Secure Provisioning of IoT Devices Using Blockchain with AAA Assurance via Smart Contracts
Internet das Coisas; Cibersegurança; Blockchain; Contratos Inteligentes; eSIM.
The exponential growth of the Internet of Things, driven by the massive connectivity of devices, has generated significant benefits for sectors such as industry, healthcare, agriculture, and smart cities, but it has also brought numerous challenges related to information security. IoT devices, often developed without a focus on cybersecurity, present critical vulnerabilities, especially in provisioning, authentication, and wireless data transmission processes, which can be easily exploited by cyberattacks. In this context, this work proposes the development of a security model for IoT networks based on embedded subscriber identity modules, known as eSIM, as well as the use of physically unclonable functions, known as PUF, integrated into a permissioned blockchain architecture. The central objective is to establish a scheme for provisioning, authentication, authorization, and auditability using smart contracts capable of automating and ensuring the reliability of interactions between devices. The methodology includes identifying the most common vulnerabilities in IoT devices, reviewing the state of the art of blockchain-based solutions, and implementing a prototype in a controlled environment to validate the proposal. The evaluation of the model will be carried out through simulations and experiments aimed at measuring aspects such as performance, scalability, latency, and effectiveness in mitigating interception and data tampering attacks. The expected result is the creation of a robust security architecture that promotes greater reliability, transparency, and integrity in communication between IoT devices, offering the academic community both theoretical and practical contributions to the consolidation of research in applied cybersecurity. Furthermore, this study intends to foster new investigations in the field, providing a solid foundation for future work that explores integrations between IoT, blockchain, and smart contracts.