DAXiot: A Decentralized Authentication and Authorization Scheme for Dynamic IoT Networks

TL;DR

DAXiot introduces a decentralized, privacy-preserving authentication and authorization scheme for dynamic IoT networks, enabling secure permission management and data confidentiality in frequently changing environments.

Contribution

It proposes a novel challenge-response scheme using Decentralized Identifiers and Verifiable Credentials for IoT security.

Findings

Secure authentication and authorization demonstrated in MQTT 5.0 scenario

Supports privacy preservation and data confidentiality

Evaluates security, privacy, and performance effectively

Abstract

Federated and decentralized networks supporting frequently changing system participants are a requirement for future Internet of Things (IoT) use cases. IoT devices and networks often lack adequate authentication and authorization mechanisms, resulting in insufficient privacy for entities in such systems. In this work we address both issues by designing a privacy preserving challenge-response style authentication and authorization scheme based on Decentralized Identifiers and Verifiable Credentials. Our solution allows a decentralized permission management of frequently changing network participants and supports authenticated encryption for data confidentiality. We demonstrate our solution in an MQTT 5.0 scenario and evaluate its security, privacy guarantees, and performance.