Robust Decentralised Trust Management for the Internet of Things by Using Game Theory. Issue 6 (November 2020)

• Record Type: Journal Article
• Authors: Esposito, Christian; Tamburis, Oscar; Su, Xin; Choi, Chang
• Is Part Of: Information processing & management. Volume 57:Issue 6(2020:Nov.)
• Publication Date: 2020-11
• Subjects: Trust Management -- Blockchain -- Decentralized Trust Assessment -- Fog Computing -- Game Theory -- Dempster-Shafer theory; Information storage and retrieval systems -- Periodicals; Information science -- Periodicals; Systèmes d'information -- Périodiques; Sciences de l'information -- Périodiques; Information science; Information storage and retrieval systems; Periodicals; 658.4038
• DOI: 10.1016/j.ipm.2020.102308
• Languages: English
• ISSNs: 0306-4573

Abstract

Highlights: The security problems related to a federated trust management supported by the blockchain within the context of the IoT is formulated; The interactions of the edge node with the IoT node is modelled as a signalling game, which is studied and a solution is formulated as a Perfect Bayesian Equilibrium The evolutionary game and Dempster-Shafer theory are combined so as to achieve a robust evidence aggregation and realise robust trust estimation An empirical assessment is presented with an implementation realised with Hyperledger platform. Abstract: Due to the large scale of the typical deployments and the involvement of moving objects to the Internet of Things, participating nodes opportunistically establish data exchanging connections, spanning across multiple organizations and security domains. This opportunistic behavior causes the impossibility of defining valid security policies to rule node authorization, and the ineffectiveness of traditional static access control models based on roles or attributes. Trust management is a promising solution to complement these conventional rules and models by realizing a more dynamic security approach and regulating connection request acceptance or rejection based on monitored behaviors. As a centralized authority cannot be established within multi-tenant and large scale infrastructures, decentralized approaches have recently emerged, supported by the blockchain technology, and applied to the case of useful Internet of Things implementations. However, they are vulnerable to possible attacks aiming at discrediting honest nodes (by lowering their trust degree) and/or redeem malicious nodes (by increasing their trust degree). The widely-accepted protection consists of securing the communications by using SSL/TLS, and restricting the nodes allowed to update the trust degree. However, they are known to be ineffective against compromised nodes that, despite holding legitimate security claims and cryptographic material, they deviate from the correct behavior by sending false and mendacious scores. This work proposes to exploit on game theory to realize robust decentralized trust management able to tolerate malicious nodes sending mendacious scores. Explicitly, a signaling node has been formalized to model the interactions between the IoT and the edge nodes by refusing potentially untrue scores. Moreover, the evolutionary Dempster-Shafer theory is used to combine the collected scores to update nodes' trust degrees, by excluding diverging scores far from the majority. Such solutions have been implemented within the context of a blockchain-supported trust management solution for IoT, and an empirical assessment is provided to show the quality of the proposed approach.