A decentralized IoT security framework system based on blockchain

Abstract

The present invention belongs to the field of information technology and the Internet of Things (IoT), and discloses a decentralized IoT security framework system based on blockchain, which specifically includes: a wallet component for managing device identities, ensuring the uniqueness of each IoT device in the blockchain network, and providing device private key storage and smart contract address association; a smart contract component for managing and allocating computing tasks to achieve automated task processing; a multi-layer security component for ensuring the security of IoT device identity authentication and data transmission; a general component for achieving compatibility between the underlying module of the IoT device and the blockchain application layer, and providing a cross-platform general interface. The present invention realizes data encryption transmission and multi-terminal task offloading through embedded smart contracts and multi-layer security protection mechanisms, thereby improving the autonomy and security of IoT devices and avoiding the security bottleneck of centralized architectures.

Description

Technical Field

[0001] The present invention belongs to but is not limited to the fields of information technology and Internet of Things (IoT), and in particular to a decentralized IoT security framework system based on blockchain. Background Art

[0002] With the rapid popularization of IoT devices, the existing IoT security architecture faces more and more challenges. Traditional IoT systems mostly use a centralized network structure, which has the following shortcomings:

[0003] Single point failure risk: Centralized network structures are more vulnerable to single point failures and distributed denial of service (DDoS) attacks. Once a central node fails, the entire network may be paralyzed, seriously affecting the stability and security of data transmission.

[0004] Resource limitation: Most IoT devices have low computing power and storage capacity, which makes it difficult to meet complex computing requirements. This resource limitation makes it difficult to directly apply traditional blockchain architecture to IoT devices, limiting the room for improvement in system security and data processing.

[0005] Security risks in data transmission and device authentication: The current IoT security framework is insufficient in dealing with complex security threats, especially in the process of data transmission and device authentication, which are vulnerable to unauthorized access and data tampering, making it difficult to effectively ensure the security of IoT devices and network environments.

[0006] In view of the above analysis, the technical problems that need to be solved urgently in the prior art are:

[0007] The existing centralized IoT security architecture faces security risks such as single point failure and distributed denial of service (DDoS) attacks, and is difficult to adapt to the computing needs of resource-constrained devices. Summary of the invention

[0008] In view of the problems existing in the prior art, the present invention provides a decentralized Internet of Things security framework system based on blockchain.

[0009] The present invention is implemented as follows: a decentralized Internet of Things security framework system based on blockchain, characterized in that the decentralized Internet of Things security framework system based on blockchain specifically includes:

[0010] Wallet component: used to manage device identity, ensure the uniqueness of each IoT device in the blockchain network, and provide device private key storage and smart contract address association.

[0011] Smart contract component: responsible for managing and allocating computing tasks to realize automated processing of tasks.

[0012] Multi-layer security components: used to ensure the security of IoT device authentication and data transmission.

[0013] Common components: used to achieve compatibility between the underlying modules of IoT devices and the blockchain application layer, and provide a cross-platform common interface.

[0014] Furthermore, the framework embeds blockchain components in cellular communication modules, and the modules collaborate with each other through a chain data transmission structure and a lightweight blockchain protocol, which is suitable for resource-constrained IoT devices.

[0015] Furthermore, the wallet component is the identity management hub between the device and the blockchain network, responsible for generating, storing and verifying the device's identity key. The device registration process in the blockchain network is as follows:

[0016] (1) Key generation and storage:

[0017] When the device accesses the network, an encryption algorithm (elliptic curve encryption algorithm ECDSA) is called to generate a unique public-private key pair, where the public key is used as the device's identity and the private key is used for signing and decryption operations. The private key is stored in a secure chip or protected storage area in the cellular communication module. When the device needs to reconnect or when identity authentication fails, the wallet component allows the key pair to be regenerated and updated to the blockchain.

[0018] (2) Key verification:

[0019] When a device sends a task request or transmits data, the wallet component uses the private key to digitally sign the data, and the receiving node verifies the signature through the device's public key.

[0020] (3) Device identity management:

[0021] Each time a task is requested or data is transmitted, the device uses a private key to sign the request data, and the wallet component verifies the signature through the blockchain node. After successful verification, the device obtains task execution authority and can access relevant resources in the blockchain.

[0022] Furthermore, the smart contract component is responsible for task management and data interaction, realizing task allocation and automated processing. The smart contract execution task process is as follows:

[0023] (1) Task creation and assignment:

[0024] When IoT devices need to complete complex calculations (big data processing or encryption operations), the task content and encrypted data are uploaded to the blockchain network through smart contracts. Based on the task type, data volume and device requirements, the scheduling algorithm embedded in the smart contract allocates tasks according to the resource utilization and computing power of the blockchain network nodes.

[0025] (2) Task status management:

[0026] The smart contract assigns a unique task ID and status identifier ("initialized", "processing", "completed") to each task. During the task execution process, the node will upload the task status to the contract in real time. The contract updates and records the task status for device query.

[0027] (3) Result return mechanism:

[0028] After the computing node completes the task, it encrypts the result and returns it to the smart contract, and updates the task status to "completed". After the requesting device receives the result notification, it uses the private key to decrypt the data through the wallet component to obtain the calculation result. The result is stored in the location specified by the smart contract, and the device can query it again in subsequent interactions.

[0029] Furthermore, the multi-layer security component mainly adopts non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) technology. The process of non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) is as follows:

[0030] (1) Non-interactive zero-knowledge proof (NIZK) identity authentication:

[0031] (1.1) Initialization: When the device first connects to the network, it generates a random number r and combines it with the private key to generate proof data. .

