TARU PUBLICATIONS
Journal of Discrete Mathematical Sciences and Cryptography cover

Journal of Discrete Mathematical Sciences and Cryptography

(Since 1998)
Hybrid ·Peer-reviewed·ISSN (Online): 2169-0065·ISSN (Print): 0972-0529

CiteScore 2025: 2.7 (Q1)

Powered by:Powered by

Monthly Journal: Publishes theoretical and applied research in all areas of Discrete Mathematical Sciences, Cryptography, Combinatorics, Elliptic Curves and Information Security.

Issues up to 2022 co-published with and available at:Taylor & Francis Online
submissions@tarupublications.com
Taru Online First Current IssueSpecial IssuesBrowse all Issues
Journal of Discrete Mathematical Sciences and Cryptography
Open Access Research Article

Comparative analysis of a novel smart contract-based hybrid access control model for blockchain-enabled secure IoT home automation systems

* , ,

* Corresponding author · click or hover a name for details

pp. 2875–2888Vol. 28Issue 7October 2025DOI: 10.47974/JDMSC-2558 Crossmark XML
Received:
08 Jul 2025
Published Online:
31 Oct 2025
Article type:
Research Article
Language:
EN
Article no.:
JDMSC-2558
Pages:
2875–2888

Abstract

The rapid growth of Internet of Things (IoT)-enabled smart home environments has amplified the need for robust, scalable, and context-aware access control mechanisms. Traditional Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models offer distinct advantages such as hierarchical simplicity and contextual granularity, respectively, yet exhibit critical limitations when deployed in isolation. To address these constraints, this study proposes and implements a discrete, hybrid RBAC–ABAC access control framework, engineered as a smart contract on the Binance Smart Chain (BSC), to ensure a secure, decentralized model for managing access to IoT resources. The framework leverages blockchain’s inherent strengths cryptographic integrity, immutable message digests, and tamper-resistant audit trails to reinforce data confidentiality and policy enforcement. Validated on a real-world testbed comprising ESP32-based IoT devices, a Raspberry Pi gateway, and a blockchain backend, the proposed system demonstrates enhanced resilience and trust. Quantitative evaluations benchmark the hybrid model against standalone RBAC and ABAC mechanisms across key metrics, including gas consumption, access latency, access decision accuracy, and scalability. The results indicate the hybrid model achieves superior accuracy (97.2%) and scalability (supporting 50 concurrent users and 30 devices), with moderate gas usage (15,000 gwei) and acceptable latency (1.8 seconds). Furthermore, the use of laser-secure transaction protocols and cryptographic primitives within the smart contract enhances the protection of access rights and resource interactions. This hybrid smart contract architecture not only bridges the gap between theoretical access control models and practical blockchain deployments but also sets a foundation for adaptive, secure, and decentralized policy enforcement in next-generation smart homes, particularly in resource-constrained environments.

Keywords

Hybrid access controlBlockchain-enabled smart homesSmart contractsIoT securityComparative performance evaluation

