Smart Contract-Based Access Control for IoT Networks Using Edge Computing

Project Abstract

The exponential growth of Internet of Things (IoT) devices in critical environments demands robust, scalable, and trustworthy access control mechanisms that can operate efficiently at the network edge. This research proposes a novel framework that leverages smart contracts and edge computing to implement decentralized, tamper-evident access control for heterogeneous IoT networks. The core idea is to encode access policies, roles, and device permissions as programmable contracts executed on a permissioned blockchain at the edge, thereby reducing trust assumptions, increasing transparency, and enabling real-time decision making close to data sources. The framework integrates lightweight identity provisioning, capability-based access control, and policy enforcement points colocated with edge gateways to minimize latency and bandwidth consumption while preserving data privacy through selective data exposure and off-chain policy evaluation where appropriate. The study begins with a formalization of access control requirements in IoT ecosystems, addressing common challenges such as device heterogeneity, dynamic user contexts, intermittent connectivity, and scalability. A hybrid architecture is proposed in which core policy decision logic resides on edge nodes, contract state is synchronized across a local network of edge servers, and sensitive data remains off-chain or encrypted, ensuring compliance with privacy regulations. Smart contracts provide immutable policy declarations, auditable access logs, and automated revocation mechanisms, while lightweight consensus protocols tailored for edge environments (e.g., Raft or delegated proof-of-authority) maintain performance without sacrificing security. The research also explores domain-specific optimizations, including policy decomposition, event-driven contract execution, and batching of access requests to achieve millisecond-level response times suitable for time-critical IoT operations. Methodologically, the project adopts a multi-phase approach (i) requirements elicitation from representative IoT deployments (industrial, smart building, and healthcare scenarios), (ii) design and prototyping of an edge-based smart contract framework with modular policy modules, identity management, and secure logging, (iii) formal verification and security analysis of contract logic against common attack surfaces such as revocation bypass, replay attacks, and contract downtime, (iv) implementation of a prototype on heterogeneous edge hardware with simulated and real devices, (v) evaluation focusing on throughput, latency, energy efficiency, scalability under varying device counts, and resilience to network partitioning, and (vi) a comparative study against centralized RBAC and attribute-based access control schemes. Preliminary results indicate that edge-embedded smart contracts can substantially reduce authorization latency by 40-70% compared with cloud-centric solutions, while maintaining strong traceability and non-repudiation. The framework demonstrates robust performance under bursty workloads and maintains acceptable overhead for constrained IoT devices through off-chain policy evaluation and efficient cryptographic primitives. Potential impacts include enhanced security governance for IoT deployments, reduced operational risks through auditable access trails, and the enabling of dynamic, policy-driven access in decentralized, resource-constrained environments. Limitations and future directions are discussed, including interoperability challenges across diverse blockchain stacks and the need for standardized policy schemas to ensure broad applicability.

Project Overview

What This Project Is About

---

This project explores how smart contracts can control who can access data and devices in Internet of Things (IoT) networks, using edge computing to process requests close to the devices. It focuses on making access decisions automatically, securely, and efficiently without relying on a central authority.

---

---

The Problem It Addresses

---

IoT systems are growing rapidly, but managing who can use what data or device is hard and risky. Traditional methods rely on centralized servers that can become bottlenecks or single points of failure. The project looks for a decentralized, trustworthy way to grant and revoke access in real time.

---

---

Objectives of the Project

---

1. Explain basic concepts of IoT, smart contracts, and edge computing in simple terms.
2. Design a lightweight access-control model for IoT devices.
3. Prototype a smart contract-based authorization system that runs at the edge.
4. Evaluate security, latency, and scalability of the system.

---

---

What You Will Do Step by Step

---

1. Study basic IoT architectures and common access-control practices.
2. Learn simple smart-contract ideas and how edge devices can run small programs.
3. Build a small IoT setup (sensors, a gateway, and a few devices) for testing.
4. Implement a basic smart contract to grant and revoke access.
5. Deploy the contract on a test network and connect it to edge components.
6. Test different access requests, logging results and delays.
7. Analyze security, performance, and ease of use.
8. Summarize findings and suggest improvements or extensions.

---

---

Expected Outcome

A working edge-enabled access-control prototype using smart contracts that can quickly approve or deny device requests, with clear security benefits and practical guidelines for deployment in real IoT settings.