Systems, methods, and media for sharing IoT device profile data
Sharing IoT device (IoTd) profile data is provided, comprising: generating at least one access control rule to protect an IoTd; publishing first IoTd profile data in a first new block (FNB) of a blockchain of a blockchain network (BN), wherein the first IoTd profile data comprises the at least one access control rule; and committing the FNB to the blockchain based on a consensus algorithm by: a manufacturer of the IoTd committing the FNB to the blockchain; a security vendor (SV) participating in the BN committing the FNB to the blockchain when the SV is a sole SV participating in the BN; or the SV committing the FNB to the blockchain based on consensus among at least the SV and a plurality of security vendors when the SV and the plurality of security vendors are participating in the BN.
1. A system for sharing Internet of Things (IoT) device profile data, the system comprising:
a memory; and
a hardware processor coupled to the memory that is configured to:
generate at least one access control rule to protect an IoT device;
publish first IoT device profile data in a first new block of a blockchain of a blockchain network, wherein the first IoT device profile data comprises the at least one access control rule; and
commit the first new block to the blockchain based on a consensus algorithm by:
the security vendor committing the first new block to the blockchain based on consensus among at least the security vendor and one or more internet service providers (ISP) managing the IoT device when the security vendor and the one or more ISPs are participating in the blockchain network;
an ISP participating in the blockchain network committing the first new block to the blockchain based on consensus among at least the ISP and the one or more ISPs managing the IoT device when the ISP and the one or more ISPs are participating in the blockchain network.
2. The system of claim 1 , wherein the at least one access control rule comprises an L3/L4 firewall rule, a Transport Layer Security firewall rule, or a privacy rule.
3. The system of claim 1 , wherein the hardware processor is further configured to:
sign the first IoT device profile data using a private key while having revocable authorization to act as a validating node.
4. The system of claim 1 , wherein the consensus algorithm comprises using a Practical Byzantine Fault Tolerance protocol among at least four validating nodes of the blockchain network to reach consensus.
5. The system of claim 1 , wherein the hardware processor is further configured to:
transmit the first IoT device profile data to a device that enforces the at least one access control rule.
6. The system of claim 1 , wherein the hardware processor is further configured to:
generate at least one other access control rule; and
publish second IoT device profile data in a second new block of the blockchain,
wherein the second IoT device profile data comprises the at least one other access control rule, and
wherein the second new block is linked to the first new block.
7. The system of claim 6 , wherein the hardware processor is further configured to:
validate a request to update the at least one access control rule based on consensus with at least one participant of the blockchain network,
wherein the at least one other control access rule comprises at least one updated access control rule.
8. A method for sharing IoT device profile data, the method comprising:
generating at least one access control rule to protect an IoT device;
publishing first IoT device profile data in a first new block of a blockchain of a blockchain network, wherein the first IoT device profile data comprises the at least one access control rule; and
committing the first new block to the blockchain based on a consensus algorithm by:
the security vendor committing the first new block to the blockchain based on consensus among at least the security vendor and one or more internet service providers (ISP) managing the IoT device when the security vendor and the one or more ISPs are participating in the blockchain network;
or
an ISP participating in the blockchain network committing the first new block to the blockchain based on consensus among at least the ISP and the one or more ISPs managing the IoT device when the ISP and the one or more ISPs are participating in the blockchain network.
9. The method of claim 8 , wherein the at least one access control rule comprises an L3/L4 firewall rule, a Transport Layer Security firewall rule, or a privacy rule.
10. The method of claim 8 , further comprising:
signing the first IoT device profile data using a private key while having revocable authorization to act as a validating node.
11. The method of claim 8 , wherein the consensus algorithm comprises using a Practical Byzantine Fault Tolerance protocol among at least four validating nodes of the blockchain network to reach consensus.
12. The method of claim 8 , further comprising:
transmitting the first IoT device profile data to a device that enforces the at least one access control rule.
13. The method of claim 8 , further comprising:
generating at least one other access control rule; and
publishing second IoT device profile data in a second new block of the blockchain,
wherein the second IoT device profile data comprises the at least one other access control rule, and
wherein the second new block is linked to the first new block.
14. The method of claim 13 , further comprising:
validating a request to update the at least one access control rule based on consensus with at least one participant of the blockchain network,
wherein the at least one other control access rule comprises at least one updated access control rule.
15. A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method for sharing IoT device profile data, the method comprising:
generating at least one access control rule to protect an IoT device;
publishing first IoT device profile data in a first new block of a blockchain of a blockchain network, wherein the first IoT device profile data comprises the at least one access control rule; and
committing the first new block to the blockchain based on a consensus algorithm by:
the security vendor committing the first new block to the blockchain based on consensus among at least the security vendor and one or more internet service providers (ISP) managing the IoT device when the security vendor and the one or more ISPs are participating in the blockchain network;
or
an ISP participating in the blockchain network committing the first new block to the blockchain based on consensus among at least the ISP and the one or more ISPs managing the IoT device when the ISP and the one or more ISPs are participating in the blockchain network.
16. The non-transitory computer-readable medium of claim 15 , wherein the at least one access control rule comprises an L3/L4 firewall rule, a Transport Layer Security firewall rule, or a privacy rule.
17. The non-transitory computer-readable medium of claim 15 , the method further comprising:
signing the first IoT device profile data using a private key while having revocable authorization to act as a validating node.
18. The non-transitory computer-readable medium of claim 15 , wherein the consensus algorithm comprises using a Practical Byzantine Fault Tolerance protocol among at least four validating nodes of the blockchain network to reach consensus.
19. The non-transitory computer-readable medium of claim 15 , the method further comprising:
transmitting the first IoT device profile data to a device that enforces the at least one access control rule.
20. The non-transitory computer-readable medium of claim 15 , the method further comprising:
generating at least one other access control rule; and
publishing second IoT device profile data in a second new block of the blockchain,
wherein the second IoT device profile data comprises the at least one other access control rule, and
wherein the second new block is linked to the first new block.
21. The non-transitory computer-readable medium of claim 20 , the method further comprising:
validating a request to update the at least one access control rule based on consensus with at least one participant of the blockchain network,
wherein the at least one other control access rule comprises at least one updated access control rule.