FR3119061A1 - Method for securing the use of an IoT module connected to a blockchain - Google Patents

Abstract

The invention relates to a method for securing the use of an IoT module (1) connected to a blockchain, said method comprising: creating in the blockchain an IoT digital safe (2) for the IoT module (1); register in a central vault (10) a digital address (9) of the IoT vault (2), associated with a digital identifier (4) of a user (5) of said IoT module on the blockchain; communicate the numeric address (9) of the IoT safe (2) to said user; create a pair of public (13a) and private (13b) cryptographic keys related to the IoT module (1) and compatible with the blockchain; saving the public key (13a) related to said IoT module in the IoT vault (2); pair the IoT module (1) with the IoT safe (2), by associating the public key (13a) linked to said IoT module with the digital address (9) of the IoT safe (2) in the safe central (10). Figure 1

Description

Method for securing the use of an IoT module connected to a blockchain

The invention relates to a method for securing the use of a module connected to a blockchain, as well as an architecture comprising means for implementing such a method.

Blockchains are technologies that allow their users to store and transmit data securely and without a central control body, thanks to a distributed database whose information sent by the users and internal links are checked and grouped at regular time intervals in blocks, thus forming a chain (see in particular the article "Blockchain" on the site of the collaborative encyclopedia Wikipedia and the article in the online newspaper "Le Journal du Net” available at https://www.journaldunet.com/economie/finance/1195520-blockchain-avril-2019/).

This rapidly expanding technology is used in particular to allow users to carry out transactions, validated by a consensus mechanism between nodes in the chain (called "miners"), and more particularly finds its application in the creation and management of currencies. virtual, or crypto-currencies, such as for example Bitcoin, Ether, Monero or Peercoin (or PPcoin).

Moreover, with the development of the so-called “Internet of Things” (IoT) technology, more and more electronic modules, hardware or software, can be used both locally and online, in particular via a connection of said module to an Internet access network. This is particularly the case for mobile terminals such as so-called "intelligent" mobile phones (for English "smartphone") or digital tablets, but also for other types of hardware modules, such as for example consoles portable or living room games, or even software modules, such as applications that can be used by means of a smartphone or a tablet.

To limit the risk of hacking these IoT modules, it is necessary to secure their use. To do this, it is possible to integrate these IoT modules into a blockchain, using a pair of cryptographic keys linked to each IoT module and compatible with said blockchain.

This solution is not entirely satisfactory, insofar as the operation of a chain of blocks requires the regular renewal of the access keys to said chain of blocks, either after a certain time or in the event of a one-off incident having caused the loss of said keys, for example following a power cut. Thus, after a key renewal, an IoT module may not be recognized by other users of the blockchain.

The invention aims to improve the prior art by proposing in particular a method making it possible to easily secure the use of an IoT module online via a chain of blocks, and this independently of its access keys to said chain of blocks.

To this end, according to a first aspect, the invention proposes a method for securing the use of an IoT module connected to a chain of blocks, said method providing for:

• create in the blockchain an IoT digital safe for the IoT module;
• register in a central safe a digital address of the IoT safe, associated with a digital identifier of a user of said IoT module on the blockchain;
• communicate the digital address of the IoT safe to said user;
• create a pair of public and private cryptographic keys linked to the IoT module and compatible with the blockchain;
• save the public key linked to said IoT module in the IoT safe;
• pair the IoT module with the IoT safe, by associating the public key linked to said IoT module with the digital address of the IoT safe in the central safe.

According to a second aspect, the invention proposes an architecture for securing the use of an IoT module connected to a blockchain, said architecture comprising a platform for providing a digital safe service, said platform comprising:

• means for creating in the blockchain an IoT digital safe for the IoT module;
• means for recording in a central safe a digital address of the IoT safe, associated with a digital identifier of a user of said IoT module on the blockchain;
• means for communicating the digital address of the IoT safe to said user;

said IoT module comprising:

• means for creating a pair of public and private cryptographic keys linked to the IoT module and compatible with the blockchain;
• means for providing said public key to the user;

said architecture further comprising a terminal which comprises means for allowing the user to:

• receive the digital address of the IoT safe communicated by the platform;
• save the public key linked to said IoT module in the IoT safe;
• pair the IoT module with the IoT safe, by associating the public key linked to said IoT module with the digital address of the IoT safe in the central safe.

