Secure Hardware-Assisted Blockchain Framework for IoT Device Authentication using Zero-Knowledge Proofs

Abstract

Translate Article

The rapid expansion of Internet of Things (IoT) deployments across smart environments introduces critical security challenges, particularly at the device identity and physical layers. Traditional cryptographic methods and Distributed Ledger Technologies (DLTs), while valuable, often fail to account for the constrained resources of IoT devices and their susceptibility to physical-layer attacks. This paper proposes a scalable, lightweight security framework that integrates Physical Unclonable Functions (PUFs), Zero-Knowledge Proofs (ZKPs), and a permissioned blockchain to establish end-to-end trust in distributed IoT ecosystems. PUFs act as hardware-rooted trust anchors, enabling secure key generation and unclonable device identity without relying on non-volatile memory. ZKPs facilitate mutual authentication by allowing devices to prove legitimacy without revealing any identifying information. A permissioned blockchain acts as a decentralised verification and audit layer, immutably recording authentication events and ensuring tamper resistance with controlled governance. The proposed architecture is designed to counteract physical tampering, spoofing, and identity forgery while remaining computationally viable for resource-constrained IoT devices. This work presents the foundation for a robust, privacy-preserving, and decentralised security model, bridging the gap between hardware-level assurance and scalable trust in future IoT deployments.