Toward a Blockchain-based Platform to Manage Cybersecurity Certification of IoT devices

TL;DR

This paper proposes a blockchain-based platform to improve transparency and traceability in cybersecurity certification, focusing on IoT devices, to support trusted information exchange in line with EU regulations.

Contribution

It introduces a generic blockchain platform specifically designed for managing cybersecurity certification data, with a case study on IoT devices.

Findings

Enhanced transparency in certification processes

Improved traceability of cybersecurity information

Supports trusted exchange for IoT devices

Abstract

The goal of this paper is to propose a blockchain-based platform to enhance transparency and traceability of cybersecurity certification information motivated by the recently adopted EU Cybersecurity Act. The proposed platform is generic and intended to support the trusted exchange of cybersecurity certification information for any electronic product, service, or process. However, for the purposes of this paper, we focus on the case study of the cybersecurity certification of IoT devices, which are explicitly referenced in the recently adopted Cybersecurity Act as one of the main domains where it is highlighted the need for an increased level of trust.