[0032] (1.2) Authentication challenge: The device calculates the challenge value , where PK is the device public key and H is the hash function, forming a zero-knowledge proof.

[0033] (1.3) Identity verification process:

[0034] The device sends authentication data To the blockchain node, the blockchain node calculates the verification value , and compare whether the c value matches. If it matches, the device authentication passes, otherwise the authentication fails.

[0035] (1.4) Certification validity period: The validity period of the certification is set to a configurable time window.

[0036] (2) Homomorphic encryption (HE) data protection and transmission:

[0037] (2.1) Data encryption process:

[0038] Before the task data is transmitted, the device uses the HE algorithm to encrypt the data and transmits the encrypted data to the blockchain network. The encryption algorithm uses the elliptic curve ElGamal HE algorithm.

[0039] (2.2) Ciphertext calculation and result transmission:

[0040] The blockchain node performs calculations on the ciphertext and returns the ciphertext result to the smart contract, requesting the device to decrypt the result using the private key in the wallet component to obtain the original calculation result.

[0041] Furthermore, the common components ensure compatibility and cross-platform support between different IoT devices, providing system abstraction layer and blockchain interface support:

[0042] (1) Operating System Abstraction Layer (OSAL):

[0043] (1.1) Task management interface: Provides a general API interface for device task management to implement task allocation and scheduling functions that are independent of the operating system.

[0044] (1.2) System abstraction: OSAL abstracts the API interface of the operating system and supports resource management such as multi-threading, semaphores, and task queues, so that the framework can achieve consistent operations on different operating systems.

[0045] (2) Driver Abstraction Layer (DAL):

[0046] (2.1) Hardware compatibility support: DAL encapsulates the device’s hardware drivers, such as UART, I2C, and HTTP interfaces, so that IoT devices can adapt to different types of network communication interfaces.

[0047] (2.2) Protocol adaptation: DAL provides support for different network protocols (such as HTTPS and WebSocket) to ensure that devices can communicate stably in different network environments.

[0048] (3) Blockchain protocol support:

[0049] (3.1) Remote Procedure Call (RPC) interface: provides a standardized interface for interacting with blockchain nodes, supporting devices to remotely call smart contracts, query on-chain data, and submit task requests.

[0050] (3.2) Data encoding and encryption tools: Provide standardized JSON encoding, RLP encoding, and key pair management library to support device data packaging, transmission encryption, and transaction management.

[0051] Another object of the present invention is to provide a process and interaction of a decentralized IoT security framework system based on blockchain, the process is as follows:

[0052] S1, device registration and authentication: When an IoT device is connected to the blockchain network for the first time, a unique key pair is generated and the identity is registered through the wallet component. The device is authenticated through NIZK, and the identity information of the device is recorded after successful authentication.

[0053] S2, task creation and allocation: When IoT devices need to perform complex tasks (such as big data processing, deep encryption, etc.), they upload the tasks to the blockchain through smart contract components. Smart contracts assign tasks to appropriate nodes and continuously track task status.

[0054] S3, data transmission and encryption protection: IoT devices use multi-layer security components to perform HE encryption on task data. The encrypted data is transmitted to the computing node through the network and the calculation is completed in the ciphertext state.

[0055] S4, result return and decryption: After the blockchain node completes the task, it feeds the result back to the smart contract, and the contract transmits the result back to the requesting device. The device uses the private key in the wallet component to decrypt the calculation result.

[0056] In combination with the above technical solutions and the technical problems solved, the advantages and positive effects of the technical solutions to be protected by the present invention are as follows:

[0057] First, this paper proposes a lightweight blockchain IoT security framework designed for resource-constrained IoT devices. The framework enables devices to achieve multi-terminal task offloading and secure data transmission by embedding blockchain components in cellular communication modules. The solution uses technologies such as smart contracts, non-interactive zero-knowledge proofs (NIZK) and homomorphic encryption (HE) to achieve device identity authentication and data encryption protection, thereby ensuring the security and scalability of the IoT network.

[0058] This paper proposes a lightweight blockchain IoT security framework, which is designed for resource-constrained IoT devices to solve the problems of data transmission security, device identity authentication and insufficient task processing efficiency in the prior art. The framework embeds blockchain components in the cellular communication module and achieves the following advantages and positive effects through a number of innovative technologies:

[0059] 1. A lightweight blockchain architecture is implemented, which is suitable for resource-constrained IoT devices.

[0060] Traditional blockchain architectures usually have high computing and storage requirements, making them difficult to apply directly to resource-limited IoT devices. The present invention adopts a lightweight blockchain design, embedding blockchain components in cellular communication modules, so that IoT devices can participate in decentralized task processing and data transmission without adding significant computing and storage burdens. This not only improves the applicability of IoT devices, but also significantly reduces device energy consumption, enabling them to operate efficiently in resource-limited environments.

[0061] 2. Smart contracts are used to realize multi-terminal task offloading and task management.

[0062] The present invention realizes the automated management of task allocation and execution through smart contracts. When the task processing demand of IoT devices exceeds their own computing power, they can offload tasks to multiple terminal nodes through smart contracts, and the smart contracts will perform task allocation and execution tracking according to the node resource conditions. This method not only improves the efficiency of task processing, but also avoids the risk of single point failure in traditional centralized architecture, so that the reliability of the entire IoT system in a decentralized environment is significantly enhanced.

