Design and Implementation of Blockchain-Enabled Device- An Authentication and Authorization System for Internet of Things

Abstract

The rapid expansion of the Internet of Things (IoT) has introduced significant security challenges due to the increasing number of interconnected devices operating in heterogeneous and distributed environments. This study presents the design and implementation of a Blockchain-Enabled Device Authentication and Authorization System (BEDAAS) that utilizes blockchain technology to provide decentralized, transparent, and secure authentication and authorization for IoT devices. The BEDAAS framework was developed using the Ethereum blockchain platform, Solidity smart contracts, Web3.js, React, and the Truffle Framework. Device identities were established through cryptographic key pairs and secured using SHA-256 hashing, Elliptic Curve Digital Signature Algorithm (ECDSA), Public Key Infrastructure (PKI), and Merkle Tree verification. Smart contracts automate device registration, authentication, authorization, signature verification, and identity management, while blockchain consensus ensures the integrity and immutability of authentication records. The system was implemented and evaluated using Ganache as the blockchain simulation environment. Performance evaluation considered authentication processing time, blockchain communication latency, system stability, scalability, and security. Experimental results showed consistent authentication performance with stable processing times across multiple sampling periods and acceptable communication latency under increasing workloads. The BEDAAS system effectively detected unauthorized devices, prevented message tampering and impersonation attacks, and maintained reliable authentication through decentralized verification. The findings demonstrate that BEDAAS provides a secure, scalable, and efficient authentication and authorization solution capable of enhancing trust, transparency, and accountability within IoT environments.