Blockchain Gateway for IoT Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT networks, devices face challenges with resource-intensive blockchain-based authentication, particularly for nodes with low storage capacity, and existing proxy solutions require trust in a central entity, which defeats the purpose of distributed blockchain design, and there's a need to validate messages without being cheated.
Innovation Solution
A method involving a gateway that receives requests from communication devices, checks a distributed blockchain, creates and executes smart contracts across multiple blockchain networks to validate responses, ensuring atomic operations and preventing cheating by ensuring the gateway cannot send false values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If a provider acts as a proxy between the device and the blockchain, then resource consumption for low-capacity nodes is reduced, but trust in a central entity is required which defeats the purpose of distributed blockchain design
Solution Approach 1:
The patent introduces a gateway as an intermediary component that enables resource-constrained IoT devices to access blockchain networks without requiring them to run full nodes. The gateway handles complex blockchain operations while devices only need to communicate simple requests and receive responses, thus reducing resource consumption while maintaining decentralized trust through the gateway's transparent operation
Solution Approach 2:
The system segments the blockchain functionality into two parts: the gateway handles heavy computational tasks including blockchain node operations and smart contract execution, while IoT devices only perform lightweight authentication and data access. This segmentation allows low-resource devices to benefit from blockchain security without bearing the computational burden
2Ease of operation
If the gateway sends responses to devices, then authentication is provided, but the gateway may cheat by sending false values without being caught
Solution Approach 1:
The patent implements a feedback mechanism where devices can verify gateway responses by checking them against the blockchain ledger. The gateway must provide cryptographic proofs and signatures for its responses, and devices can independently validate these against the distributed blockchain state, creating a feedback loop that prevents cheating
Solution Approach 2:
The system performs preliminary validation by having the gateway sign responses with cryptographic keys before sending them to devices. The digital signatures are generated in advance as part of the response preparation, allowing devices to immediately verify authenticity without requiring real-time blockchain queries for every response validation
3Adaptability or versatility
If devices register with different local networks or platforms, then network access is enabled, but multiple registration and authentication mechanisms consume multiple resource cycles
Solution Approach 1:
The patent creates a universal gateway interface that works across multiple blockchain networks and IoT platforms. The gateway implements a standardized authentication protocol that devices can use regardless of which specific blockchain network or local platform they need to access, eliminating the need for devices to implement multiple different registration and authentication mechanisms
Data Source
Figure 1
Figure 2
AI summary
For securing a blockchain access through a gateway (GAT) on behalf of a communication device (CD) in a wireless telecommunication network (TN), an apparatus (AM) operating with the gateway: receives a request (Req) sent from a communication device (CD) through the gateway (GAT), the request containing an identifier (IdCD) of the communication device, an identifier (IdR) of the request and a key (K), checks a distributed blockchain that includes information regarding the communication device and that is stored in a first blockchain network (BN1) and retrieving a value (V) corresponding to the key (K), creates a smart contract based on the key (K), the value (V), a timestamp (T), the identifier (IdCD) of the communication device, and the identifier (IdR) of the request, the smart contract being defined to confirm the validity of value (V) corresponding to the key (K) in the first blockchain network (BN1), appends the smart contract to a second blockchain network (BN2), the smart contract having to be executed on the first blockchain network (BN1) by at least one validator having access to the first blockchain network (BN1) and second blockchain network (BN2), signs a response (Res) containing the key (K), the value (V), and the identifier (IdR) of the request with a certificate (Cert), sends the response (Res) to the communication device (CD) through the gateway (GAT).