[0063] 3. Apply non-interactive zero-knowledge proof (NIZK) to achieve identity authentication and improve the privacy and security of the device.

[0064] The present invention adopts non-interactive zero-knowledge proof (NIZK) technology in the device identity authentication process. This technology ensures the privacy of the device during the authentication process by verifying the device identity without exposing the device's private information. The introduction of NIZK identity authentication allows the device to complete identity confirmation without multiple interactions with the verification node, greatly reducing the communication load and authentication time, thereby improving the real-time performance and security of the system.

[0065] 4. Secure encrypted data transmission is achieved through homomorphic encryption (HE) technology.

[0066] The present invention introduces homomorphic encryption (HE) technology, which enables blockchain nodes to directly perform calculation operations on ciphertext without decrypting the data when transmitting data. The application of HE not only ensures the privacy of data during transmission and processing, but also solves the problem of data leakage that may occur during multi-terminal task offloading, further improving the security of the IoT network. Since the HE algorithm has high computational efficiency while ensuring security, it is very suitable for resource-constrained IoT devices.

[0067] Second, the present invention provides a blockchain IoT security framework suitable for resource-constrained devices, focusing on the security and efficiency of device data transmission, identity authentication and task allocation. Its commercial value is reflected in the following points:

[0068] Strong market demand: The rapid growth in the number of IoT devices is accompanied by an increase in security requirements. The limitations of traditional centralized architectures make decentralized blockchain IoT frameworks an innovative solution that the market urgently needs.

[0069] Significant cost-effectiveness: The design of the lightweight blockchain framework not only reduces the upgrade cost of hardware equipment, but also improves the service life and energy efficiency of the equipment, making it suitable for large-scale promotion.

[0070] Enhance the competitiveness of commercial applications: By ensuring the privacy of data and the security of transmission, the framework of the present invention has significant commercial application prospects in the fields of smart cities, industrial Internet of Things and smart homes, which can improve user trust and thus enhance market competitiveness.

[0071] The technical solution of the present invention fills the technical gap in the industry at home and abroad: At present, the application of blockchain technology in IoT security is not yet mature, especially in the application of resource-constrained devices, there is a lack of lightweight and scalable security framework. The proposal of the present invention fills the gap that the existing technology is difficult to apply efficiently in resource-constrained environments. In particular, the present invention, through the introduction of innovative technologies such as non-interactive zero-knowledge proof and homomorphic encryption, realizes the effective combination of decentralized identity authentication and data encryption transmission of IoT devices for the first time, providing a feasible example for IoT blockchain applications at home and abroad.

[0072] The technical solution of the present invention overcomes technical prejudice: For a long time, the industry generally believes that blockchain technology can only be effectively applied on high-performance devices and is difficult to promote to resource-constrained IoT devices. The lightweight design of the present invention breaks this prejudice. Through the optimized blockchain architecture design and highly integrated security mechanism, IoT devices can also run efficiently and securely in the blockchain system. This innovative design breaks through the traditional cognitive limitations of the blockchain application environment and provides a feasible technical path for the blockchain application of IoT devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0073] Figure 1 It is a functional diagram of the framework components of the decentralized Internet of Things security framework system based on blockchain provided by an embodiment of the present invention.

[0074] Figure 2 This is a diagram of a blockchain network architecture based on the Internet of Things provided by an embodiment of the present invention.

[0075] Figure 3 This is a performance diagram of the lightweight blockchain framework provided by an embodiment of the present invention under different numbers of devices.

[0076] Figure 4 This is a comparison chart of data processing within 1800 seconds by a single client under the decentralized architecture and the centralized architecture provided by an embodiment of the present invention.

[0077] Figure 5 This is a diagram showing the relationship between latency and bandwidth from a client to a blockchain node, according to an embodiment of the present invention. DETAILED DESCRIPTION

[0078] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0079] The following are two specific embodiments of the blockchain-based decentralized IoT security framework system.

[0080] Embodiment 1: Smart home security system.

[0081] In a smart home security system, multiple IoT devices (such as smart door locks, cameras, sensors, etc.) need to work together to monitor home security in real time while ensuring data security, user privacy, and interoperability between devices.

[0082] Wallet component: Each smart home device (such as door locks and cameras) generates a unique identity key through the wallet component and registers its identity information on the blockchain network. In this way, only verified devices can be added to the home security network, preventing unauthorized devices from accessing.

[0083] Smart contract component: When the sensor detects that the doors or windows of the home are opened or the camera identifies abnormal movement, the smart contract automatically triggers the task, sends the alarm information to the user, and starts the recording function to capture the scene. The entire process is automatically executed on the blockchain without human intervention.

[0084] Multi-layer security components: When security data (such as video recordings and alarm information) is transmitted to the user's mobile device or stored on the home server, multi-layer encryption is used to ensure data transmission security to prevent hackers from stealing or tampering with the data.

[0085] Universal components: Through universal components, devices such as cameras and door locks can be compatible with different home management applications across platforms, allowing users to view the status of all devices and manage them in real time in one application. The communication of the entire system is connected to the blockchain network through a cellular module to ensure efficient data processing in a low-power environment.

[0086] Example 2: Equipment monitoring and maintenance in industrial manufacturing.

[0087] In industrial manufacturing scenarios, thousands of devices need to be monitored and maintained in real time. Using a blockchain-based IoT security framework, device status monitoring can be made transparent, secure, and decentralized.

