Ran Wang;Fuqiang Ma;Shihong Duan;Zhiyuan Su;Xiaotong Zhang;Cheng Xu
{"title":"面向大数据共享:基于区块链的统一可信远程认证方案","authors":"Ran Wang;Fuqiang Ma;Shihong Duan;Zhiyuan Su;Xiaotong Zhang;Cheng Xu","doi":"10.1109/JIOT.2025.3555880","DOIUrl":null,"url":null,"abstract":"The rapid expansion of the Internet of Things (IoT) has brought forth new challenges and opportunities in securely managing and sharing vast amounts of data generated by connected devices. Blockchain technology, with its decentralization, tamper-resistance, and traceability, offers a promising framework for IoT data sharing but struggles to safeguard smart contracts and sensitive data. Integrating trusted execution environments (TEEs) with blockchain addresses these concerns, enabling secure execution and communication via remote attestation. However, existing remote attestation methods face challenges, including incompatibility across heterogeneous TEEs, inefficiency under frequent authentication, and vulnerability to DoS attacks. To tackle these, we propose a blockchain-based unified remote attestation scheme for IoT. Our three-tier blockchain architecture—comprising a certificate authority (CA) channel, an authoritative channel, and a business channel—separates authentication, attestation, and operations while ensuring auditability. An abstraction layer supports heterogeneous TEEs, and an authoritative blockchain stores authentication reports, enabling secure, frequent attestations. Additionally, a distributed CA system enhances resilience to DoS attacks. Experimental results validate our scheme’s efficiency and security, offering a robust solution for IoT data sharing.","PeriodicalId":54347,"journal":{"name":"IEEE Internet of Things Journal","volume":"12 13","pages":"24656-24671"},"PeriodicalIF":8.9000,"publicationDate":"2025-03-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Toward Big-Data Sharing: A Unified Trusted Remote Attestation Scheme Based on Blockchain\",\"authors\":\"Ran Wang;Fuqiang Ma;Shihong Duan;Zhiyuan Su;Xiaotong Zhang;Cheng Xu\",\"doi\":\"10.1109/JIOT.2025.3555880\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The rapid expansion of the Internet of Things (IoT) has brought forth new challenges and opportunities in securely managing and sharing vast amounts of data generated by connected devices. Blockchain technology, with its decentralization, tamper-resistance, and traceability, offers a promising framework for IoT data sharing but struggles to safeguard smart contracts and sensitive data. Integrating trusted execution environments (TEEs) with blockchain addresses these concerns, enabling secure execution and communication via remote attestation. However, existing remote attestation methods face challenges, including incompatibility across heterogeneous TEEs, inefficiency under frequent authentication, and vulnerability to DoS attacks. To tackle these, we propose a blockchain-based unified remote attestation scheme for IoT. Our three-tier blockchain architecture—comprising a certificate authority (CA) channel, an authoritative channel, and a business channel—separates authentication, attestation, and operations while ensuring auditability. An abstraction layer supports heterogeneous TEEs, and an authoritative blockchain stores authentication reports, enabling secure, frequent attestations. Additionally, a distributed CA system enhances resilience to DoS attacks. Experimental results validate our scheme’s efficiency and security, offering a robust solution for IoT data sharing.\",\"PeriodicalId\":54347,\"journal\":{\"name\":\"IEEE Internet of Things Journal\",\"volume\":\"12 13\",\"pages\":\"24656-24671\"},\"PeriodicalIF\":8.9000,\"publicationDate\":\"2025-03-31\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Internet of Things Journal\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://ieeexplore.ieee.org/document/10944709/\",\"RegionNum\":1,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Internet of Things Journal","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10944709/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
Toward Big-Data Sharing: A Unified Trusted Remote Attestation Scheme Based on Blockchain
The rapid expansion of the Internet of Things (IoT) has brought forth new challenges and opportunities in securely managing and sharing vast amounts of data generated by connected devices. Blockchain technology, with its decentralization, tamper-resistance, and traceability, offers a promising framework for IoT data sharing but struggles to safeguard smart contracts and sensitive data. Integrating trusted execution environments (TEEs) with blockchain addresses these concerns, enabling secure execution and communication via remote attestation. However, existing remote attestation methods face challenges, including incompatibility across heterogeneous TEEs, inefficiency under frequent authentication, and vulnerability to DoS attacks. To tackle these, we propose a blockchain-based unified remote attestation scheme for IoT. Our three-tier blockchain architecture—comprising a certificate authority (CA) channel, an authoritative channel, and a business channel—separates authentication, attestation, and operations while ensuring auditability. An abstraction layer supports heterogeneous TEEs, and an authoritative blockchain stores authentication reports, enabling secure, frequent attestations. Additionally, a distributed CA system enhances resilience to DoS attacks. Experimental results validate our scheme’s efficiency and security, offering a robust solution for IoT data sharing.
期刊介绍:
The EEE Internet of Things (IoT) Journal publishes articles and review articles covering various aspects of IoT, including IoT system architecture, IoT enabling technologies, IoT communication and networking protocols such as network coding, and IoT services and applications. Topics encompass IoT's impacts on sensor technologies, big data management, and future internet design for applications like smart cities and smart homes. Fields of interest include IoT architecture such as things-centric, data-centric, service-oriented IoT architecture; IoT enabling technologies and systematic integration such as sensor technologies, big sensor data management, and future Internet design for IoT; IoT services, applications, and test-beds such as IoT service middleware, IoT application programming interface (API), IoT application design, and IoT trials/experiments; IoT standardization activities and technology development in different standard development organizations (SDO) such as IEEE, IETF, ITU, 3GPP, ETSI, etc.