Blockchain Multi-Factor IoT Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT security systems face vulnerabilities in authentication, particularly when using mobile terminals to control IoT devices, as hacked authentication information can lead to unauthorized access and data breaches, and the use of authentication devices like cards or USBs is inconvenient and prone to loss.
Innovation Solution
A blockchain-based multi-factor security authentication system that uses a combination of identification information from both the IoT device and the user terminal, recorded on a blockchain, to verify the authenticity of the user terminal, eliminating the need for separate authentication devices and enhancing security by requiring both the blockchain and authentication server to be hacked simultaneously for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (ID, password, security card, bio-information) are used for controlling IoT devices, then authentication functionality is provided, but security vulnerabilities arise when authentication information is hacked or leaked
Solution Approach 1:
The authentication system is segmented into multiple independent components: the user terminal generates authentication information, the blockchain stores hash values immutably, and the IoT device verifies authentication. This segmentation ensures that compromising one component does not compromise the entire system, as the authentication information itself is never stored centrally but rather distributed across these components with the blockchain providing immutable verification.
Solution Approach 2:
The blockchain acts as an intermediary between the user terminal and IoT device for authentication verification. Instead of direct trust between these components, the blockchain mediates by storing and verifying hash values, providing a decentralized, tamper-proof verification mechanism that enhances security without requiring direct communication channels between the terminal and device.
2Reliability
If authentication devices (authentication card, USB) are used to prevent authentication information from being hacked, then security is improved, but device complexity increases and convenience deteriorates due to loss risk and carrying burden
Solution Approach 1:
The user terminal itself serves as the authentication device by generating and managing authentication information locally. The terminal uses its own hardware identifiers (IMEI, serial number) and stored secret values to create authentication credentials, eliminating the need for separate physical authentication devices. This self-service approach maintains security while improving convenience as users carry only their terminal.
Solution Approach 2:
The user terminal is designed to perform multiple functions including communication, computation, and authentication. By integrating authentication capabilities directly into the terminal rather than requiring separate dedicated authentication devices, the system achieves multi-functionality that improves ease of operation while maintaining security through the terminal's existing security features.
3Reliability
If separate authentication devices are required for secure authentication, then security is improved, but device complexity and cost increase
Solution Approach 1:
The authentication functionality is merged with the user terminal itself rather than being separated into dedicated authentication devices. The terminal combines communication capabilities, computation resources, and authentication functions into a single integrated system, reducing overall system complexity while maintaining security through the blockchain-verified authentication mechanism.
Data Source
AI summary
Provided is a system for blockchain-based multi-factor security authentication between a mobile terminal and an IoT device, the system including: the IoT device; a user terminal remotely controlling operation of the IoT device; and an authentication server approving control of the IoT device by the user terminal, wherein the authentication server has: a first function of recording information related to a registration hash value in a blockchain; a second function of receiving an authentication hash value generated by the user terminal when approval for control of the IoT device is requested, and determining validity of the authentication hash value by using the information related to the registration hash value recorded in the blockchain; and a third function of approving control of the IoT device by the user terminal when the authentication hash value has validity as a result of the determination.