zk-IoT: Securing the Internet of Things with Zero-Knowledge Proofs on Blockchain Platforms (2402.08322v2)
Abstract: This paper introduces the zk-IoT framework, a novel approach to enhancing the security of Internet of Things (IoT) ecosystems through the use of Zero-Knowledge Proofs (ZKPs) on blockchain platforms. Our framework ensures the integrity of firmware execution and data processing in potentially compromised IoT devices. By leveraging the concept of ZKP, we establish a trust layer that facilitates secure, autonomous communication between IoT devices in environments where devices may not inherently trust each other. The framework includes zk-Devices, which utilize functional commitment to generate proofs for executed programs, and service contracts for encoding interaction logic among devices. It also utilizes a blockchain layer and a relayer as a ZKP storage and data communication protocol, respectively. Our experiments demonstrate that proof generation, reading, and verification take approximately 694, 5078, and 19 milliseconds in our system setup, respectively. These timings meet the practical requirements for IoT device communication, demonstrating the feasibility and efficiency of our solution. The zk-IoT framework represents a significant advancement in the realm of IoT security, paving the way for reliable and scalable IoT networks across various applications, such as smart city infrastructures, healthcare systems, and industrial automation.
- B. Wu, R. Zhong, Y. Wang, J. Wan, J. Zhang, and W. Shi, “Vpi: Vehicle programming interface for vehicle computing,” Journal of Computer Science and Technology, 2024.
- L. de Castro and C. Peikert, “Functional commitments for all functions, with transparent setup and from sis,” in Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp. 287–320, Springer, 2023.
- D. Boneh, W. Nguyen, and A. Ozdemir, “Efficient functional commitments: How to commit to a private function.” Cryptology ePrint Archive, Paper 2021/1342, 2021. https://eprint.iacr.org/2021/1342.
- A. Chiesa, “Proof-carrying data,” Master’s thesis, Massachusetts Institute of Technology, Cambridge, MA, 2010. Available at MIT DSpace: https://dspace.mit.edu/handle/1721.1/61151.
- Z. Chen, Y. Jiang, X. Song, and L. Chen, “A survey on zero-knowledge authentication for internet of things,” Electronics, vol. 12, no. 5, 2023.
- M. Walshe, G. Epiphaniou, H. Al-Khateeb, M. Hammoudeh, V. Katos, and A. Dehghantanha, “Non-interactive zero knowledge proofs for the authentication of iot devices in reduced connectivity environments,” Ad Hoc Networks, vol. 95, p. 101988, 2019.
- Z. Mahmood and J. Vacius, “Privacy-preserving block-chain framework based on ring signatures (rss) and zero-knowledge proofs (zkps),” in 2020 International Conference on Innovation and Intelligence for Informatics, Computing and Technologies (3ICT), pp. 1–6, IEEE, 2020.
- K. H. Wöhnert, S.-J. Wöhnert, T. Thiel, R. Weißbach, and V. Skwarek, “Secure cyber-physical object identification in industrial iot-systems,” Procedia Manufacturing, vol. 51, pp. 1221–1228, 2020.
- L. Song, X. Ju, Z. Zhu, and M. Li, “An access control model for the internet of things based on zero-knowledge token and blockchain,” EURASIP Journal on Wireless Communications and Networking, vol. 2021, no. 1, pp. 1–20, 2021.
- G. Ra, T. Kim, and I. Lee, “Vaim: verifiable anonymous identity management for human-centric security and privacy in the internet of things,” IEEE Access, vol. 9, pp. 75945–75960, 2021.
- H. R. Elgabri, M. S. Hassanein, A. A. El-Sawy, and M. Taha, “Blockchain authentication access control framework to secure iot devices in smart cities,” Journal of Southwest Jiaotong University, vol. 58, no. 4, 2023.
- D. C. Rani, S. G. Janakiraman, K. S. Chandra, E. P. Thangavel, G. A. Kothamasu, K. L. Bhaskaran, and G. Jayabalasamy, “A multi-round zero knowledge proof algorithm for secure iot and blockchain environments.,” International Journal of Safety & Security Engineering, vol. 13, no. 4, 2023.
- I. Damgård, C. Ganesh, H. Khoshakhlagh, C. Orlandi, and L. Siniscalchi, “Balancing privacy and accountability in blockchain identity management,” in Topics in Cryptology – CT-RSA 2021 (K. G. Paterson, ed.), (Cham), pp. 552–576, Springer International Publishing, 2021.
- D. A. Luong and J. H. Park, “Privacy-preserving identity management system on blockchain using zk-snark,” IEEE Access, vol. 11, pp. 1840–1853, 2023.
- D. Kang, T. Hashimoto, I. Stoica, and Y. Sun, “Zk-img: Attested images via zero-knowledge proofs to fight disinformation,” arXiv preprint arXiv:2211.04775, 2022.
- S. Fang, Q. Liu, F. Zhang, N. Chen, and X. Li, “Application of internet of things and blockchain in information security and privacy protection of global organizations,” Journal of Organizational and End User Computing (JOEUC), vol. 35, no. 3, pp. 1–16, 2023.