Towards Better Availability and Accountability for IoT Updates by means of a Blockchain

Aymen Boudguiga (1) , Nabil Bouzerna (1) , Louis Granboulan (2) , Alexis Olivereau (3) , Flavien Quesnel (1) , Anthony Roger (1) , Renaud Sirdey (3)

1 IRT SystemX
2 Airbus Group Innovations [Suresnes]
3 LIST (CEA) - Laboratoire d'Intégration des Systèmes et des Technologies

Context: Internet of Things • Huge number of devices with full or limited connectivity to the Internet • By 2030, around 30 billions of devices will exchange hundred of zettabytes of data • Massive deployment -> more vulnerabilities -> need for a universal software update infrastructure Idea: why not use a blockchain for updates sharing between manufacturers and their devices? Blockchain provides updates availability thanks to its persistence in time, its history provision and its resistance to Denial of Services attacks Blockchain provides updates innocuousness by extending it with dedicated nodes carrying on updates binaries checking against vulnerabilities and known attacks Blockchain stores devices acknowledgments of updates installation IRT SystemX Prototype: • Use of Multichain, a permissioned blockchain • Use of Bitcoin blockchain for Multichain bootstrap • Blockchain update infrastructure deployed on VMs • Devices implemented physically (tens of raspberry pi) or virtually (up to 800 VMs per server) • PGP keys usage for updates encryption and signature Publication at: IEEE Security & privacy on the Blockchain 2017 (IEEE S&B 2017) - 29 April 2017

Mots clés: IoT; blockchain; cybersecurity; Industrie 4.0; IIoT; Smart grids; Factory of future; Updates; Availability; Accountability

Domaines: Cryptographie et sécurité [cs.CR]; Intelligence artificielle [cs.AI]

Aymen Boudguiga, Nabil Bouzerna, Louis Granboulan, Alexis Olivereau, Flavien Quesnel, et al.. Towards Better Availability and Accountability for IoT Updates by means of a Blockchain. IEEE EUROCRYPT Security & privacy on the Blockchain 2017 (IEEE S&B 2017), Apr 2017, Paris, France. , 2017. ⟨hal-01536096⟩