BISF-IoT: A Scalable Blockchain-Integrated Security Framework with Formal Guarantees

Abstract

As IoT deployments rapidly expand, ensuring comprehensive end-to-end security across identity, authorization, communication, integrity, and auditability is critical. This paper presents BISF-IoT, a Blockchain-Integrated Security Framework that utilizes a permissioned ledger as a tamper-evident control plane while keeping high-volume telemetry and raw logs off-chain. BISF-IoT integrates decentralized identity (DID) management, capability-based authorization with explicit revocation under a freshness bound Δ, and secure-channel identity binding for MQTT/CoAP edge devices. Formal game-based proofs establish five core security properties: DID authenticity, authorization soundness, revocation safety, tamper-evident logging, and auditable anomaly alert non-repudiation. Performance evaluation through simulation with up to 10,000 devices demonstrates near-linear scalability, processing up to 160,000 transactions per day with a scaling efficiency of ~0.90–1.00. Authorization latency increases moderately from 120 ms at 100 devices to 650 ms at 10,000 devices. Therefore, it remains within practical operational limits. Blockchain storage grows steadily at approximately 37–42 MB/day by storing compact Merkle commitments and security artifacts while avoiding raw data bloat. Meanwhile Log verification time exhibits sub-linear growth, with verification cost per entry decreasing from 0.200 ms to 0.055 ms as log size increases from 100 to 10,000 entries, reflecting efficient Merkle inclusion proof mechanisms. These results confirm BISF-IoT’s capability to provide scalable, secure, and verifiable control-plane operations suitable for large-scale IoT environments.