Two-Layered Multi-Factor Authentication Using Decentralized Blockchain in an IoT Environment

Area of Science:

• Computer Science
• Cybersecurity
• Network Security

Background:

• Internet of Things (IoT) technology is rapidly expanding, integrating into smart infrastructure and diverse applications.
• Traditional authentication methods for IoT are insufficient due to wireless transmission vulnerabilities and the resource-constrained nature of IoT devices.
• Lightweight yet robust security solutions are crucial for protecting IoT ecosystems.

Purpose of the Study:

• To propose a novel, two-layered multi-factor authentication (2L-MFA) framework leveraging blockchain technology.
• To enhance the security and authentication processes for both IoT devices and users.
• To address the limitations of existing authentication methods in resource-constrained IoT environments.

Main Methods:

• Developed a two-layered multi-factor authentication (2L-MFA) framework utilizing blockchain.
• Implemented device-level authentication using secret keys, geographical location, and physically unclonable functions (PUF), supported by Proof-of-Authentication (PoAh) and Elliptic Curve Diffie-Hellman.
• Designed a four-level user-level authentication incorporating matrix-based passwords, Elliptic Curve Digital Signature Algorithm (ECDSA), and biometric factors (iris, finger vein).
• Integrated fuzzy logic for robust authentication validation.

Main Results:

• The 2L-MFA framework significantly enhances security for IoT devices and users.
• Authentication processes were optimized, reducing registration time by up to 25%, login time by 50%, and authentication time by 25%.
• The system facilitates quicker cloud access post-authentication, improving overall operational efficiency.

Conclusions:

• The proposed 2L-MFA framework offers a robust and efficient solution for securing Internet of Things environments.
• Blockchain integration, combined with multi-factor authentication and fuzzy logic, provides a strong defense against evolving cyber threats.
• The framework's performance improvements demonstrate its viability for practical implementation in smart infrastructure and IoT applications.