Hansung University Team Blocker

• Project Description
• Architecture
• Installation
• Technologies Used
• Main Features
  • Manufacturer
  • Device
• Expected Impact
• Achievements and Future Research
• Additional Info
• Team Blocker Developers

This project presents a decentralized software update platform that integrates blockchain and CP-ABE (Ciphertext-Policy Attribute-Based Encryption) technologies to ensure secure IoT device updates.
By recording update logs on the blockchain, the system ensures transparency and prevents tampering by manufacturers.
Smart contracts enable atomic software distribution and payment, ensuring both security and accountability.
Using CP-ABE, only devices whose attributes match the manufacturer’s update policy can decrypt and install updates, providing a fine-grained access control mechanism.
Additionally, IPFS is used for distributed storage of large update files, improving scalability and fault tolerance.
The platform guarantees device authentication, data integrity, auditability, and high availability, offering a secure and efficient environment for both manufacturers and users.

Please follow the installation order below:

1. Blockchain
2. Device
3. Manufacturer Backend
4. Device Frontend
5. Manufacturer Frontend

For detailed setup instructions, refer to the install.md file in each repository.

• React
• Vite
• TypeScript
• JavaScript
• Three.js (for visualization)
• Docker

• Python
• Flask
• Web3.py (Blockchain integration)
• Docker
• AWS
• Swagger (API Documentation)

• Solidity (Smart Contracts)
• Ganache (Local blockchain test environment)
• Ethereum Smart Contract
• Registry Service
• Web3.py
• Docker
• AWS

• CP-ABE (Attribute-Based Encryption)
• AES-256 (Symmetric Encryption)
• SHA3-256 (Integrity Hash)
• ECDSA (Digital Signature and Verification)

• IPFS (InterPlanetary File System)

Manufacturer Functions

• Encrypts update files using AES-256, then encrypts the symmetric key with CP-ABE to enforce access control policies.
• Generates SHA3-256 hash values for integrity verification.
• Uploads encrypted files to IPFS, obtaining the Content Identifier (CID).
• Registers update UID, IPFS hash (CID), and encrypted key on the smart contract.
• Signs the registered data using ECDSA private key and records it on the blockchain for tamper prevention.
• Handles software distribution and payment atomically via smart contracts.
• Registers deployed contract addresses to the registry contract for centralized referencing.
• Uses Three.js for visualizing blockchain/IPFS-based update registration processes.

Device Functions

• Detects new software update registration events on the blockchain.
• Downloads encrypted update files (Es) from IPFS.
• Computes SHA3-256 hash and compares it to the registered hash (hEbj) for integrity verification.
• Decrypts the CP-ABE-encrypted symmetric key to obtain the original key (kbj).
• Hashes the serialized kbj using SHA-256 to generate an AES-256 key.
• Decrypts the update file with the AES key to restore the original file (bj).
• Installs the verified update and records installation status on the blockchain.
• Visualizes the update installation process using Three.js.
• Demonstrates actual IoT device operations (e.g., move forward/backward) after successful installation.

1. Security Enhancement
   Prevents unauthorized access, forgery, and payment bypass during IoT software updates.
   Ensures device authentication and data integrity.

2. Trustworthiness
   CP-ABE ensures only devices matching the manufacturer’s policy can decrypt updates.
   Smart contracts reinforce transparency and reliability in distribution and payment.

3. Auditability
   All update records are immutably stored on the blockchain for transparent auditing.

4. Scalability & Availability
   IPFS-based distributed storage ensures scalability and reliability across large IoT ecosystems.

※ 2025년 한국자동차공학회 춘계학술대회 논문 투고
자동차 ECU 환경의 소프트웨어 업데이트를 위한 해시 함수 성능 평가 연구
속성 만료와 속성 레벨 키 갱신을 활용한 CP-ABE 기반 IoT 소프트웨어 업데이트의 보안성 강화 연구

※ 2025 한성대학교 컴퓨터공학부 캡스톤 디자인 우수상 (모바일소프트웨어트랙 부분)

※ SW산학협력프로젝트를 통해 현대자동차 연구원의 자문을 받아 SDV(Software-Defined Vehicle) 환경에 최적화된 음성 인식 기반 OTA 소프트웨어 업데이트 기법을 연구

박한빈(팀장)	공서연	김건우	박준희	박미정

• 박한빈: 2271432@hansung.ac.kr
• 공서연: 2271014@hansung.ac.kr
• 김건우: kermit7520k@gmail.com
• 박준희: marubug117@gmail.com
• 박미정: arsvita0116@gmail.com