1. A Blockchain-based Distributed Access Control for IoT
Erez Waisbard
Joint work with Roberto Di Pietro, Xavier Salleras and Matteo Signorini
SACMAT 2018

2. PKI is not suited for IoT
Security Model
The IoT model
No central Trusted Authority
Need Mutual authentication
Multiple device vendors
Multiple service providers
Multiple Protocols
Low power unprotected devices (no crypto processing, no secure storage, no patches)
PKI is not suited for IoT

3. Trust in IoT
Building reputation using Blockchain

4. Motivating use case

5. Trust in IoT Requirements
Without requiring explicit bilateral agreements
Without a central root of trust
Support flexible business models
i.e. not simply pre-paid

6. Bridging Island of Trust

7. Offering services
Publishing the Terms of Use

8. Distributed Reputation System
The service provider makes the decision

9. Bitcoin & Blockchain [October 2008]

10. A Secure Distributed Ledger
Blockchain
A Secure Distributed Ledger
Blockchain
transaction
Sender Receiver Message
Block

11. Trust between edge devices
Backends utilizes Blockchain information

12. Obligation Chain

13. Bridging Trust