Abstract

PUIoT—pay-per-piece patch update delivery for IoT using gradual release—introduces a distributed framework for delivering patch updates to IoT devices. The framework facilitates distribution via peer-to-peer delivery networks and incentivizes the distribution operation. The peer-to-peer delivery network reduces load by delegating the patch distribution to the nodes of the network, thereby protecting against a single point of failure and reducing costs. Distributed file-sharing solutions currently available in the literature are limited to sharing popular files among peers. In contrast, the proposed protocol incentivizes peers to distribute patch updates, which might be relevant only to IoT devices, using a blockchain-based lightning network. A manufacturer/owner named vendor of the IoT device commits a bid on the blockchain, which can be publicly verified by the members of the network. The nodes, called distributors, interested in delivering the patch update, compete among each other to exchange a piece of patch update with cryptocurrency payment. The pay-per-piece payments protocol addresses the problem of misbehavior between IoT devices and distributors as either of them may try to take advantage of the other. The pay-per-piece protocol is a form of a gradual release of a commodity like a patch update, where the commodity can be divided into small pieces and exchanged between the sender and the receiver building trust at each step as the transactions progress into rounds. The permissionless nature of the framework enables the proposal to scale as it incentivizes the participation of individual distributors. Thus, compared to the previous solutions, the proposed framework can scale better without any overhead and with reduced costs. A combination of the Bitcoin lightning network for cryptocurrency incentives with the BitTorrent delivery network is used to present a prototype of the proposed framework. Finally, a financial and scalability evaluation of the proposed framework is presented.

Highlights

  • The last decade has seen tremendous growth in the Internet of Things (IoT) services and devices owing to rapid advancements in networking technologies

  • Raspberry pies are used as a fleet of IoT devices that request patch from the distributors, which in return communicate with the lightning network to reclaim their reward

  • The experiment consists of different scenarios with a varying number of IoT devices and the size of the patch update

Read more

Summary

Introduction

The last decade has seen tremendous growth in the Internet of Things (IoT) services and devices owing to rapid advancements in networking technologies. Considering the limitations of existing systems, a distributed P2P content delivery network holds promise They can be explored to optimize patch delivery to IoT devices. As a case in point, large organizations and enterprises like Microsoft (for Windows 10 updates [23]), Twitter (to speed up servers deployment [24]), Spotify (to reduced its hosting costs [25]), or Amazon [26], are exploring P2P distribution Such attempts of peer-to-peer distribution are limited to a few organizations acting as peers on the Internet. We present P4 UIoT, a pay-per-piece patch update for IoT software updates using a gradual release, an incentivized distributed delivery network based on Bitcoin’s Lightning.

General Architectures for IoT Patching
Decentralized Storage Networks
Threat Model
Adversarial Model
Security Goals
Preliminary
Blockchain Network
Vendor Nodes
IoT Nodes
Distributor Nodes
Pay-Per-Piece Patch Update
Protocol
Initial Setup
Initiating Patch Update Seeding
Exchange
Implementation
Formal Specification
State Transitions
Vendors
Distributors
IoT Devices
Terminating
Evaluation
Model Checking with Correctness Properties
Threat Analysis
Properties
Execution Results
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call