Sender anonymity: Applying ring signature in gateway-based blockchain for IoT is not enough

Over the last decade, there has been extensive research into the security and privacy of blockchain technology, from the use of ring signatures to ring confidential transactions. Although existing cryptographic methods perform well on traditional blockchain architectures, they do not provide complete privacy in a hierarchical blockchain architecture for Internet of Things (IoT) devices. The blockchain technology is centered at the gateway layer in the hierarchical blockchain architecture, which can easily reveal the transaction sender using network traffic information, thereby violating the sender's anonymity. Furthermore, the gateway can perform eclipse attacks against transaction senders on a case-by-case basis. To this end, this paper proposes a novel security and privacy blockchain protocol that is better suited to the hierarchical blockchain architecture and thus more appropriate for the IoT environment. Specifically, it leverages the relationship among IoT devices at the perception layer of the hierarchical blockchain architecture for IoT, and constructs an overlay social IoT network by exploiting devices' multi-agent capabilities. Furthermore, circuit establishment based on multilayered encryption is applied to conceal the transaction propagation path through the overlay social IoT. Theoretical analysis shows that our novel protocol is flexible, evades a malicious gateway, and is secure under the decisional DiffieHellman assumption.(c) 2022 Published by Elsevier Inc.