The rapid development of low-power wide-area Internet of Things technology represented by the Long Range Wide Area Network(LoRaWAN)has helped the Internet of Things realize the eastablishment of communication scenarios with lower-cost,larger-capacity and longer-distance.However,in the environment of more dense IoT devices,the security issues,especially key management issues,are also more prominent.Emerging IoT scenarios such as 5G-IoT have higher requirements in terms of reliability,security,and latency,Traditional key management solutions cannot adapt to emerging IoT scenarios,and have problems such as high management energy consumption,single point of failure,and poor scalability.This paper fully considers the characteristics of the LoRaWAN network,the balance of key management scheme security and the energy consumption,and combined with the lightweight security features of the permissioned blockchain,proposes a permissioned blockchain-based LoRaWAN root key management scheme in the Internet of Things,which is simulated and verified by tools such as chirpstack.In addition,this paper also builds a key management platform based on Fabric.The main work of this paper is summarized as follows:Firstly,the security of the Internet of Things is outlined,and the traditional key management technology,machine learning-based security analysis technology and blockchain-based security assurance technology in the security of the IoT perception layer are summarized and introduced.Secondly,in the LoRaWAN scenario,considering the compatibility of the existing LoRaWAN protocol and the weak storage and no update of the key management mechanism in the existing LoRa technology,a permissioned blockchain-based root key management scheme is proposed.The proposed scheme is divided into a device registration stage,a join request stage and a key update stage,and is automated with smart contracts.In the device registration stage,the device adds a block containing information about the device to the blockchain through the device registration contract;in the join request stage,the gateway determines whether the join is successful or not by verifying the join request and the information recorded in the block;in the key In the update phase,a new root key is negotiated between the device and the joining server through the key update contract.From the simulation results,it can be seen that compared with the traditional key management scheme,this scheme has higher security and shorter network access time.Thirdly,a key management platform is built based on Fabric.The blockchain platform implements functional modules such as key management,data query,user management and performance testing,and provides a friendly web interface for administrators and ordinary users.In the key management module,the smart contracts involved in the key management scheme proposed in this paper are realized;in the data query module,the visual query of information about blocks and transactions is realized;in the user management module,the login and authority division of administrator users and ordinary users are realized;in the performance test module,the delay and throughput tests of the specific blockchain structure are realized. |