Other particularities and advantages of the invention will become apparent in the description which follows, made with reference to the appended FIGS. 1 and 2, which each schematically represent a method and an architecture according respectively to an embodiment of the invention.

In relation to these figures, a method is described below for securing the use of an IoT module 1 connected to a blockchain, as well as an architecture comprising means for implementing such a method.

The IoT module 1 can be a hardware device provided with means of connection to a computer network linked to the Internet, for example via a wireless connection protocol of the Bluetooth® or Wi-Fi® type. The IoT module 1 can for example be a mobile terminal such as a portable telephone of the “smartphone” type or a digital tablet, or another type of device such as a portable or home game console. The IoT module 1 can also be software that can be used online, such as for example an application installed on a smartphone or a tablet.

The method provides for creating in the blockchain an IoT digital safe 2 for the IoT module 1. To do this, the architecture comprises a platform 3 for providing a digital safe service on the blockchain , said platform comprising means for creating such an IoT safe 2.

In particular, the method provides for creating the IoT vault 2 with a digital address 4 of the user 5 of the IoT module 1 on the blockchain. This digital address 4, also called public key, is linked by mathematical functions to a private key known only to user 5.

These keys can in particular be created under the control of the user 5 in a terminal 6 of said user, for example a portable telephone of the “smartphone” type, the user 5 only using the public key 4 to interact with the chain of blocks and the rest of the system. As a result, the private key never leaves the terminal 6, which guarantees the user 5 optimal security.

To do this, the terminal 6 may include means, in particular integrated into an application installed on said terminal, to allow the user 5 to create or take possession of such a pair of keys under the control of said user.

Furthermore, the public key 4 can be recorded in a digital safe 7 specific to the chain of blocks, in particular by being associated there with a digital identity of the user 5 independent of the chain of blocks, for example his identifiers on a third-party platform of another online service, which allows said user to connect to the chain of blocks by means of these identifiers, if necessary avoiding the use of said public key.

In the embodiments represented, the method provides for the sending of a request 8 by the user 5 to initiate the creation of the IoT safe 2 for the IoT module 1.

To do this, the terminal 6 comprises means to allow the user 5 to send such a request 8 to the platform 3, said request comprising in particular the digital address 4 of said user on the blockchain, in order to allow platform 3 to create the safe ofrt Io2 with said digital address as parent address.

In particular, the terminal 6 can comprise means for connecting to the platform 3 via a suitable programming interface (API, for “Application Programming Interface”).

The IoT 2 safe represents the IoT 1 module on the blockchain, and in particular allows said module to be recognized by all users of said blockchain, throughout the duration of its use.

For this IoT safe 2 to be able to fulfill its role correctly, it is necessary that its digital address 9 on the blockchain be known not only to the user 5, but also to the IoT module 1 itself, in particular to be able to fill in this address 9 in the internal computer programs of said IoT module.

To do this, the method provides for recording the digital address 9 in a central safe 10 of the block chain, said address being associated with a digital identifier of the user 5 on the block chain, for example the public key 4 mentioned earlier.

In particular, the platform 3 comprises means for allowing the creation of such a central safe 10, for example by an administrator of the platform 3, as well as means for recording in this central safe 10 the digital address 9 of the IoT safe 2, for example by sending an appropriate notification 11, so that said address is associated with the public key 4 of the user 5 in said central safe.

The method also provides for communicating the digital address 9 of the IoT safe 2 to the user 5, in order to allow said user to easily access it. To do this, the platform 3 comprises means for communicating this address to the user 5, in particular by sending a suitable notification 12 to his terminal 6, said terminal being arranged to receive said notification, in order to allow the user 5 to receive said digital address.

