Blockchain based secure software updates for IoT devices
Methods and systems for provable, auditable and secure software updates for resource-constrained IoT devices are provided via a security framework and a protocol for owner-controlled software updates for IoT devices through blockchain.
1. A method for updating software between a manufacturer and Internet of Things (IoT) devices of owners using a blockchain, comprising:
(a) encrypting a software update and storing the encrypted software update on a Cloud, wherein the Cloud is defined as a storage accessible over an Internet, and wherein the encrypting and storing is performed by the manufacturer;
(b) the manufacturer notifying one or more owners regarding an availability of the software update for their respective IoT devices;
(c) the one or more owners submitting a payment for the software update, wherein the payment transaction is via a software-coded secure transaction mechanism on the blockchain, wherein the blockchain is defined as a distributed electronic database containing transactions records accessible over an Internet, wherein the transactions records stored on the blockchain are unchangeable upon creation of the transactions records, and wherein the unchangeability upon creation is enforced through cryptography;
(d) creating encryption keys for the software update and then further creating an encryption of the encryption keys;
(e) storing on the blockchain: (p) the encryption of the encryption keys, (pp) an address of the stored and encrypted software update; (ppp) a signature of the manufacturer;
(f) releasing access information regarding (p), (pp) and (ppp) to the one or more owners;
(g) from the respective IoT device accessing the blockchain for (p), (pp) and (ppp);
(h) downloading the stored and encrypted software update from the Cloud onto the respective IoT device; and
(i) decrypting and installing the downloaded software update on the respective IoT device, wherein the installing updates the blockchain by creating an install transaction record on the blockchain, record the install transaction and encrypt the install transaction record making the install transaction record unchangeable.
2. The method as set forth in claim 1 , further comprising the manufacturer auditing the software update of the IoT device by accessing the unchangeable install transaction record on the blockchain.
3. The method as set forth in claim 1 , further comprising the one or more owners auditing the software update of the IoT device by accessing the unchangeable install transaction record on the blockchain.