A Lightweight and User-centric Two-factor Authentication Mechanism for IoT Based on Blockchain and Smart Contract

Abubakar, Mwrwan; Jaroucheh, Zakwan; Al Dubai, Ahmed; Liu, Xiaodong

Abstract

Two-factor authentication (2FA) is commonly used in Internet of Things (IoT) authentication to provide multi-layer protection. Tokens, often known as One-Time Passwords (OTP), are used to offer additional information. While this technique provides flexible verification and an additional layer of security, it still has a number of security issues. This is because it relies on third-party services to produce tokens or OTPs, which leads to serious information leakage issues. Additionally, relying on a third party to provide authentication tokens significantly increases the risk of exposure and attacks, as tokens can be stolen via Man-In-The-Middle (MITM) attacks. In trying to rectify this issue, in this paper, we propose and develop a blockchain-based two-factor authentication method for web-based access to sensor data. The proposed method provides a lightweight and user-centric authentication that makes use of Ethereum blockchain and smart contracts technologies. Then we provided performance and security analysis of our system. Based on the evaluation results, our method has proven to be effective and has the ability to facilitate reliable authentication.

• Presentation Conference Type: Conference Paper (Published)
• Conference Name: 2022 2nd International Conference of Smart Systems and Emerging Technologies (SMARTTECH)
• Start Date: May 9, 2022
• End Date: May 11, 2022
• Online Publication Date: Aug 4, 2022
• Publication Date: 2022
• Deposit Date: Jul 13, 2023
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: 2022 2nd International Conference of Smart Systems and Emerging Technologies (SMARTTECH)
• DOI: https://doi.org/10.1109/smarttech54121.2022.00032