IDEAS home Printed from https://ideas.repec.org/a/gam/jmathe/v11y2023i17p3759-d1230884.html
   My bibliography  Save this article

Enhancing the Security and Privacy in the IoT Supply Chain Using Blockchain and Federated Learning with Trusted Execution Environment

Author

Listed:
  • Linkai Zhu

    (Information Technology School, Hebei University of Economics and Business, Shijiazhuang 050061, China
    These authors contributed equally to this work.)

  • Shanwen Hu

    (Faculty of Data Science, City University of Macau, Macau 999078, China
    These authors contributed equally to this work.)

  • Xiaolian Zhu

    (Information Technology School, Hebei University of Economics and Business, Shijiazhuang 050061, China)

  • Changpu Meng

    (iFLYTEK Co., Ltd., Hefei 230088, China
    School of Computing and Information Technology, Faculty of Engineering and Information Sciences, University of Wollongong, Wollongong 2522, Australia)

  • Maoyi Huang

    (Product Development, Ericsson, 41756 Gothenburg, Sweden)

Abstract

Federated learning has emerged as a promising technique for the Internet of Things (IoT) in various domains, including supply chain management. It enables IoT devices to collaboratively learn without exposing their raw data, ensuring data privacy. However, federated learning faces the threats of local data tampering and upload process attacks. This paper proposes an innovative framework that leverages Trusted Execution Environment (TEE) and blockchain technology to address the data security and privacy challenges in federated learning for IoT supply chain management. Our framework achieves the security of local data computation and the tampering resistance of data update uploads using TEE and the blockchain. We adopt Intel Software Guard Extensions (SGXs) as the specific implementation of TEE, which can guarantee the secure execution of local models on SGX-enabled processors. We also use consortium blockchain technology to build a verification network and consensus mechanism, ensuring the security and tamper resistance of the data upload and aggregation process. Finally, each cluster can obtain the aggregated parameters from the blockchain. To evaluate the performance of our proposed framework, we conducted several experiments with different numbers of participants and different datasets and validated the effectiveness of our scheme. We tested the final global model obtained from federated training on a test dataset and found that increasing both the number of iterations and the number of participants improves its accuracy. For instance, it reaches 94% accuracy with one participant and five iterations and 98.5% accuracy with ten participants and thirty iterations.

Suggested Citation

  • Linkai Zhu & Shanwen Hu & Xiaolian Zhu & Changpu Meng & Maoyi Huang, 2023. "Enhancing the Security and Privacy in the IoT Supply Chain Using Blockchain and Federated Learning with Trusted Execution Environment," Mathematics, MDPI, vol. 11(17), pages 1-19, September.
  • Handle: RePEc:gam:jmathe:v:11:y:2023:i:17:p:3759-:d:1230884
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/2227-7390/11/17/3759/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/2227-7390/11/17/3759/
    Download Restriction: no
    ---><---

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jmathe:v:11:y:2023:i:17:p:3759-:d:1230884. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.