The method then provides for creating a pair of public 13a and private 13b cryptographic keys linked to the IoT module 1 and compatible with the blockchain. To do this, the IoT module 1 comprises means for creating the keys 13a, 13b, in particular in the form of a button located on said module or on an activation card of said module, the user 5 interacting with said button to initiate the creation of said keys.

To finalize the creation of the IoT 2 safe, the process provides for:

• save the public key 13a linked to the IoT module 1 in the IoT safe 2;
• pair the IoT module 1 with the IoT safe 2, by associating the public key 13a with the digital address of said IoT safe in the central safe 10.

Thus, the IoT module 1 can easily obtain the digital address 9 of its IoT safe 2, by interaction with the central safe 10.

In the embodiments represented, the method provides for providing the user 5 with the public key 13a created for the IoT module 1, in particular by means of suitable means provided on said module, so that said user, by means of suitable means installed on his terminal 6, save this key 13a:

• in the IoT Vault 2; And
• in the central safe 10, by associating it with the digital address 9 of said IoT safe in said central safe.

In particular, the IoT module 1 can be equipped with a screen on which information intended for the user 5 can be displayed, in particular to help said user to configure said module.

On the , the method provides for displaying the public key 13a of the IoT module 1 directly on the screen mentioned above, the IoT module 1 comprising suitable means for carrying out such a display, in particular by initiating a procedure 14 of interrogation adapted.

Furthermore, the terminal 6 comprises means for acquiring the public key 13a by direct reading of the screen, in particular by capturing an image of said screen, in order to avoid the user 5 having to manually enter said key on his terminal. 6.

On the , the method provides, by means of suitable means equipping the IoT module 1, for:

• associate the public key 13a created for the IoT module 1 with a code linked to said module in the central safe 10;
• provide said code to the user 5;

the user 5 interacting by means of his terminal 6 with said central safe to obtain said public key from said code.

The code is a unique serial number assigned to the IoT module 1, which can in particular be displayed on a screen fitted to said module, in particular by interaction of the user 5 with a button adapted to said module, or even printed in the form of a code -bars or a QR code (for English "Quick Response") on a label stuck on said module or on its motherboard, the terminal 6 being equipped with suitable means for acquiring said code by reading said screen and/or of said label.

In relation to the , the IoT module 1 sends to the central safe 10 a notification 15 containing the public key 13a and the unique code of said module, said code being in particular accessible to said module via suitable software integrated into said module. Then, the central safe 10 saves the key 13a by associating it with this code.

Thus, to acquire the public key 13a, the user 5 first acquires the code by means of his terminal 6, then sends via said terminal a request 16 comprising said code to the central safe 10, in order to obtain the key. public 13a recorded in said central safe from said code.

In the two embodiments represented, the user 5 finalizes the creation of the IoT safe 2 by sending by means of his terminal 6:

• to the IoT safe 2: a notification 17 containing the public key 13a; And
• to the central safe 10: a notification 18 containing the public key 13a of the IoT module 1 and the public key 4 of the user 5, in order to allow the central safe 10 to associate the key 13a of said module with the address 9 of the IoT safe 2 by means of the key 4 of said user.

Thus, the IoT vault 2 is paired with the IoT module 1, so that said vault represents said module on the blockchain independently of its keys 13a, 13b, the user 5 needing only the digital address 9 to perform operations regarding said module on said blockchain. In particular, in the event of a change of keys 13a, 13b, the user 5 can simply communicate the new public key 13a by sending the appropriate notifications 17, 18 to the safes 2, 10.

Furthermore, on the , the IoT module 1 can also acquire the address 9 of its designated IoT safe 2 by launching an interrogation procedure 19 with the central safe 10.

