MobiAuth: Blockchain-driven decentralized authentication for enhanced security and privacy in mobile networks

Abstract

Decentralized authentication in dynamic mobile networks faces significant challenges due to high node mobility, resource constraints, and vulnerabilities to side-channel attacks. In this work, we present MobiAuth , a blockchain-driven framework based on Hyperledger Iroha and OMNET ++ that enables secure, peer-to-peer authentication using compact Ed25519 signatures and ephemeral session keys. Our protocol eliminates single points of failure by distributing trust across a permissioned ledger and employs constant-time cryptographic operations to thwart timing and power-analysis attacks. We validate MobiAuth through co-simulation in OMNET ++ integrated with Iroha via a Python gRPC bridge and benchmark its performance with Hyperledger Caliper. Simulation yields 95% packet delivery with an authentication latency ranging from 12 ms in the only OMNeT ++ and baseline to 20–150ms in the full ledger-integrated system, and a ledger write throughput of 250tps. Comparative experiments demonstrate a 33% reduction in communication overhead and robust operation under random Control Point failures and Byzantine Access Node behavior. Analysis of on-device ledger synchronization further highlights practical storage growth and bandwidth requirements for long-term deployment. These results indicate that MobiAuth achieves strong security and privacy with modest energy impact, scalable performance, and compatibility with mobile devices in real-world network environments. • Vulnerabilities of mobile network devices in a dynamic environment. • Blockchain-based automatic authentication for mobile devices. • Enhanced security and privacy with Ed25519 curve cryptography. • OMNET++ simulation on Hyperledger Iroha for mobile network. • Protocol verification using Scyther for testing security protocol strength.