Abstract

In recent times, the growing increase in adaptation of Internet of Things (IoT) devices has also reached in supply chains. IoT provides powerful way to monitor various processes in the supply chain and develop automatic, reliable, transparent, and traceable systems. However, current IoT-based supply chain management systems fail to provide confidentiality and security. Furthermore, they rely on centralized server/client paradigm which results in security concerns such as modification, hacking and falsifying the confidential data. The single point of failure in the centralized environment disrupts the entire network. Therefore, for security, privacy, and reliability of the data, moving IoT based systems into the decentralized platform is the best decision. This paper proposes lightweight key agreement scheme for authentication of IoT devices in supply chain using blockchain technology. Blockchain provides greater information security, immutability, transparency, resilience, complete traceability and anonymity. It guarantees, trust and reliability between all the entities in supply chain using smart contracts. The proposed framework achieves confidentially and mutual authentication between the nodes in the supply chain. To ensure complete robustness of the scheme, it has been simulated using AVISPA and Scyther. Simulation results confirm resilience of the proposed scheme against attacks.