of Things, ser. IoT '17. New York, NY, USA: ACM, 2017, pp. 14:1--14:7. [Online]. Available: http://doi.acm.org/10.1145/3131542.3131563 Guntur Dharma Putra received his bachelor de- gree in Electrical Engineering from Universitas Gad- jah Mada, Indonesia, 2014. He received his master's degree in Computing Science from the University of Groningen, the Netherlands, 2017. He is currently a Ph.D. candidate in the School of Computer Science and Engineering, University of New South Wales (UNSW), Sydney, Australia. His research interest covers blockchain applications for securing IoT. Guntur is a student member of the IEEE. · DOI

Cited by

Sorted by citations

Authors
Putra, G. D., Dedeoglu, V., Kanhere, S. S., Jurdak, R., & Ignjatovic, A.
Affiliations
  • UNSW Sydney (AU)
  • Commonwealth Scientific and Industrial Research Organisation (AU)
  • Queensland University of Technology (AU)
ORCID
Venue
IEEE Transactions on Network and Service Management
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Published
2021-06
Volume
18
Issue
2
Pages
1646-1658
ISSN
  • 1932-4537 (ISSN-L)
  • 2373-7379
DOI
10.1109/tnsm.2021.3077276
OpenAlex
W3144359988
Cited by
124
References
2
Citations by year
2026: 16 · 2025: 16 · 2024: 26 · 2023: 36 · 2022: 25 · 2021: 5
FWCI
20.80
Type
journal article
Language
en
Open access
Licence
Locations
  • IEEE Transactions on Network and Service Management (publishedVersion)
  • arXiv (Cornell University) (submittedVersion, cc-by)
  • QUT ePrints (Queensland University of Technology) (submittedVersion, cc-by-nc)
  • arXiv (Cornell University) (cc-by)
Funders
Cyber Security Research Centre Limited through the Australian Government’s Cooperative Research Centres Programme
Topics
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Social Sciences › Sociology and Political Science › Access Control and Trust
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
Keywords
blockchain, Internet of Things, access control, attribute-based access control, decentralized authorization, privacy preservation, Ethereum, Internet of Things security

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review