Skip to content
Open access

Blockchain-Assisted Lightweight Authentication Protocol for Resource-Constrained IoT Devices in 5G Smart Environments

Aug 2026 · Journal of Intelligent Decision Making and Information Science · Vol 3, pp. 1087-1105 · 0 citations · 24 references

TL;DR

BLAP-IoT is introduced: a Blockchain-Assisted Lightweight Authentication Protocol over live Hyperledger Fabric 2.5 that leverages elliptic-curve Diffie–Hellman over P-256 curve, keyed MACs, and a three-message challenge-response protocol to provide injective mutual authentication with device key confirmation.

Abstract

The ubiquity of lightweight resource-constrained Internet-of-Things (IoT) devices in 5G smart environments necessitates authentication protocols with the conflicting goals of being lightweight, highly secure, and having a decentralised credential management structure. Existing schemes use trusted third-party key distributors or heavyweight cryptographic primitives infeasible to IoT embedded hardware; they also fail to anchor device credentials on a permissioned blockchain ledger for tamper-evident credential revocation. In this work, we introduce BLAP-IoT: a Blockchain-Assisted Lightweight Authentication Protocol over live Hyperledger Fabric 2.5.9 that leverages elliptic-curve Diffie–Hellman over P-256 curve, keyed MACs, and a three-message challenge-response protocol to provide injective mutual authentication with device key confirmation. Device credential commitments are stored on-chain to facilitate decentralised and efficient device revocation without revealing secrets on-chain. A formal security verification of the protocol in ProVerif 2.05 shows session-key secrecy, injective mutual authentication, and perfect forward secrecy in the presence of the Dolev-Yao attacker. The empirical evaluation of BLAP-IoT on measured P-256 primitives reports that the scheme achieves a total computation cost of 0.303 ms on constrained devices — up to 52% less than compared schemes, 1920-bit two-way communication overhead, and 0.218 mJ device energy consumption. The underlying blockchain layer sustains up to 277 transactions per second (TPS) in peak throughput, with end-to-end authentication latency less than 13 ms at 1000 concurrent devices.

Read PDF

Similar papers

Open access Jul 2026

A Blockchain-Based Lightweight Authentication Framework for Secure Communication in IoT Networks

A lightweight blockchain-based authentication framework for secure communication in Internet of Things (IoT) networks that integrates a permissioned blockchain with ECC-256 to provide mutual authentication, data integrity, and non-repudiation for resource-constrained IoT devices.

A. Abu-Ein, Obaida M. Al-hazaimeh · 0 citations
Open access Aug 2026

OPAQUE-IoT: an optimization-driven PUF-Blockchain authenticated key agreement protocol with adaptive resource management for constrained IoT networks

OPAQUE-IoT, an Optimization-driven PUF-Blockchain AKA Protocol for constrained IoT networks integrates PUF-based hardware identity verification, a permissioned blockchain for decentralized trust management, and the Adaptive Security-Energy Trade-off Optimizer (ASETO), which jointly minimizes authentication latency and energy consumption under formal security constraints.

Ibrahim Aqeel · 0 citations
Open access Aug 2026

Blockchain-Assisted Authentication, Authorization, and Audit for MQTT-Based Smart-City IoT

Smart-city services increasingly rely on Internet of Things (IoT) deployments using lightweight Message Queuing Telemetry Transport (MQTT), yet weakly protected systems remain exposed to spoofing, unauthorized state changes, and limited accountability. This work evaluates blockchain and smart contracts as a complementary trust layer for MQTT-based smart-city IoT rather than as a replacement for transport-layer security. The proposed architecture provides owner-controlled device registration, per-sensor nonce management, replay-resistant Elliptic Curve Digital Signature Algorithm (ECDSA) authentication, authorization of state-changing operations, and tamper-evident event logging. MQTT confidentiality remains dependent on Transport Layer Security (TLS) or payload encryption. A prototype was implemented using ESP32 microcontrollers, a Raspberry Pi MQTT broker, Node-RED supervision, MongoDB storage, and Ethereum smart contracts deployed on Sepolia. The evaluation combines practical attack scenarios (unauthorized sensor modification, identity spoofing, and data manipulation) with measurements of blockchain latency, throughput, and gas consumption. Results show auditable nonce-bound signed updates, with mean transaction latency close to 12 s. Because the contract updates one sensor per transaction, costs are interpreted per confirmed write operation and scenario size. The findings position blockchain as an audit and policy-enforcement component for MQTT-based IoT.

Rida Lkhluf, David Santo Orcero, F. J. Cañete · 0 citations
Open access 2026

A Hardware-Rooted Blockchain Security Framework for IoT With PUF-Based Authentication

By using PUF-generated responses as hardware-rooted seeds for mining and authentication, the framework removes the need for permanent secret storage and establishes a secure chain from device identity to consensus participation, making it suitable for practical deployment in industrial IoT, smart infrastructure, and other resource-constrained distributed systems.

B. Narayanapuram, J. Panda · 0 citations
#edge computing Open access Sep 2026

Secure Device Authentication with Blockchain Based Trust Technique for IoT

With the rapid increase of Internet of Things (IoT) devices, it is a challenge to ensure secure and reliable device authentication. Conventional blockchain-based solutions provide immutability and transparency, but dynamic trust management is not present, resulting in limited scalability in heterogeneous IoT environments. To overcome these drawbacks, this study presents a blockchain-integrated trust-based authentication and access control framework designed specifically for IoT networks. The proposed model combines deterministic blockchain validation with probabilistic trust computation, enabling adaptive decision-making while preserving system integrity. Performance analysis highlights the efficiency of the approach: decryption consistently executes in less than one second, trust score evaluation completes within two seconds, and memory usage demonstrates storage efficiency. During trust updates, memory requirements peak at 173.1 MB, while image processing operations consume slightly more memory. Incremental growth during trust point updates is minimal, around 2.9 MB, indicating lightweight overhead. The results confirm that the architecture achieves a strong balance between security and performance, offering rapid authentication without compromising resource efficiency. By merging blockchain policy enforcement with trust reasoning, the framework advances current IoT security mechanisms and offers a scalable solution applicable across domains such as smart homes, industrial automation, and edge computing.

S. Deepthi, Khoi A. Tran, G. Deepa · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.