System and method for IOT security
The present disclosure relates to a method and system for enabling IOT security using a decentralized IOT security platform that leverages the advanced communication and blockchain security thread model to protect IOT eco-systems. The platform uses a multi-chain data schema including a device chain and an event chain. The multi-chain data schema uses a time-envelope mechanism to generate an event to connect different device chains and enforce a set of security rules through smart contracts. The method comprising receiving an encrypted block from IOT device with event data and verifying the device signature and identity based on certain rules within the device chain. Further, the method comprising determining access to event chain using previous token, current token and timestamp of the encrypted block and updating the event chain upon access determination. The event chain protects data integrity and confidentiality against malicious packets, unauthorized devices, weak encryption and man-in-the-middle attacks.
1. A method of enabling secure access to at least one Internet of Things (JOT) device on a network by an JOT security system, comprising:
receiving, by a processor of an JOT gateway device of the JOT security system, at least one encrypted block generated by at least one JOT device on the network, wherein the at least one encrypted block comprises a unique device identification (ID), a previous device token, a current device token, a time stamp, and an event data;
parsing, by the processor, the at least one encrypted block received to determine the unique device ID of the at least one JOT device;
verifying, by the processor, the authenticity of the at least one JOT device using a device chain to validate a device signature and identity of the at least one JOT device;
determining, by the processor, access to an event chain using a previous event token and a current event token of the at least one encrypted block, upon successful verification of the at least one JOT device;
validating, by the processor, the received event data by time synchronizing the device chain and the event chain;
updating, by the processor, the event chain with the received event data upon verifying the received event data using the time stamp, the previous device token and the current device token of the at least one encrypted block.
2. The method as claimed in claim 1 , wherein the device chain comprises one device block for each JOT device, each device block comprises unique device ID and a link to a previous device ID, a previous device token, a current device token, an event chain address, a payload, a gateway group ID, a smart contract information, and other optional parameters associated with each JOT device.
3. The method as claimed in claim 2 , wherein the event chain comprises at least one event block for each device block of the device chain, wherein each event block comprises device signature associated with the at least one JOT device, and the event data generated by at least one IOT device at a given time.
4. The method as claimed in claim 1 , wherein the device chain and the event chain are stored in a distributed ledger database of the IOT gateway device.
5. The method as claimed in claim 1 , further comprising:
broadcasting the updated event data to one or more peer gateway nodes; and
transmitting the updated event data stored in the event chain to a cloud-based storage system after a predetermined time.
6. The method as claimed in claim 1 , wherein the time synchronizing is performed using one or more smart contracts.
7. The method as claimed in claim 1 , wherein the distributed ledger stores a list of device ID/device signature and event address.
8. An IOT security system for enabling secure access to at least one Internet of Things (JOT) device on a private network, comprising:
at least one IOT gateway device for communicating with at least one IOT device, wherein the at least one IOT gateway device comprises:
a processor;
a distributed ledger database communicatively coupled with the processor; and
a memory coupled to the processor, wherein the memory stores processor instructions, which, on execution, causes the processor to:
receive at least one encrypted block generated by at least one IOT device on the private network, wherein the at least one encrypted block comprises a unique device identification (ID), previous token, current token, time stamp, and event data;
parse the at least one encrypted block received to determine the unique device ID of the at least one IOT device;
verify the authenticity of the at least one IOT device using a device chain to validate a device signature and identity of the at least one IOT device;
determine access to an event chain using the previous token and the current token of the at least one encrypted block, upon successful verification of the at least one IOT device;
verify, by the processor, the received event data by time synchronizing the device chain and the event chain; and
update the event chain with the received event data upon verifying the received event data using time stamp, the previous token and the current token of the at least one encrypted block.
9. The system as claimed in claim 8 , wherein the device chain comprises one device block for each IOT device, each device block comprises unique device ID and link to previous device ID, previous token, current token, event chain address, payload, gateway group ID, smart contract information, and other optional parameters associated with each IOT device.
10. The system as claimed in claim 9 , wherein the event chain comprises at least one event block for each device block of the device chain, wherein each event block comprises device signature associated with the at least one IOT device, and the event data generated by at least one IOT device at a given time.
11. The system as claimed in claim 8 , wherein the device chain and the event chain are stored in a distributed ledger of the IOT gateway device.
12. The system as claimed in claim 8 , wherein the processor instructions further cause the processor to:
broadcast the updated event data to one or more peer gateway nodes; and
transmit the updated event data stored in the event chain to a cloud-based storage system after a predetermined time.
13. The system as claimed in claim 8 , wherein the time synchronizing is performed using one or more smart contracts.
14. The system as claimed in claim 8 , wherein the distributed ledger stores a list of device ID/device signature and the event address.
15. A non-transitory computer readable medium including instructions stored thereon that when processed by at least one processor cause a processor of an IOT gateway device to perform acts of:
receive at least one encrypted block generated by at least one IOT device on a private network, wherein the at least one encrypted block comprises a unique device identification (ID), previous token, current token, time stamp, and event data;
parse the at least one encrypted block received to determine the unique device ID of the at least one IOT device;
verify the authenticity of the at least one IOT device using a device chain to validate a device signature and identity of the at least one IOT device;
determine access to an event chain using the previous token and the current token of the at least one encrypted block, upon successful verification of the at least one IOT device;
verify, by the processor, the received event data by time synchronizing the device chain and the event chain; and
update the event chain with the received event data upon verifying the received event data using time stamp, the previous token and the current token of the at least one encrypted block.
16. The medium as claimed in claim 15 , wherein the device chain comprises one device block for each IOT device, each device block comprises unique device ID and link to previous device ID, previous token, current token, event chain address, payload, gateway group ID, smart contract information, and other optional parameters associated with each IOT device.
17. The medium as claimed in claim 16 , wherein the event chain comprises at least one event block for each device block of the device chain, wherein each event block comprises device signature associated with the at least one IOT device, and the event data generated by at least one IOT device at a given time.
18. The medium as claimed in claim 15 , wherein the device chain and the event chain are stored in a distributed ledger of the IOT gateway device.
19. The medium as claimed in claim 15 wherein the processor instructions further cause the processor to:
broadcast the updated event data to one or more peer gateway nodes; and
transmit the updated event data stored in the event chain to a cloud-based storage system after a predetermined time.
20. The medium as claimed in claim 15 , wherein the time synchronizing is performed using one or more smart contracts, wherein the distributed ledger stores a list of device ID/device signature and the event address.