Research On Trustworthy Firmware Updating Technology For IoT Devices Based On Blockchain

With the development and application of Internet of Things(IoT)technology,IoT devices and their data resources have become important strategic resources and new production factors for national governance,economic development,and people’s daily lives.However,as the number of IoT devices has grown explosively,the importance of IoT security has increased.Due to the limited performance of IoT devices,their security protection capabilities are weak,and firmware update technology has become an important line of defense for IoT security.Current IoT device firmware update schemes face many challenges,such as lack of supervision,non-persistent services,insecure data storage,inability to monitor update status,and poor scalability,which cause untimely firmware updates and provide a prerequisite for attackers to launch network attacks.This thesis proposes a blockchain-based IoT device firmware trusted update scheme to address the issues of low scalability,centralized services,insecure storage,and lack of state monitoring in IoT firmware updates.The scheme consists of the following parts: a blockchain differential data storage sub-scheme to improve the efficiency of storing firmware update data on the blockchain;a smart-contract-based distributed message broker to provide high scalability and traceable secure communication for the entire scheme;and a multi-party IoT device trustworthiness calculation framework to ensure the trustworthiness of IoT device firmware updates and operational status.The innovations and main contributions of this thesis are as follows:(1)In response to the low scalability,centralized services,and insecure storage of existing IoT firmware update schemes,this thesis proposes a blockchain-based IoT update data differential storage solution.The blockchain-based firmware storage process ensures the integrity and persistence of firmware update data.Meanwhile,to address the low storage performance of the blockchain,an adaptive differential compression algorithm is designed,which can automatically recognize the submitted firmware update data type and apply the appropriate differential algorithm to extract differential data and reconstruct complete data,thus enhancing data compression rate and algorithm execution efficiency.(2)To address the communication security issues during the IoT device firmware update process and the insufficient continuous monitoring capabilities of device operation and firmware update status,this thesis proposes a blockchain-based IoT device firmware trusted update scheme.The scheme combines firmware trusted storage processes,smartcontract-based distributed message brokers,and introduces a multi-party IoT device trustworthiness calculation framework.The framework continuously monitors the trustworthiness of IoT devices by real-time monitoring of multi-dimensional operational status information,ensuring the trustworthiness of IoT device firmware updates and operational status,while providing higher scalability and addressing the issues brought by centralized servers.