Internet of things blockchain auditing
Disclosed are various examples of utilizing blockchain for tracking and auditing of systems and processes that involve Internet-of-Things (IoT) devices. In one example, an IoT event definition is installed on a gateway. The IoT event definition includes a threshold value associated with an asset type. The gateway receives sensor data from an IoT device associated with the asset type. The gateway determines that the IoT device triggered an IoT event based on the sensor data and the IoT event definition. The sensor data indicates that the IoT device triggered the IoT event based on the threshold value. The gateway transmits, to a management service, a request to record an IoT event to a blockchain. The request includes the sensor data. A block that includes the sensor data is recorded to the blockchain.
1. A system comprising:
a gateway device; and
a data store comprising executable instructions which, when executed by a processor, cause the gateway device to at least:
install an IoT event definition, the IoT event definition comprising a threshold value associated with an asset type;
receive sensor data from an IoT device associated with the asset type;
determine that the IoT device triggered an IoT event based on the sensor data and the IoT event definition, the sensor data indicating that the IoT device triggered the IoT event based on the threshold value; and
transmit, to a management service, a request to record the IoT event to a blockchain, the request comprising the sensor data indicating that the IoT device triggered the IoT event, wherein the management service records a block to the blockchain, the block comprising the sensor data.
2. The system of claim 1 , wherein the blockchain is hosted by a blockchain service that hosts the blockchain in a plurality of nodes external to the management service.
3. The system of claim 2 , wherein the management service authenticates with the blockchain service based on a certificate uniquely associated with an enterprise.
4. The system of claim 1 , wherein the executable instructions, when executed by the processor, further cause the gateway device to at least:
retrieve the IoT event definition from a command queue for the gateway device, the command queue being stored by the management service.
5. The system of claim 1 , wherein the executable instructions, when executed by the processor, further cause the gateway device to at least:
generate IoT event data comprising the sensor data and metadata, the metadata identifying an entity responsible for a particular asset, wherein the particular asset is physically associated with the IoT device, and wherein the request to record the IoT event comprises the IoT event data.
6. The system of claim 1 , wherein the gateway device comprises gateway credentials that are concealed from users during a gateway enrollment, and wherein the gateway device authenticates with the management service based on the gateway credentials.
7. The system of claim 1 , wherein the IoT event definition specifies a threshold period of time to maintain a particular comparative relationship with the threshold value, and wherein the sensor data indicates that a sensor maintains the particular comparative relationship with the threshold value for the threshold period of time.
8. A non-transitory computer-readable medium embodying executable instructions which, when executed by a processor, cause a gateway device to at least:
install an IoT event definition, the IoT event definition comprising a threshold value associated with an asset type;
receive sensor data from an IoT device associated with the asset type;
determine that the IoT device triggered an IoT event based on the sensor data and the IoT event definition, the sensor data indicating that the IoT device triggered the IoT event based on the threshold value; and
transmit, to a management service, a request to record the IoT event to a blockchain, the request comprising the sensor data indicating that the IoT device triggered the IoT event, wherein the management service records a block to the blockchain, the block comprising the sensor data.
9. The non-transitory computer-readable medium of claim 8 , wherein the blockchain is hosted by a blockchain service that hosts the blockchain in a plurality of nodes associated with a plurality of management services.
10. The non-transitory computer-readable medium of claim 8 , wherein the management service authenticates with a blockchain service based on a certificate uniquely associated with an enterprise.
11. The non-transitory computer-readable medium of claim 8 , wherein the executable instructions, when executed by the processor, further cause the gateway device to at least:
retrieve the IoT event definition from a command queue for the gateway device, the command queue being stored by the management service.
12. The non-transitory computer-readable medium of claim 8 , wherein the executable instructions, when executed by the processor, further cause the gateway device to at least:
generate IoT event data comprising the sensor data and metadata, the metadata identifying an entity responsible for a particular asset, wherein the particular asset is physically associated with the IoT device, and wherein the request to record the IoT event comprises the IoT event data.
13. The non-transitory computer-readable medium of claim 8 , wherein the gateway device comprises gateway credentials that are concealed from users during a gateway enrollment, and wherein the gateway device authenticates with the management service based on the gateway credentials.
14. A method performed by a gateway device, the method comprising:
installing an IoT event definition, the IoT event definition comprising a threshold value associated with an asset type;
receiving sensor data from an IoT device associated with the asset type;
determining that the IoT device triggered an IoT event based on the sensor data and the IoT event definition, the sensor data indicating that the IoT device triggered the IoT event based on the threshold value; and
transmitting, to a management service, a request to record the IoT event to a blockchain, the request comprising the sensor data indicating that the IoT device triggered the IoT event, wherein the management service records a block to the blockchain, the block comprising the sensor data.
15. The method of claim 14 , wherein the blockchain is hosted by a blockchain service that hosts the blockchain in a plurality of nodes external to the management service.
16. The method of claim 15 , wherein the management service authenticates with the blockchain service based on a certificate uniquely associated with an enterprise.
17. The method of claim 14 , further comprising:
retrieving the IoT event definition from a command queue for the gateway device, the command queue being stored by the management service.
18. The method of claim 14 , further comprising:
generating IoT event data comprising the sensor data and metadata, the metadata identifying an entity responsible for a particular asset, wherein the particular asset is physically associated with the IoT device, and wherein the request to record the IoT event comprises the IoT event data.
19. The method of claim 14 , wherein the gateway device comprises gateway credentials that are concealed from users during a gateway enrollment, and wherein the gateway device authenticates with the management service based on the gateway credentials.
20. The method of claim 14 , wherein the IoT event definition specifies a threshold period of time to maintain a particular comparative relationship with the threshold value, and wherein the sensor data indicates that a sensor maintains the particular comparative relationship with the threshold value for the threshold period of time.