Proof of Trust (PoT): A Blockchain-Based Operational Trust Consensus for Sensitive IoT Ecosystems
This paper introduces Proof of Trust (PoT), a blockchain-based consensus mechanism for sensitive IoT ecosystems that dynamically validates device operational integrity through adaptive, session-specific challenges and a decaying trust score, achieving high detection rates for compromised and degraded devices while minimizing latency via hybrid local-ledger anchoring.
Original paper licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the industrial world, machines talk to each other constantly. A sensor in a factory might tell a robotic arm to move, or a smart meter might report energy usage to a central grid. For these systems to work safely, the machines must trust that the message they receive actually came from the machine it claims to be. Traditionally, this trust was established once, like checking a passport at the border. If the credentials looked valid, the machine was let in and allowed to operate. However, this old method has a blind spot. It cannot tell if a machine is currently broken, if its software is malfunctioning, or if a clever attacker has intercepted the conversation and is pretending to be the machine. A device might have a valid passport but be unable to perform its job, or worse, it might be a fake device entirely, relaying messages from a hidden attacker. In critical environments like power plants or water treatment facilities, trusting a machine just because it has the right ID card is not enough; you need to know if it is actually working and telling the truth right now.
Researchers Mohamed Faraji, Meryeme Ayache, and Hanan El Bakkali have developed a new system called Proof of Trust to solve this problem. Instead of relying on a static check, their system treats trust as something that must be measured continuously, moment by moment. Imagine a security guard who does not just check your ID once at the door but asks you to perform a specific task every time you enter a room to prove you are who you say you are and that you are capable of doing your job. This system works by sending a series of challenges to the device. These are not random questions but specific requests based on what the device is supposed to do. If the device is a camera, the system might ask it to turn to a specific angle and report back. If it is a temperature sensor, it might ask for a reading that must match the physical reality of the environment. The system then checks the answer against six different criteria: whether the identity is genuine, whether the data makes sense physically, whether the device is actually performing the task, whether the device's profile has been tampered with, and whether the connection is direct and free from interference.
To make this process secure and transparent, the researchers built it on a blockchain, which acts as a shared, unchangeable ledger that records every trust check. This ensures that no single person or organization can alter the history of what happened. The system is designed to be fast enough for real-time industrial use. It uses a hybrid approach where the immediate decision to trust or reject a device happens locally in a fraction of a second, while the permanent record of that decision is written to the blockchain in the background. This means the flow of data is never slowed down by the need to wait for a complex verification process, yet every action is still permanently logged for later audit. The researchers tested this system in a simulated environment using five different types of industrial devices, such as temperature sensors, air quality monitors, and industrial valves. They ran 380 different sessions, including scenarios where the devices were working perfectly, and scenarios where they were compromised, broken, or being impersonated by attackers.
The results showed that the system was highly effective at spotting problems that traditional methods miss. It successfully identified every single instance where a device was being impersonated or where the communication was being relayed through an attacker's server. It also caught every case where a device's hardware was failing, such as an overheating controller or a dead sensor cell. In the most critical security zones, where the stakes are highest, the system detected 100 percent of functional failures, meaning it knew immediately when a machine stopped doing its job correctly. Even in less critical zones, it detected 95 percent of these failures. The system also managed to spot slow, gradual changes in device behavior, such as a temperature sensor drifting slightly out of calibration over time, which is a type of problem that usually goes unnoticed until it causes a major issue. The only time the system made a mistake was in about 3.5 percent of cases where it flagged a perfectly healthy device as suspicious, a rate the researchers consider acceptable given the high level of security provided.
What makes this approach different is that it does not rely on complex artificial intelligence models that need to be trained on vast amounts of data or that act as a "black box" where the reasoning is hidden. Instead, it uses clear, logical rules based on the physical capabilities of the device and the context of its environment. If a camera is challenged to take a picture at noon and returns a black image, the system knows something is wrong because the context does not match the result. If a valve is told to open and the feedback says it is still closed, the system rejects the trust. The researchers found that by combining these different checks, they could create a much more robust picture of trust than by looking at identity alone. The system also respects the limits of the devices; it never asks a machine to do something it is not certified to do, ensuring that the verification process itself does not break the equipment.
This work represents a shift from simply asking "who are you?" to asking "are you working correctly right now?" By anchoring these answers in a secure, shared record, the system provides a way for different organizations to trust each other's machines without needing to know the inner workings of every device. The researchers demonstrated that this method can be implemented using existing industrial communication standards, making it a practical step forward for securing the complex networks that run our modern infrastructure. While the testing was done in a controlled simulation, the results suggest that this kind of continuous, operational trust verification could become a standard way to ensure that the machines we rely on are not just identified, but truly trustworthy.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.