A secure firmware and software update model based on blockchains for Internet of Things devices using SBOM

The Internet of Things (IoT) industry is experiencing rapid growth with the advancement of network such as 5G and 6G and IoT technologies. The development of these IoT technologies is causing various security threats that violate availability and integrity. In particular, security threats between firmware(FW)/software(SW) updates of IoT devices can cause serious consequences, so it is essential to build a secure update model. In addition, software supply chain security threats have recently become a hot topic as software development cases utilizing open source software are increasing, so it is also important to consider them. In this paper, we propose a blockchain-based IoT FW/SW update model that includes Software Bill Of Materials(SBOM) to mitigate the software supply chain security threat between more secure IoT FW/SW update and IoT FW/SW development life cycle. Our proposed model can ensure integrity and availability through the characteristics of blockchain technology, and mitigate potential security threats that may occur during the software life cycle through SBOM.