[0088] Wallet component: Each device (such as sensors, manufacturing machinery, etc.) generates a unique identity key through the wallet component, and stores it on the blockchain in association with the device's work history, performance indicators and other data. This ensures that the identity authentication and work records of all devices are protected, and the data is transparent and traceable.

[0089] Smart contract component: Smart contracts automatically assign maintenance tasks based on the equipment’s operating status and workload. For example, when a device’s sensor detects abnormal vibration or excessive temperature, the smart contract automatically generates a maintenance task and notifies the nearest maintenance personnel to come to the site for inspection.

[0090] Multi-layer security components: All equipment data (such as temperature, operating time, etc.) are encrypted by multi-layer security components when transmitted to the central management system or stored on the chain to ensure that the data will not be intercepted or tampered with during transmission, thereby ensuring the security of industrial information.

[0091] Universal components: Universal components provide a cross-platform interface so that different types of equipment and machinery from different suppliers can be connected to the blockchain system for unified management and monitoring. The system can adapt to cellular communication modules to facilitate data upload and automatic task allocation in factory environments with limited equipment networking capabilities.

[0092] These examples demonstrate how the framework can achieve efficient, secure, and intelligent IoT device management through distributed structure, secure authentication, and task automation in different environments.

[0093] like Figure 1 As shown, an embodiment of the present invention provides a decentralized Internet of Things security framework system based on blockchain, and the framework includes:

[0094] Wallet component: used to manage device identity, ensure the uniqueness of each IoT device in the blockchain network, and provide device private key storage and smart contract address association to ensure the security of data communication.

[0095] Smart contract component: responsible for managing and allocating computing tasks, realizing automated task processing, and improving the task processing efficiency of IoT devices.

[0096] Multi-layer security components: used to ensure the security of IoT device authentication and data transmission.

[0097] Common components: used to achieve compatibility between the underlying modules of IoT devices and the blockchain application layer, and provide a cross-platform common interface.

[0098] The framework achieves secure data transmission and multi-terminal task offloading by embedding blockchain components in cellular communication modules. The modules work together with chain data transmission structure and lightweight blockchain protocol, which is suitable for resource-constrained IoT devices and ensures efficient and secure operation in low computing resource environments. The implementation device is L610 wireless communication module.

[0099] The wallet component is the identity management hub between the device and the blockchain network, responsible for generating, storing and verifying the device's identity key.

[0100] The blockchain-based decentralized IoT security framework system of the present invention aims to improve the security and efficiency of IoT devices, especially in environments with limited computing resources. The framework mainly consists of wallet components, smart contract components, multi-layer security components and general components, which work together to achieve device security authentication, data transmission protection and task automation.

[0101] First, the wallet component plays a core role in device identity management in the framework. It generates a unique identity key for each IoT device and stores it in the blockchain network. The device's identity is protected by a private key to prevent unauthorized access and ensure communication security. The management of device keys and the association of smart contract addresses are the responsibility of the wallet component, in this way, all communications and transactions are reliably authenticated.

[0102] Secondly, the smart contract component is responsible for the automated processing of device tasks. It automatically allocates and manages the computing tasks of IoT devices according to pre-set conditions. The smart contract component is also responsible for coordinating the task allocation between devices to ensure that each device can effectively handle its workload while reducing human intervention, improving the overall efficiency of device task processing, and is particularly suitable for distributed IoT systems.

[0103] Multi-layer security components are crucial in ensuring device data transmission and identity authentication. It uses multi-level security protocols to ensure that data is not tampered with or hijacked during transmission from the device to the blockchain. Multi-layer security components form a high-intensity security barrier between the device and the blockchain network through identity authentication, encrypted data transmission and access control, reducing potential attack risks and ensuring the communication security of IoT devices.

[0104] The general component is designed to achieve compatibility between the underlying IoT devices and the blockchain application layer. It provides a cross-platform general interface, allowing different devices to achieve data interoperability and operational collaboration on the blockchain. The design of the general component allows the framework to flexibly adapt to various types of IoT devices, thereby broadening the application scope of the system.

[0105] To achieve efficient and secure data transmission, the framework of the present invention embeds a cellular communication module in its architecture, supporting a chain data transmission structure and a lightweight blockchain protocol. This transmission structure and lightweight protocol are particularly suitable for resource-constrained IoT devices, allowing devices to achieve efficient data transmission and communication under low computing resource conditions.

[0106] Finally, the wallet component also assumes the identity authentication and key storage functions between the device and the blockchain network. It not only ensures the uniqueness of each device, but also provides encryption support for communication between devices, further consolidating the security of data transmission, and enabling the entire IoT network to have a strong decentralized identity management and privacy protection mechanism.

[0107] The registration process of a device in the blockchain network is as follows:

[0108] (1) Key generation and storage:

[0109] (1.1) When a device accesses the network, it calls an encryption algorithm (elliptic curve encryption algorithm ECDSA) to generate a unique public-private key pair, where the public key serves as the device's identity and the private key is used for signing and decryption operations.

[0110] (1.2) The private key is stored in a secure chip or protected storage area in the cellular communication module to prevent physical or remote attacks.

[0111] (1.3) When the device needs to be reconnected or authentication fails, the wallet component allows the key pair to be regenerated and updated to the blockchain.

[0112] (2) Key verification:

[0113] (2.1) When a device sends a task request or transmits data, the wallet component digitally signs the data using the private key.

[0114] (2.2) The receiving node verifies the signature through the device’s public key to confirm the authenticity and legitimacy of the data.

