Audit Blockchain Using Hash Chains for IoT Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT and industrial systems, generating and processing audit data is challenging due to insecure locations, limited computational capacity, intermittent energy and network outages, and the need for secure and reliable proof of identity and data integrity, especially in environments where devices may be damaged, stolen, or spoofed.
Innovation Solution
A method and infrastructure that uses an audit blockchain with cryptographic hash functions to link data records, ensuring immutability and tamper-proofing, allowing for secure storage and verification of audit data even under resource constraints, and enabling multi-tenancy and data privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If audit data is stored in distributed IoT devices, then data integrity and identity proofing are improved, but device security and reliability deteriorate due to insecure locations and resource constraints
Solution Approach 1:
The patent segments audit data into individual audit records, each containing a hash of the previous record, creating a chain structure. This segmentation allows verification of data integrity without requiring the entire dataset to be stored securely in one location, addressing the contradiction between distributed storage reliability and device security vulnerabilities.
Solution Approach 2:
The patent introduces cryptographic hash functions as intermediaries between audit data and verification processes. The hash chain acts as a mediator that proves data integrity without exposing the actual audit data, enabling verification while maintaining security despite insecure device locations and resource constraints.
2Reliability
If cryptographic hash functions are used to link audit records, then tamper-proofing and data integrity are improved, but computational capacity requirements increase
Solution Approach 1:
The patent applies partial cryptographic hashing by only hashing critical portions of audit records (such as identity proofs and data integrity markers) rather than entire datasets. This selective hashing provides sufficient tamper-proofing for verification purposes while reducing the computational burden on resource-constrained IoT devices.
3Loss of information
If complete audit data streams are transmitted, then audit completeness is improved, but energy consumption and network bandwidth increase
Solution Approach 1:
The patent extracts and transmits only essential verification elements (hash values and critical metadata) from complete audit data streams. This extraction approach maintains audit completeness for verification purposes while dramatically reducing energy consumption and network bandwidth requirements for data transmission.
4Measurement precision
If audit records include full payload data, then verification accuracy is improved, but data storage requirements and processing time increase
Solution Approach 1:
The patent uses cryptographic hash copies of audit records instead of storing and transmitting full payload data. These hash copies serve as verified replicas that enable accurate verification of data integrity and identity proofs while requiring minimal storage space and processing time compared to complete data sets.
Data Source
AI summary
A system and method of recording data from a number of devices in a distributed network system in a manner adaptable for auditing the device output. The devices may include one or more control, sensor, edge, or peripheral computing devices physically separate in the distributed network system and in communication with a control server. Such distributed networks systems are common in SCADA or IoT applications. The content stream of data records output from the devices are recorded; a payload stripped stream of data records which are stripped of the payload are recorded and preferably retained by an escrow service. The metadata of the data records includes the hash value of one or more predecessor data records. The hash values are calculated based on the payload and a linkage function, preferably a cryptographic function. A comparison of hash values of the payload stripped stream and the content stream provides the audit ability.