As data collected and provided by Internet of Things (IoT) devices power an ever-growing number of applications and services, it is crucial that this data can be trusted. Data provenance solutions combined with blockchain technology are one way to make data more trustworthy by providing tamper-proof information about the origin and history of data records. However, current blockchain-based solutions for data provenance fail to take the heterogeneous nature of IoT applications and their data into account. In this work, we identify functional and non-functional requirements for a secure and extensible IoT data provenance framework, and conceptualise the framework as a layered architecture. Evaluating the framework using a proof-of-concept implementation based on Ethereum smart contracts, we conclude that our framework can be used to realise data provenance concepts for a wide range of IoT use cases. While blockchain technology generally poses constraints on scalability and privacy, we discuss multiple solutions aiming to overcome these issues.

随着物联网（IoT）设备收集和提供的数据为不断增长的应用程序和服务提供动力，因此使这些数据值得信任至关重要。数据出处解决方案与区块链技术相结合，是通过提供有关数据记录的起源和历史的防篡改信息来使数据更值得信赖的一种方法。但是，当前基于区块链的数据来源解决方案未能考虑到物联网应用及其数据的异构性。在这项工作中，我们确定了安全和可扩展的IoT数据来源框架的功能和非功能需求，并将该框架概念化为分层架构。使用基于以太坊智能合约的概念验证实施来评估框架，我们得出结论，我们的框架可用于实现各种IoT用例的数据来源概念。虽然区块链技术通常会限制可扩展性和隐私性，但我们讨论了旨在解决这些问题的多种解决方案。