SSP: Self-Sovereign Privacy for Internet of Things Using Blockchain and MPC

Abstract

With the proliferation of the Internet of Things (IoTs), their devices have been collecting our personal data to enhance our life styles and their purposes. Care must be taken when handling such sensitive data to protect the data owners' privacy while guaranteeing the integrity when the data is accessed by a third party. Furthermore, data should be available without much delay to support medical emergencies. Unfortunately, IoT devices may be limited with storage and computational resources to operate highly secure operations and respond to data requests. In this paper, we propose SSP, a novel mechanism that protects the privacy and integrity of the data collected by IoT devices without having a single point of failure, while minimizing the cryptographic operations that must be performed on IoT devices. SSP utilizes the blockchain data structure for availability and integrity, and Multi-Party-Computations (MPC) for privacy protection. We implemented SSP in C/C++ and according to our evaluation results, SSP is efficient in computation, communication, and storage operations on IoT devices.