Guerrero-Sanchez Alma E, Rivas-Araiza Edgar A, Gonzalez-Cordoba Jose Luis, Toledano-Ayala Manuel, Takacs Andras
Faculty of Engineering, Autonomous University of Queretaro, Querétaro 76017, Mexico.
Sensors (Basel). 2020 May 14;20(10):2798. doi: 10.3390/s20102798.
The Internet of Things (IoT) paradigm allows the connection and exchange of information between millions of smart devices. This paradigm grows and develops exponentially as do the risks and attacks on IoT infrastructures. Security, privacy, reliability, and autonomy are the most important requirements in IoT Systems. If these issues are not guaranteed, the IoT system could be susceptible to malicious users and malicious use. In centralized IoT systems, attacks and risks are greater, especially when data is transmitted between devices and shared with other organizations. To avoid these types of situations, this work presents a decentralized system that guarantees the autonomy and security of an IoT system. The proposed methodology helps to protect data integrity and availability based on the security advantages provided by blockchain and the use of cryptographic tools. The accuracy of the proposed methodology was measured on a temperature and humidity sensing IoT-based Wireless Sensor Network (WSN). The obtained results prove that the proposal fulfils the main requirements of an IoT system. It is autonomous, secure to share and send information between devices and users, has privacy, it is reliable, and the information is available in the infrastructure. Furthermore, this research demonstrates that the proposal is less susceptible to the most frequent attacks against IoT systems, such as linking attack, man in the middle, and Distributed Denial of Service (DDoS) attack.
物联网(IoT)范式允许数百万智能设备之间进行信息连接和交换。与物联网基础设施面临的风险和攻击一样,这种范式正呈指数级增长和发展。安全性、隐私性、可靠性和自主性是物联网系统最重要的要求。如果这些问题得不到保障,物联网系统可能容易受到恶意用户和恶意使用行为的影响。在集中式物联网系统中,攻击和风险更大,尤其是当数据在设备之间传输并与其他组织共享时。为避免此类情况,本文提出了一种去中心化系统,该系统可确保物联网系统的自主性和安全性。所提出的方法基于区块链提供的安全优势和加密工具的使用,有助于保护数据的完整性和可用性。在所提出的方法的准确性在基于温度和湿度传感物联网的无线传感器网络(WSN)上进行了测量。获得的结果证明该提议满足了物联网系统的主要要求。它具有自主性,在设备和用户之间共享和发送信息时是安全的,具有隐私性,可靠,并且信息在基础设施中可用。此外,这项研究表明,该提议较不易受到针对物联网系统的最常见攻击,如链接攻击、中间人攻击和分布式拒绝服务(DDoS)攻击。