Skip to content
Open access

BISF-IoT: A Scalable Blockchain-Integrated Security Framework with Formal Guarantees

Aug 2026 · International Journal of Innovative Science & Technology · 0 citations · 9 references

TL;DR

Results confirm BISF-IoT’s capability to provide scalable, secure, and verifiable control-plane operations suitable for large-scale IoT environments.

Abstract

As IoT deployments rapidly expand, ensuring comprehensive end-to-end security across identity, authorization, communication, integrity, and auditability is critical. This paper presents BISF-IoT, a Blockchain-Integrated Security Framework that utilizes a permissioned ledger as a tamper-evident control plane while keeping high-volume telemetry and raw logs off-chain. BISF-IoT integrates decentralized identity (DID) management, capability-based authorization with explicit revocation under a freshness bound Δ, and secure-channel identity binding for MQTT/CoAP edge devices. Formal game-based proofs establish five core security properties: DID authenticity, authorization soundness, revocation safety, tamper-evident logging, and auditable anomaly alert non-repudiation. Performance evaluation through simulation with up to 10,000 devices demonstrates near-linear scalability, processing up to 160,000 transactions per day with a scaling efficiency of ~0.90–1.00. Authorization latency increases moderately from 120 ms at 100 devices to 650 ms at 10,000 devices. Therefore, it remains within practical operational limits. Blockchain storage grows steadily at approximately 37–42 MB/day by storing compact Merkle commitments and security artifacts while avoiding raw data bloat. Meanwhile Log verification time exhibits sub-linear growth, with verification cost per entry decreasing from 0.200 ms to 0.055 ms as log size increases from 100 to 10,000 entries, reflecting efficient Merkle inclusion proof mechanisms. These results confirm BISF-IoT’s capability to provide scalable, secure, and verifiable control-plane operations suitable for large-scale IoT environments.

Read PDF

Similar papers

Open access Jul 2026

A Blockchain-Based Lightweight Authentication Framework for Secure Communication in IoT Networks

A lightweight blockchain-based authentication framework for secure communication in Internet of Things (IoT) networks that integrates a permissioned blockchain with ECC-256 to provide mutual authentication, data integrity, and non-repudiation for resource-constrained IoT devices.

A. Abu-Ein, Obaida M. Al-hazaimeh · 0 citations
#edge computing Open access Sep 2026

Secure Device Authentication with Blockchain Based Trust Technique for IoT

With the rapid increase of Internet of Things (IoT) devices, it is a challenge to ensure secure and reliable device authentication. Conventional blockchain-based solutions provide immutability and transparency, but dynamic trust management is not present, resulting in limited scalability in heterogeneous IoT environments. To overcome these drawbacks, this study presents a blockchain-integrated trust-based authentication and access control framework designed specifically for IoT networks. The proposed model combines deterministic blockchain validation with probabilistic trust computation, enabling adaptive decision-making while preserving system integrity. Performance analysis highlights the efficiency of the approach: decryption consistently executes in less than one second, trust score evaluation completes within two seconds, and memory usage demonstrates storage efficiency. During trust updates, memory requirements peak at 173.1 MB, while image processing operations consume slightly more memory. Incremental growth during trust point updates is minimal, around 2.9 MB, indicating lightweight overhead. The results confirm that the architecture achieves a strong balance between security and performance, offering rapid authentication without compromising resource efficiency. By merging blockchain policy enforcement with trust reasoning, the framework advances current IoT security mechanisms and offers a scalable solution applicable across domains such as smart homes, industrial automation, and edge computing.

S. Deepthi, Khoi A. Tran, G. Deepa · 0 citations
Open access Aug 2026

OPAQUE-IoT: an optimization-driven PUF-Blockchain authenticated key agreement protocol with adaptive resource management for constrained IoT networks

OPAQUE-IoT, an Optimization-driven PUF-Blockchain AKA Protocol for constrained IoT networks integrates PUF-based hardware identity verification, a permissioned blockchain for decentralized trust management, and the Adaptive Security-Energy Trade-off Optimizer (ASETO), which jointly minimizes authentication latency and energy consumption under formal security constraints.

Ibrahim Aqeel · 0 citations
Conference Jul 2026

TrustIoT-Chain: A Privacy-Preserving Sharded Blockchain Framework with Zero-Knowledge Auditing for Smart City IoT Monitoring

Smart cities increasingly depend on large-scale Internet of Things (IoT) infrastructures for traffic management, smart grids, and environmental monitoring. Ensuring data integrity, transparency, and privacy in such systems remains a major challenge because centralized platforms are vulnerable to manipulation, while conventional blockchain-based solutions suffer from scalability and confidentiality limitations. This study proposes TrustIoT-Chain, a privacy-preserving blockchain framework that integrates off-chain digital twins, cryptographic data commitments, zero-knowledge compliance verification, and a sharded blockchain architecture for scalable smart city monitoring. The objective of this work is to provide real-time verifiable IoT monitoring with strong privacy guarantees and high system throughput. Large-scale simulations with one million synthetic IoT events demonstrate that the proposed framework achieves up to 24,910 events/s throughput with an average verification latency of 410 ms using 16 shards. Energy consumption is reduced by approximately 45% compared with non-sharded blockchain systems with zeroknowledge proofs, while privacy leakage measured by mutual information decreases to 0.05 bits. The key novelty lies in the joint integration of the digital twins with the blockchain-based zero-knowledge auditing, and sharding for the smart city IoT systems. This approach enables transparent regulatory compliance verification without exposing the raw sensor data, offering the scalable, and privacy-aware foundation for the future smart city governance, and trusted IoT ecosystems.

Shrutika Khobragade, J. Bakal · 0 citations
Open access Jul 2026

Post-quantum zero-knowledge blockchain-enabled for federated IoT security

The Internet of Things look out on growing security and privacy defies, principally in light of the up growth of quantum threats. To handle these defies, we suggest a unified security framework that merges post-quantum blockchain technologies and zero-knowledge proofs (ZKPs) to attain secure authentication, decentralized identity management, and advanced data protection. The provided system based on a power-weighted consensus mechanism, compressed and overlapping recursive ZKPs, and transaction batching to decrease on-chain load. The outcomes display that the suggested system outperforms conventional systems and state-of-the-art solutions, with response time reduced to 92 ms, transaction throughput increased to 735 tx/s, energy consumption reduced to 0.37 J/op, and authentication accuracy increased to 97.6%, achieving a privacy score of 0.91.These outcomes emphasize that the offered framework not only attains superior performance but as well supplies strong resistance to quantum attacks and high privacy warranties, making it a promising solution for securing future IoT environments.

Hayder A. Nahi, Rusul A. Salman, Awring Falah Hassan et al. · 0 citations
Open access Jul 2026

EPoLBFT: A Blockchain Consensus Algorithm for Enhancing Privacy, Invulnerability and Trust in IoT System

Elastic Proof-of-Location Byzantine Fault Tolerance is proposed, a privacy-preserving and location-aware blockchain consensus framework for IoT systems that reduces communication overhead and improves consensus efficiency compared with conventional PBFT-based approaches while strengthening resilience against location-based and identity-based attacks.

Yunus Kareem, D. Djenouri, Essam Ghadafi · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.