[0115] (3) Device identity management:

[0116] (3.1) Each time a task is requested or data is transmitted, the device uses a private key to sign the request data, and the wallet component verifies the signature through the blockchain node.

[0117] (3.2) After successful verification, the device obtains task execution authority and can access relevant resources in the blockchain.

[0118] The smart contract component is responsible for task management and data interaction, realizing task allocation and automated processing.

[0119] The smart contract execution process is as follows:

[0120] (1) Task creation and assignment:

[0121] (1.1) When an IoT device needs to complete complex calculations (big data processing or encryption operations), the task content and encrypted data are uploaded to the blockchain network through smart contracts.

[0122] (1.2) Based on the task type, data volume and equipment requirements, the scheduling algorithm embedded in the smart contract allocates tasks according to the resource utilization and computing power of the blockchain network nodes to ensure efficient use of resources.

[0123] (2) Task status management:

[0124] (2.1) The smart contract assigns each task a unique task ID and status identifier (“initialized”, “in process”, “completed”).

[0125] (2.2) During the task execution process, the node will upload the task status to the contract in real time. The contract will update and record the task status for the device to query.

[0126] (3) Result return mechanism:

[0127] (3.1) After the computing node completes the task, it encrypts the result and returns it to the smart contract, and updates the task status to "Completed".

[0128] (3.2) After the requesting device receives the result notification, it uses the private key to decrypt the data through the wallet component to obtain the calculation result. The result is stored in the location specified by the smart contract, and the device can query it again in subsequent interactions.

[0129] The multi-layer security component is used for device identity authentication and data transmission encryption, mainly using non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) technology to ensure data security and device privacy.

[0130] The process of non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) is as follows:

[0131] (1) Non-interactive zero-knowledge proof (NIZK) identity authentication:

[0132] (1.1) Initialization: When the device first connects to the network, it generates a random number r and combines it with the private key to generate proof data. .

[0133] (1.2) Authentication challenge: The device calculates the challenge value , where PK is the device public key and H is the hash function, forming a zero-knowledge proof.

[0134] (1.3) Identity verification process:

[0135] The device sends authentication data To the blockchain node, the blockchain node calculates the verification value , and compare whether the c value matches. If it matches, the device authentication passes; otherwise, the authentication fails.

[0136] (1.4) Authentication validity period: The authentication validity period can be set to a configurable time window to ensure continuous access rights to the device during the session.

[0137] (2) Homomorphic encryption (HE) data protection and transmission:

[0138] (2.1) Data encryption process:

[0139] Before the task data is transmitted, the device uses the HE algorithm to encrypt the data and transmits the encrypted data to the blockchain network. The encryption algorithm uses the elliptic curve ElGamal HE algorithm, which has high computing efficiency and encryption strength and is suitable for resource-constrained IoT devices.

[0140] (2.2) Ciphertext calculation and result transmission:

[0141] The blockchain node performs calculations on the ciphertext and returns the ciphertext result to the smart contract. The requesting device decrypts the result using the private key in the wallet component to obtain the original calculation result.

[0142] The common components ensure compatibility and cross-platform support between different IoT devices, and provide system abstraction layer and blockchain interface support.

[0143] (1) Operating System Abstraction Layer (OSAL):

[0144] (1.1) Task management interface: Provides a general API interface for device task management to implement task allocation and scheduling functions that are independent of the operating system.

[0145] (1.2) System abstraction: OSAL abstracts the API interface of the operating system and supports resource management such as multi-threading, semaphores, and task queues, so that the framework can achieve consistent operations on different operating systems.

[0146] (2) Driver Abstraction Layer (DAL):

[0147] (2.1) Hardware compatibility support: DAL encapsulates the device’s hardware drivers, such as UART, I2C, and HTTP interfaces, so that IoT devices can adapt to different types of network communication interfaces.

[0148] (2.2) Protocol adaptation: DAL provides support for different network protocols (such as HTTPS and WebSocket) to ensure that devices can communicate stably in different network environments.

[0149] (3) Blockchain protocol support:

[0150] (3.1) Remote Procedure Call (RPC) interface: provides a standardized interface for interacting with blockchain nodes, supporting devices to remotely call smart contracts, query on-chain data, and submit task requests.

[0151] (3.2) Data encoding and encryption tools: Provide standardized JSON encoding, RLP encoding, and key pair management library to support device data packaging, transmission encryption, and transaction management.

[0152] like Figure 2 As shown, the process and interaction of the decentralized IoT security framework system based on blockchain are as follows:

[0153] S1, device registration and authentication: When an IoT device first connects to the blockchain network, it generates a unique key pair and registers its identity through the wallet component. The device authenticates itself through NIZK, and records the device's identity information after successful authentication.

[0154] S2, Task creation and assignment: When IoT devices need to perform complex tasks (such as big data processing, deep encryption, etc.), they upload the tasks to the blockchain through smart contract components. Smart contracts assign tasks to appropriate nodes and continuously track the task status.

[0155] S3, data transmission and encryption protection: IoT devices use multi-layer security components to encrypt task data with HE to ensure data transmission security. Encrypted data is transmitted to computing nodes through the network and the calculation is completed in the ciphertext state.

[0156] S4, result return and decryption: After the blockchain node completes the task, it feeds the result back to the smart contract, and the contract transmits the result back to the requesting device. The device uses the private key in the wallet component to decrypt the calculation result to ensure the authenticity and integrity of the result.

