Lifecycle Management of IoT Devices Via Digital Identities Management and Distributed Ledgers Solutions

This publication presents the ERATOSTHENES project outcomes on devising a novel distributed, automated, auditable, yet privacy-respectful, Trust and Identity Management Framework intended to dynamically and holistically manage the lifecycle of IoT devices, strengthening trust, identities, and resilience in the entire IoT ecosystem. The solution also supports the enforcement of the NIS directive, GDPR and the Cybersecurity Act.
The publication includes an analysis of the architecture and outcomes of the following research innovations: (a) Cybersecurity features in IoT devices through deployment of Trust Agents and continuous trust evaluation within the network in a contextual and social approach; (b) a decentralized identity management mechanisms to conciliate requirements of self-sovereignty and privacy preservation in a distributed/transparent trust model along with disposable identities; (c) self-encryption/decryption at
device-level with a fully automated recovery process after an attack based on a multi-layer recovery model; (d) threat analysis models based on federated learning and edge execution to continuously monitor devices and detect attacks; (e) collaborative IoT threat intelligence sharing across ledgers to adapt detection/defense mechanism to the evolving security conditions and assist the IoT life-cycle; (f) integration of Physical Unclonable Functions in the trust framework and identity information stored and managed in distributed ledgers.