The Internet of Things (IoT) is expected to improve the individuals’ quality of life. However, ensuring security and privacy in the IoT context is a non-trivial task due to the low capability of these connected devices. Generally, the IoT device management is based on a centralized entity that validates communication and connection rights. Therefore, this centralized entity can be considered as a single point of failure. Yet, in the case of distributed approaches, it is difficult to delegate the right validation to IoT devices themselves in untrustworthy IoT environments. Fortunately, the blockchain may provide decentralization of overcoming the trust problem while designing a privacy-preserving system. To this end, we propose a novel privacy-preserving IoT device management framework based on the blockchain technology. In the proposed system, the IoT devices are controlled by several smart contracts that validate the connection rights according to the privacy permission settings predefined by the data owners and the stored record array of detected misbehavior of each IoT device. In fact, smart contracts can immediately detect the devices that have vulnerabilities and have been hacked or pose a threat to the IoT network. Therefore, the data owner’s privacy is preserved by enforcing the control over the own devices. For validation purposes, we deploy the proposed solution on a private Ethereum blockchain and give the performance evaluation.

中文翻译：

---

基于区块链物联网设备行为控制的数据隐私

物联网 (IoT) 有望提高个人的生活质量。然而，由于这些连接设备的功能低下，确保物联网环境中的安全性和隐私性并非易事。通常，物联网设备管理基于验证通信和连接权限的集中实体。因此，这个集中的实体可以被认为是单点故障。然而，在分布式方法的情况下，在不可信的物联网环境中，很难将正确的验证委托给物联网设备本身。幸运的是，区块链可以在设计隐私保护系统时提供克服信任问题的分散化。为此，我们提出了一种基于区块链技术的新型隐私保护物联网设备管理框架。在建议的系统中，物联网设备由多个智能合约控制，这些智能合约根据数据所有者预定义的隐私权限设置和存储的每个物联网设备检测到的不当行为的记录数组来验证连接权限。事实上，智能合约可以立即检测到存在漏洞并被黑客入侵或对物联网网络构成威胁的设备。因此，通过强制控制自己的设备来保护数据所有者的隐私。出于验证目的，我们将提议的解决方案部署在私有以太坊区块链上并进行性能评估。智能合约可以立即检测到存在漏洞并被黑客入侵或对物联网网络构成威胁的设备。因此，通过强制控制自己的设备来保护数据所有者的隐私。出于验证目的，我们将提议的解决方案部署在私有以太坊区块链上并进行性能评估。智能合约可以立即检测到存在漏洞并被黑客入侵或对物联网网络构成威胁的设备。因此，通过强制控制自己的设备来保护数据所有者的隐私。出于验证目的，我们将提议的解决方案部署在私有以太坊区块链上并进行性能评估。