Claims (13)

Method for securing the use of an IoT module (1) connected to a blockchain, said method providing for:

• create in the blockchain an IoT digital safe (2) for the IoT module (1);
• recording in a central safe (10) a digital address (9) of the IoT safe (2), associated with a digital identifier (4) of a user (5) of said IoT module on the blockchain;
• communicating the digital address (9) of the IoT safe (2) to said user;
• create a pair of public (13a) and private (13b) cryptographic keys linked to the IoT module (1) and compatible with the blockchain;
• save the public key (13a) linked to said IoT module in the IoT safe (2);
• pair the IoT module (1) with the IoT safe (2), by associating the public key (13a) linked to said IoT module with the digital address (9) of the IoT safe (2) in the safe central (10).

Method according to claim 1, characterized in that it provides for the sending of a request (8) by the user (5) of the IoT module (1) to initiate the creation of the IoT digital safe (2) for said IoT module. Method according to one of Claims 1 or 2, characterized in that it provides for the creation of the IoT safe (2) with a digital address (4) of the user (5) on the chain of blocks. Method according to any one of Claims 1 to 3, characterized in that it provides for the creation of the keys (13a, 13b) linked to the IoT module (1) by interaction of the user (5) with a button fitted to the said module IoT. Method according to any one of Claims 1 to 4, characterized in that it provides for providing the user (5) with the public key (13a) created for the IoT module (1), so that the said user registers the said key public:

• in the IoT vault (2); And
• in the central safe (10), by associating it with the digital address (9) of the IoT safe (2) in said central safe.

Method according to claim 5, characterized in that it provides for displaying the public key (13a) of the IoT module (1) on a screen fitted to said IoT module. Process according to Claim 5, characterized in that it provides for:

• associating the public key (13a) created for the IoT module (1) with a code linked to said IoT module in the central safe (10) after said creation;
• providing said code to the user (5);

the user interacting with said central vault to obtain said public key from said code. Architecture for securing the use of an IoT module (1) connected to a blockchain, said architecture comprising a platform (3) for providing a digital safe service, said platform comprising:

• means for creating in the blockchain an IoT digital safe (2) for the IoT module (1);
• means for recording in a central safe (10) a digital address (9) of the IoT safe (2), associated with a digital identifier (4) of a user (5) of said IoT module on the blocks;
• means for communicating the digital address (9) of the IoT safe (2) to said user;

said IoT module comprising:

• means for creating a pair of public (13a) and private (13b) cryptographic keys linked to the IoT module (1) and compatible with the blockchain;
• means for providing said public key to the user (5);

said architecture further comprising a terminal (6) which comprises means for allowing the user (5) to:

• receiving the digital address (9) of the IoT safe (2) communicated by the platform (3);
• save the public key (13a) linked to said IoT module in the IoT safe (2);
• pair the IoT module (1) with the IoT safe (2), by associating the public key (13a) linked to said IoT module with the digital address (9) of the IoT safe (2) in the safe central (10).

Architecture according to Claim 8, characterized in that the terminal (6) comprises means for allowing the user (5) to send the platform (3) a request (8) to initiate the creation of the digital safe IoT (2) for the IoT (1) module. Architecture according to one of Claims 8 or 9, characterized in that the platform (3) comprises means for creating the IoT safe (2) with a digital address (4) of the user (5) on the chain of blocks. Architecture according to any one of Claims 8 to 10, characterized in that the IoT module (1) comprises a button arranged to allow the creation of the keys (13a, 13b) linked to the said IoT module by interaction of the user (5) with said button. Architecture according to any one of Claims 8 to 11, characterized in that the IoT module (1) comprises a screen and means for displaying the public key (13a) on said screen, the terminal (6) comprising means for acquiring said public key by direct reading of said screen. Architecture according to any one of Claims 8 to 11, characterized in that the IoT module (1) comprises:

• means for associating the public key (13a) created for said IoT module with a code linked to said IoT module in the central vault (10) after said creation;
• means for providing said code to the user (5);

the terminal (6) comprising means to allow the user (5) to interact with said central safe to obtain said public key from said code.