On the Activity Privacy of Blockchain for IoT

Blockchain has received tremendous attention as a distributed platform to enhance the security of Internet of Things (IoT). The history of communications is stored in blockchain which introduces auditability. On the flip side, new privacy risks are introduced as the entire history of IoT device communication is exposed to participants. We study the likelihood of classifying IoT devices by analyzing the temporal patterns of their transactions, which to the best of our knowledge, is the first work of its kind. We apply machine learning algorithms on blockchain data to analyze the success rate of device classification. Our results demonstrate success rates over 90% in classifying devices. We propose three timestamp obfuscation methods, namely combining multiple packets into a single transaction, merging ledgers of multiple devices, and randomly delaying transactions, to reduce the success rate in classifying devices which reduce the classification success rates to as low as 24%.