Subject Classifications

68M1468M2068M2568M3294A60

References

[1] S. Ameer, J. Benson, and R. Sandhu, “Hybrid approaches (ABAC and RBAC) toward secure access control in smart home IoT,” IEEE Trans. Dependable Secure Comput., vol. 20, no. 5, pp. 4032–4051 (2024), doi: 10.1109/TDSC.2022.3216297.
[2] J. J. Hathaliya and S. Tanwar, “Role and attribute based access control scheme for decentralized medicine supply chain,” J. Inf. Secur. Appl., vol. 85, 103851 (2024), doi: 10.1016/j.jisa.2024.103851. 
[3] X. Liu, “A privacy-preserving attribute-based access control system based on blockchain,” in Proc. Int. Conf. Algorithms, Microchips and Network Appl., Art. no. 121762B (2022), doi: 10.1117/12.2636428. 
[4] T. Ramírez-Gordillo, A. Maciá-Lillo, F. A. Pujol, N. García-D’Urso, J. Azorín-López, and H. Mora, “Decentralized identity management for IoT devices using IOTA blockchain technology,” Sensors, vol. 22, no. 19, 7453 (2022). 
[5] G. Wood, “Ethereum: A secure decentralized generalised transaction ledger,” White Paper (2014). [Online]. Available: https://ethereum.org/en/whitepaper/ 
[6] B. Bezawada, K. Haefner, and I. Ray, “Securing home IoT environments with attribute-based access control,” in Proc. ACM Workshop Attribute-Based Access Control (ABAC) (2018). 
[7] S. Almarri and A. Aljughaiman, “Blockchain technology for IoT security and trust: A comprehensive SLR,” Sustainability, vol. 16, no. 23, 10177 (2024), doi: 10.3390/su162310177. 
[8] S. Wadhwa, R. Singh, H. L. Pardeshi, and A. K. Maurya, “Energy-efficient consensus approach of blockchain for IoT with edge computing,” Sensors, vol. 22, no. 10, 3733 (2022), doi: 10.3390/s22103733. 
[9] S. I. Mohamed, M. Mostafa, J. Assaly, and A. S. Shalabi, “ABACS: Attribute-based access control using digital keys,” J. Umm Al-Qura Univ. Eng. Archit. (2024), doi: 10.21203/rs.3.rs-4630516/v1. (preprint) 
[10] Z. Guo, “Blockchain-enhanced smart contracts for formal verification of IoT access control,” Research Square (2024), doi: 10.21203/rs.3.rs-4630516/v1. 
[11] J. Qiu, D. Grace, G. Ding, Q. Wu, and Y. Zhang, “A survey on access control in the age of IoT,” IEEE Internet Things J., vol. 7, no. 6, pp. 4682–4696 (2020), doi: 10.1109/JIOT.2019.2953650. 
[12] S. D. Maigné, L. Apvrille, and M. L. Mazouz, “Reviewing access control solutions for the IoT,” ACM Comput. Surv., vol. 54, art. 138 (2021), doi: 10.1145/3463456. 
[13] A. Dorri, S. S. Kanhere, R. Jurdak, and P. Gauravaram, “LSB: A lightweight scalable blockchain for IoT,” arXiv:1712.02969 (2017), doi: 10.48550/arXiv.1712.02969. 
[14] S. Asaithambi, M. A. Mohamed, A. Kannan, and S. K. Pandey, “Energy-efficient and blockchain-integrated SDN for IIoT,” Sensors, vol. 22, no. 20, 7917 (2022), doi: 10.3390/s22207917. 
[15] N. Hans and J. Al-Muhtadi, “A blockchain-based access control framework for secure IoT data sharing,” IEEE Access, vol. 9, pp. 55255–55268 (2021), doi: 10.1109/ACCESS.2021.3073407. 
[16] NIST, “Blockchain for access control systems,” NIST IR 8403 (2022), doi: 10.6028/NIST.IR.8403. 
[17] M. Lone and S. E. A. Naaz, “Blockchain-enabled access control to prevent cyber attacks in IoT,” Front. Big Data, vol. 5, 1081770 (2022), doi: 10.3389/fdata.2022.1081770. 
[18] S. Pal, A. Dorri, and R. Jurdak, “Blockchain for IoT access control: Trends and research directions,” arXiv:2106.04808 (2021), doi: 10.48550/arXiv.2106.04808. 
[19] H. Saunier and D. Oberle, “Formal verification framework for blockchain-based IoT authentication,” Softw. Tools Technol. Transf., vol. 22, no. 3, pp. 273–290 (2020), doi: 10.1007/s11219-024-09691-3. 
[20] S. Chowdhury, A. Gupta, M. K. Panigrahi, and S. K. Saha, “Challenges in blockchain for IoT ecosystem threats and access control,” arXiv:2311.15290 (2023), doi: 10.48550/arXiv.2311.15290. 
[21] Y. Zhang, S. Kasahara, Y. Shen, X. Jiang, and J. Wan, “Smart contract-based access control for IoT,” IEEE Internet Things J., vol. 5, no. 2, pp. 1184–1195 (2018), doi: 10.1109/JIOT.2018.2847705. 
[22] A. Ouaddah, H. Mousannif, A. Abou Elkalam, and A. Ait Ouahman, “Access control in IoT: Challenges and opportunities,” Comput. Netw., vol. 104, pp. 32–48 (2016). 
[23] S. Sicari, A. Rizzardi, L. A. Grieco, and A. Coen-Porisini, “Security, privacy and trust in IoT,” Comput. Netw., vol. 76, pp. 146–164 (2015). 
[24] P. He, Y. Zhou, and X. Qin, “Energy-aware security mechanisms for IoT: A survey,” Future Internet, vol. 16, no. 4, 128 (2024), doi: 10.3390/fi16040128. 
[25] B. V. S. Babu and K. S. Babu, “A survey on blockchain for access control models,” in Proc. Int. Conf. Disruptive Technol. (2025), doi: 10.1109/ICDT63985.2025.10986707. 
[26] A. Sharma and S. Verma, “Blockchain-based security framework for IoT-enabled environments,” J. Interdiscip. Math., vol. 25, no. 4, pp. 701–712 (2022), doi: 10.1080/09720502.2022.2038954.
[27] P. Kumar, M. Singh, and A. Gupta, “Decentralized access authorization for smart devices using cryptographic primitives,” J. Interdiscip. Math., vol. 26, no. 6, pp. 1221–1233 (2023), doi: 10.1080/09720502.2023.2244519.
[28] S. Hussain and R. Kaur, “Mathematical modeling for privacy enhancement in cyber-physical systems,” J. Interdiscip. Math., vol. 27, no. 1, pp. 145–158 (2024), doi: 10.1080/09720502.2024.2411589.
[29] R. Malik and V. Mehra, “Analysis of smart home vulnerabilities using algebraic attack surfaces,” J. Interdiscip. Math., vol. 27, no. 2, pp. 233–247 (2024), doi: 10.1080/09720502.2024.2412582.
[30] M. Rahman and S. Alok, “Machine learning-driven policy adaptation for IoT security,” Taru Appl. Sci. Rev., vol. 5, no. 3, pp. 98–110 (2024).

Views: 213Downloads: 83Citations: 0