Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Abstract

Industrial Internet of Things (IIoT) has emerged as a prospective technology that improves the productivity and automation level for industrial applications. Devices from cooperative IIoT domains will communicate and collaborate on the increasingly complicated manufacturing tasks. To secure cross-domain device collaborations, we propose combining the blockchain with multi-factor authentication. Because the multifactor authentication conforms to IIoT devices' operation modes and brings higher security levels, and the blockchain technology contributes to building trust among different domains. However, this combined usage still has limitations in terms of the potential loss of factor attack, the storage overhead on the blockchain, and the contradiction between efficiency and privacy preservation. Motivated by these facts, in this paper, we develop a privacypreserving blockchain-based multi-factor device authentication protocol for cross-domain IIoT. Specifically, multiple factors are additionally encoded by the hardware fingerprint into random numbers, before being transformed into key materials. The blockchain only stores each domain's dynamic accumulator, which accumulates derived key materials for devices, thereby reducing the overhead. Moreover, the on-chain accumulator is leveraged to efficiently verify the unlinkable identities of crossdomain IIoT devices. The security of our protocol is formally proved, and the security features and functionalities are respectively discussed. A proof-of-concept prototype was implemented to prove the efficiency and reliability. The comparison results indicate that the on-chain storage is greatly reduced. Finally, the smart contract's performance was evaluated to show scalability.

QoS-Aware Federated Crosschain-Based Model-Driven Reference Architecture for IIoT Sensor Networks in Distributed Manufacturing

“…G 2 had ad hoc SAs without reasoning [29], [30], [31], [32], [33], [34], [35], [36], [37], [38], [39], [40], [41], [42], [43], [44], [45], [46], [47], [48], [49], [50]. Finally, G 3 possessed a minimal AMP with reasoning [27], [28], [51], [52] and our work.…”

“…This section provides a subjective literature survey of blockchain-based manufacturing factory solutions relevant to our research objectives. With respect to the popularity of blockchain-based manufacturing factory solutions, we considered blockchain-based patents [23], [24], [25], [26], [27], [28] and literature [29], [30], [31], [32], [33], [34], [35], [36], [37], [38], [39], [40], [41], [42], [43], [44], [45], [46], [47], [48], [49], [50], [51], [52]. 1 Our survey matrix was "studying the blockchain-based manufacturing factory solutions for their top-down software architectural initiatives that facilitated hierarchically federated geodistribution while possessing QoS demands beyond default security and privacy."…”

“…Finally, SG 3.3 incorporates [52] and our study. In [52], on-chain and off-chain techniques were used, enabling their architecture to offload certain computational duties from the main chain.…”

“…Blockchain is one of the most significant techniques available for addressing integrity concerns in the IoT domain, and blockchain-based solutions for smart industry are abundant [23], [24], [25], [26], [27], [28], [29], [30], [31], [32], [33], [34], [35], [36], [37], [38], [39], [40], [41], [42], [43], [44], [45], [46], [47], [48], [49], [50], [51], [52]. According to our survey of blockchain-based DSM solutions, 80% of the solutions are based on the on-chain approach and its variants for their key functional requirements, such as network commissioning and transactions [23], [24], [25], [32], [33], [34], [35], [36], [37], [38], [39], [40], [41], [42], [43], [44], [45]<...…”

A protocol to establish trust on biometric authentication devices

“…The authors, like Zhang, Yan, et al 35 have proposed to combine blockchain technologies with multi‐factor authentication to achieve secure cross‐domain device communication. In addition, the authors have proposed timestamp and hash‐based techniques to prevent replay attacks and preserve the message's integrity.…”