Skip to content
Leveraging Ethereum blockchain platform for identity, authentication and reputation of IoT devices
Branch: master
Clone or download
Latest commit cdd34d2 May 23, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
contracts Modified for Solidity 5.x, minor changes May 3, 2019
frontend Modified for Solidity 5.x, minor changes May 3, 2019
migrations Initial commit Aug 11, 2018
simulations Modified for Solidity 5.x, minor changes May 3, 2019
.gitattributes Create .gitattributes Mar 4, 2019
.gitignore Initial commit Aug 11, 2018
LICENSE Create LICENSE May 22, 2019 Update May 21, 2019 Lookup device, filter events Aug 18, 2018
truffle-config.js Initial commit Aug 11, 2018
truffle.js Initial commit Aug 11, 2018

IoT Device Management


A system that leverages Ethereum platform for identity, authentication and reputation of IoT devices. Devices are registered in a smart contract via a web interface and send cryptographically signed messages to a platform that validates them using blockchain.

This project is a part of my undergraduate thesis Using blockchain for registration and control of IoT devices .


IoT is facing identity, security and interoperability problem. Current systems rely on centralized client-server model that will soon be unsatisfactory due to the rapid increase in the number of devices connected to the Internet. Blockchain is shared, distributed and decentralized ledger that allows development of decentralized applications. This thesis examines the concept of its use for registration and management of IoT devices. A system that consists of a smart contract, web interface, and device and platform has been developed. Systems users, entities, register devices within a smart contract with their control information via a web interface. Devices sign messages using private key which are sent to the platform along with control information and associated proof. Received messages are validated using blockchain, which at the end provides authentication, integrity and non-repudiation.


Below are presented four main concepts that apply to this system.

Device Identity

Device is registered without revealing it's private properties by using Merkle tree. Public key or it's representation is used as an ID.

Example of properties being hashed into Merkle root

Message Authentication

Each message is signed and validated using blockchain on receiver's end.

Generating signature


Firmware Hashing

It is possible to confirm that device is running valid firmware that hasn't been tampered with.

Device Reputation

Based on Web of Trust principle, devices can form a network of trust. The more signatures a device has from other reputable devices, the more trusted it can be.


Consists of entities, devices and an IoT platform.


Technologies used are as follows:

  • Ethereum
  • Solidity
  • Truffle Framework
  • Web3.js
  • React


Main folders and their content:

  • contracts - Smart contracts (Solidity)
  • frontend - Web interface (React)
  • simulations - Device and platform simulations

Smart Contract

See file contracts/DeviceManager.sol for full list and explanations of methods and events.

Web Interface

Home and network status

Historical events for entity

Device registration





Download configuration

List devices

Edit device

Historical events for device

Devices and platform

Example device configuration.

    "identifier": "0xf34d4c8f79657f1086f55b817837439c303dff19",
    "metadataHash": "43af4ba721cd8c9ba432ed6aca9adb96d16f82c25ba76...",
    "firmwareHash": "b01d2af9ea9dd59dd9c8af3f1639da03c79b7ed28adaa...",
    "metadata": [
        "Olive grove",
        "Espressif Systems",
    "firmware": "333f14cdb0a8520199257479ba126a10bca96b229b7924085...",
    "address": "0xf34d4c8f79657f1086f55b817837439c303dff19",
    "publicKey": "d627bbb0a7c150f814a1960ebe69f0d8b4494e1033d9e72...",
    "privateKey": "48a2e48b2d178e7d1f1508f2964a89079f1f8a301ebb85a...",
    "curve": "secp256k1",
    "deviceId": 0

Simulation example for device and platform can be found in files simulations/device.js and simulations/platform.js.

You can’t perform that action at this time.