[0157] In the prior art, the collection and transmission of carbon emission data often rely on centralized systems, which poses a risk of data tampering and makes it difficult to maintain data consistency across regions and devices. The blockchain IoT security framework proposed in this invention provides a decentralized and tamper-proof solution for the collection and storage of carbon footprint information, effectively improving the credibility and transparency of the data.

[0158] In specific applications, the framework of the present invention can be integrated into a variety of environmental monitoring devices to collect carbon emissions and environmental data. Through the lightweight blockchain architecture of the present invention, each monitoring device will record the data into a decentralized blockchain network after data collection, ensuring that the data cannot be tampered with or deleted once uploaded. The framework uses smart contracts to automate data collection and storage processes without human intervention, ensuring the real-time and integrity of the data. In addition, the system uses non-interactive zero-knowledge proof (NIZK) for device identity authentication to ensure that only authorized monitoring devices can participate in data upload, avoiding the risk of data source forgery. To ensure data privacy and transmission security, the system also introduces homomorphic encryption (HE) technology, which allows monitoring data to be stored and processed in an encrypted state, thereby ensuring the privacy of carbon emission data.

[0159] Application examples of the framework of the present invention include but are not limited to the following scenarios:

[0160] 1. Industrial carbon emissions monitoring.

[0161] The framework of the present invention can be applied to carbon emission monitoring equipment at industrial production sites. These devices report real-time data on greenhouse gas emissions such as carbon dioxide and methane generated during the production process through the blockchain network. The authenticity of each emission record is ensured through the immutability of the blockchain, thereby supporting the decision-making needs of governments and enterprises in carbon footprint verification, carbon credit assessment, etc.

[0162] 2. Urban environmental quality monitoring.

[0163] In the urban air quality monitoring network, the framework of the present invention can be used to collect data on particulate matter (PM2.5, PM10), carbon dioxide concentration and other pollutants in the air. The decentralized storage characteristics of blockchain can ensure the openness and transparency of various monitoring data, making the data traceable and providing a scientific basis for public management departments. Through the setting of smart contracts, automatic warning of abnormal emissions can also be achieved to improve the efficiency of environmental management.

[0164] 3. Data support for the carbon trading system.

[0165] The carbon trading market requires accurate carbon emission data as a basis for transactions. The framework of the present invention can be integrated into carbon emission measurement equipment to ensure the reliability and authenticity of the data on the chain and prevent data tampering during the transaction process. The carbon trading platform can perform credit rating and carbon quota accounting based on the historical data stored in the blockchain to ensure the fairness and transparency of carbon trading.

[0166] Through the blockchain IoT security framework of the present invention, the collection and storage of carbon footprint data achieves the goals of decentralization, non-tamperability and high credibility, providing strong support for achieving carbon neutrality and carbon emission reduction. This application not only fills the technical gap in the safe storage of carbon data under the background of the dual carbon policy, but also provides feasible references and innovative solutions for other fields such as environmental monitoring and energy management.

[0167] like Figure 3 As shown in the figure, the performance of the lightweight blockchain framework under different numbers of devices is shown. The blue curve in the figure shows the change in the number of transactions per second (TPS) as the number of devices increases. When the number of devices is low, the TPS can reach up to 1900 transactions per second. As the number of devices increases to 1000, the TPS gradually decreases to 600 transactions per second, indicating that the transaction processing capacity of the system decreases with the increase in the number of devices, but still maintains a high processing speed. The yellow curve shows the smart contract transaction confirmation time. When the number of devices increases to 1000 (corresponding to 3000 smart contracts), the confirmation time reaches 0.9 seconds. This shows that the transaction confirmation time increases with the increase in the number of devices, but the overall increase is relatively slow, and the system can still complete the confirmation in a shorter time. The red curve represents the time required to generate a block. When the number of devices is less than 500, the block time is about 0.4 seconds, and when the number of devices increases to 1000, the block time increases to 1.4 seconds. This shows that the more devices there are, the longer the block time is, but this is not the main factor. The block time is mainly related to the consensus mechanism, which allows multiple consensus transactions to be packaged into blocks within a fixed time period.

[0168] like Figure 4 As shown in Figure 1, this paper compares the average data size processed by a single client in 1800 seconds under a decentralized architecture and a traditional centralized architecture. The red line represents the total amount of data automatically generated by a single client at a rate of 500KB / s, which is 878.91MB in 1800 seconds. The blue line represents the total amount of data processed under the decentralized architecture, which is 601.27MB in 1800 seconds. The amount of data processed by the traditional centralized architecture (yellow line) is far less than that of this paper's architecture, with a total of only 279.62MB in 1800 seconds. The data shows that the decentralized architecture has improved its data processing capacity by 115.06% compared to the traditional centralized architecture.

[0169] There are three reasons for this difference:

[0170] 1. Currently, the computing power of IoT terminals is relatively low.

[0171] 2. The proposed framework offloads the compression task to the computing node through the smart contract, and the computing node returns the result after the compression is completed.

[0172] 3. Decentralized (distributed) architecture allows for better coordination of tasks and processing power between network nodes.

[0173] Therefore, the proposed network architecture is more in line with the characteristics of the third generation of Internet of Things, which emphasizes intelligence, autonomy, and collaboration.

[0174] As shown in Table 1, the test results in the table include the average resource usage of four blockchain nodes and 1,000 simulated clients. Since smart contracts contain two types of operations: query (get) and set, the test results are divided into get and set scenarios.

