Proof-of-Work Protocol for Securing IoT Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network security measures are inadequate for securing Internet-of-Things (IoT), industrial control systems (ICS), and supervisory control and data acquisition (SCADA) networks due to limitations in computing capacity, making them vulnerable to attacks and subversions.
Innovation Solution
Implementing a proof-of-work-based security protocol that utilizes unsecured channels for devices to exchange challenges and responses, leveraging idle computing resources to generate and verify cryptographic function results, and incorporating these into a blockchain for long-term pattern analysis to detect potential attacks without degrading device performance or requiring extensive encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional network security measures (strong encryption) are implemented, then security is improved, but device complexity and computational requirements increase
Solution Approach 1:
The security protocol is segmented into discrete challenge-response cycles rather than continuous encryption. Each cycle involves a challenge message, computational task, and verification step, allowing devices to perform security functions in manageable increments rather than requiring sustained high computational capacity for continuous encryption.
Solution Approach 2:
Devices perform self-verification of their computational responses without requiring external authentication or complex verification systems. The challenged device computes a cryptographic function result and transmits it, while the challenger simply verifies the result characteristic, allowing each device to secure its own communications without burdening other devices with complex verification capabilities.
2Reliability
If conventional encryption is applied to all network communications, then security is improved, but bandwidth usage and energy consumption increase
Solution Approach 1:
Instead of continuous encryption of all network traffic, the protocol applies security measures periodically through discrete challenge-response cycles. Security verification occurs at specific intervals when challenges are issued, rather than continuously encrypting every byte of communication, thereby reducing overall energy consumption while maintaining security where needed.
Solution Approach 2:
The protocol applies security measures partially only to the challenge-response communications rather than to all network traffic. This selective application ensures that security is enforced at critical authentication points without the excessive energy consumption associated with encrypting every communication between devices.
3Difficulty of detecting and measuring
If proof-of-work challenges are issued frequently, then attack detection capability is improved, but device performance degradation increases
Solution Approach 1:
The challenge issuance rate is made dynamic rather than fixed. Challenges are issued at intervals adjusted to the operational context, ensuring sufficient detection capability while allowing devices to maintain normal performance during periods when frequent challenges would be disruptive. The system adapts the security verification frequency based on network conditions and device workload.
Data Source
AI summary
A first device in a network issues a proof-of-work challenge to a second device in the network. The second device computes a cryptographic function result to satisfy a criterion indicated in the challenge. The second device returns a challenge response comprising inputs to the cryptographic function that the second device used to compute the cryptographic function result satisfying the criterion. The first device, upon receiving the challenge response, verifies that the inputs to the cryptographic function yield a result satisfying the criterion. Responsive to verifying the challenge response, the first device updates a blockchain based upon the challenge response.