[0175] Table 1 Average resource usage of four blockchain nodes and 1000 simulated clients

[0176] In the get operation, the memory usage of the Docker container nodes (node0, node1, node2, node3) is consistent, with a maximum value of about 44MB and an average of about 43.7MB. The CPU usage peak range is 43.19 / % to 49.44 / %, and the average is between 31.92 / % and 32.77 / %. The network traffic (inbound and outbound) is consistent, with inbound being 3.8MB and outbound being 5.0MB. For the IoT process (ClientWorker.js), the maximum memory usage is 1.4MB and the average is 0.9MB. The CPU usage is high, with a maximum of 91.43 / % and an average of 58.78 / %. The network traffic is similar to the Docker container, with inbound traffic being 3.8MB and outbound traffic being 5.0MB.

[0177] In the set operation, the memory usage of the Docker container nodes (node0, node1, node2, node3) increased significantly, with a maximum value of about 262.4MB and an average value of about 164.9MB. The CPU usage also increased, with a peak value between 65.62 / % and 74.23 / % and an average value between 44.78 / % and 45.27 / %. The network traffic increased significantly, with inbound traffic of about 28.9MB to 29.3MB, outbound traffic of about 41.5MB to 42.0MB, and disk write operations of 91.8MB. For the IoT process (ClientWorker.js), the memory usage increased slightly, with a maximum value of 1.9MB and an average value of 1.5MB. The CPU usage remained high, with a maximum value of 81.25 / % and an average value of 58.59 / %. The network traffic increased significantly, with inbound traffic of 28.9MB and outbound traffic of 41.6MB, and the disk write volume remained unchanged.

[0178] It should be noted that the embodiments of the present invention can be implemented by hardware, software, or a combination of software and hardware. The hardware part can be implemented using dedicated logic; the software part can be stored in a memory and executed by an appropriate instruction execution system, such as a microprocessor or dedicated design hardware. It can be understood by a person of ordinary skill in the art that the above-mentioned devices and methods can be implemented using computer executable instructions and / or contained in a processor control code, such as a carrier medium such as a disk, CD or DVD-ROM, a programmable memory such as a read-only memory (firmware), or a data carrier such as an optical or electronic signal carrier. Such code is provided on the carrier medium. The device and its modules of the present invention can be implemented by hardware circuits such as very large-scale integrated circuits or gate arrays, semiconductors such as logic chips, transistors, etc., or programmable hardware devices such as field programmable gate arrays, programmable logic devices, etc., can also be implemented by software executed by various types of processors, and can also be implemented by a combination of the above-mentioned hardware circuits and software, such as firmware.

[0179] The above description is only a specific implementation mode of the present invention, but the protection scope of the present invention is not limited thereto. Any modifications, equivalent substitutions and improvements made by any technician familiar with the technical field within the technical scope disclosed by the present invention and within the spirit and principle of the present invention should be covered by the protection scope of the present invention.

Claims

1. A decentralized IoT security framework system based on blockchain, characterized in that: The framework specifically includes: Wallet component: used to manage device identity, ensure the uniqueness of each IoT device in the blockchain network, and provide device private key storage and smart contract address association; Smart contract component: responsible for managing and allocating computing tasks to realize automated processing of tasks; Multi-layer security components: used to ensure the security of IoT device authentication and data transmission; General components: used to achieve compatibility between the underlying modules of IoT devices and the blockchain application layer, and provide a cross-platform general interface; The framework is suitable for resource-constrained IoT devices by embedding blockchain components in cellular communication modules, and the modules cooperate with each other through chain data transmission structure and lightweight blockchain protocol; The wallet component is the identity management hub between the device and the blockchain network, responsible for generating, storing and verifying the device's identity key. The device registration process in the blockchain network is as follows: (1) Key generation and storage: When the device accesses the network, an encryption algorithm is called to generate a unique public-private key pair, where the public key is used as the device's identity and the private key is used for signing and decryption operations. The private key is stored in the security chip or protected storage area in the cellular communication module. When the device needs to reconnect or when identity authentication fails, the wallet component allows the key pair to be regenerated and updated to the blockchain. (2) Key verification: When a device sends a task request or transmits data, the wallet component uses the private key to digitally sign the data, and the receiving node verifies the signature using the device's public key; (3) Device identity management: Each time a task is requested or data is transmitted, the device uses a private key to sign the request data, and the wallet component verifies the signature through the blockchain node. After successful verification, the device obtains the task execution permission and can access the relevant resources in the blockchain.

2. The decentralized IoT security framework system based on blockchain as claimed in claim 1, characterized in that: The smart contract component is responsible for task management and data interaction, and realizes task allocation and automated processing. The smart contract execution task process is as follows: (1) Task creation and assignment: When an IoT device needs to complete complex calculations, the task content and encrypted data are uploaded to the blockchain network through a smart contract. Based on the task type, data volume, and device requirements, the scheduling algorithm embedded in the smart contract allocates tasks based on the resource utilization and computing power of the blockchain network nodes. (2) Task status management: The smart contract assigns a unique task ID and status identifier to each task. During the task execution, the node will upload the task status to the contract in real time. The contract will update and record the task status for the device to query. (3) Result return mechanism: After the computing node completes the task, it encrypts the result and returns it to the smart contract, and updates the task status to "completed". After the requesting device receives the result notification, it uses the private key to decrypt the data through the wallet component to obtain the calculation result. The result is stored in the location specified by the smart contract, and the device can query it again in subsequent interactions.

3. The decentralized IoT security framework system based on blockchain as claimed in claim 1, characterized in that: The multi-layer security component mainly adopts non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) technology. The process of non-interactive zero-knowledge proof (NIZK) and homomorphic encryption (HE) is as follows: (1) Non-interactive zero-knowledge proof (NIZK) identity authentication: (1.1) Initialization: When the device first connects to the network, it generates a random number r and combines it with the private key to generate proof data. ; (1.2) Authentication challenge: The device calculates the challenge value , where PK is the device public key and H is the hash function, forming a zero-knowledge proof; (1.3) Identity verification process; The device sends authentication data To the blockchain node, the blockchain node calculates the verification value , and compare whether the c value matches. If it matches, the device authentication passes, otherwise the authentication fails; (1.4) Certification validity period: The validity period of the certification is set to a configurable time window; (2) Homomorphic encryption (HE) data protection and transmission: (2.1) Data encryption process: Before the task data is transmitted, the device uses the HE algorithm to encrypt the data and transmits the encrypted data to the blockchain network. The encryption algorithm uses the elliptic curve ElGamal HE algorithm; (2.2) Ciphertext calculation and result transmission: The blockchain node performs calculations on the ciphertext and returns the ciphertext result to the smart contract, requesting the device to decrypt the result using the private key in the wallet component to obtain the original calculation result.

4. The decentralized IoT security framework system based on blockchain as claimed in claim 1, characterized in that: The common components ensure compatibility and cross-platform support between different IoT devices, and provide system abstraction layer and blockchain interface support: (1) Operating System Abstraction Layer (OSAL): (1.1) Task management interface: provides a general API interface for device task management, realizing task allocation and scheduling functions that are independent of the operating system; (1.2) System abstraction: OSAL abstracts the API interface of the operating system and supports resource management such as multithreading, semaphores, and task queues, so that the framework can achieve consistent operations on different operating systems; (2) Driver Abstraction Layer (DAL): (2.1) Hardware compatibility support: DAL encapsulates the device's hardware drivers, such as UART, I2C, and HTTP interfaces, so that IoT devices can adapt to different types of network communication interfaces; (2.2) Protocol adaptation: Provide support for different network protocols through DAL to ensure that devices can communicate stably in different network environments; (3) Blockchain protocol support: (3.1) Remote Procedure Call (RPC) interface: provides a standardized interface for interacting with blockchain nodes, supporting devices to remotely call smart contracts, query on-chain data, and submit task requests; (3.2) Data encoding and encryption tools: Provide standardized JSON encoding, RLP encoding, and key pair management library to support device data packaging, transmission encryption, and transaction management.

5. The decentralized IoT security framework system based on blockchain as claimed in claim 1, characterized in that: The process and interaction of the decentralized IoT security framework system based on blockchain is as follows: S1, device registration and authentication: When an IoT device first connects to the blockchain network, a unique key pair is generated through the wallet component and the identity is registered. The device is authenticated through NIZK, and the device's identity information is recorded after successful authentication; S2, Task creation and assignment: When IoT devices need to perform complex tasks, they upload the tasks to the blockchain through smart contract components. Smart contracts assign tasks to appropriate nodes and continuously track the task status. S3, data transmission and encryption protection: IoT devices use multi-layer security components to perform HE encryption on task data. The encrypted data is transmitted to the computing node through the network and the calculation is completed in the ciphertext state. S4, result return and decryption: After the blockchain node completes the task, it feeds the result back to the smart contract, and the contract transmits the result back to the requesting device. The device uses the private key in the wallet component to decrypt the calculation result.

6. A blockchain-based IoT device identity management method for the blockchain-based decentralized IoT security framework system according to any one of claims 1 to 5, characterized in that: The following steps are involved: Generate and store the public and private key pairs of the device through the wallet component, where the public key serves as the identity of the device in the blockchain network, and the private key is used for signing and decryption; When a device first accesses the network, an encryption algorithm is called to generate a unique public-private key pair, and the public key is registered to the blockchain to establish the device identity; Each time the device sends a task request or transmits data, the private key is used to sign the data, and the public key is used to verify the device identity on the blockchain node to ensure the uniqueness of the device and the integrity of the data.

7. A blockchain-based decentralized task allocation method for the blockchain-based decentralized Internet of Things security framework system according to any one of claims 1 to 5, characterized in that: The following steps are involved: When the device generates a task request, it uploads the task data through the smart contract component and generates a unique task ID; According to the type and data volume of the device task, the smart contract component selects the appropriate blockchain node and assigns the task through the embedded scheduling algorithm; The task status is recorded in the blockchain and updated in real time. After the task is completed, the node uploads the encrypted calculation result to the smart contract. The device uses the private key to decrypt the result through the wallet component to complete the task execution and result verification.

8. A blockchain data protection method based on non-interactive zero-knowledge proof and homomorphic encryption for the decentralized IoT security framework system based on blockchain as described in any one of claims 1 to 5, characterized in that: The following steps are involved: When a device first accesses the network, authentication data is generated through non-interactive zero-knowledge proof, the device calculates the authentication challenge value and sends the authentication data to the blockchain node; The blockchain node verifies the device identity based on the device's authentication data, and generates an authentication token that is valid for a certain period of time after verification; During the transmission of device task data, the device uses a homomorphic encryption algorithm to encrypt the data. The blockchain node directly calculates on the ciphertext and returns the encrypted result to the device, which decrypts it using a private key to ensure data security and privacy protection.

Images