A Directed Acyclic Graph Architecture for Decentralised Transaction Processing in IoT Systems: Design and Prototype Evaluation
Abstract
This article addresses the security of information resources in Internet of Things (IoT) systems, where devices have limited computing capacity, network configurations change frequently, and security standards vary. It proposes a directed acyclic graph (DAG) architecture for decentralised transaction processing and confirmation. The architecture distributes processing across nodes and allows new transactions to reference earlier ones as part of the confirmation process. The design aims to reduce reliance on a single coordinator and improve load distribution, energy efficiency, and confirmation throughput.
The architecture includes graph management, persistent data storage, a REST API, and components for network visualisation and simulation. A prototype implemented using Python, FastAPI, and SQLite demonstrated device registration, the creation of transactions that reference earlier transactions, and visualisation of the resulting graph. These results establish the functional feasibility of the proposed workflow and provide a basis for evaluating scalability as the number of devices grows, energy consumption, and resilience to individual node compromise.
Keywords — Internet of Things, directed acyclic graph, decentralised transaction processing, transaction confirmation, information resource security, software prototype.
Downloads
References
Ahmed I, Turki M, Baklouti M, Dammak B. SB-WRW: Balancing fairness and security in IoT-adapted tip selection for the tangle. Internet of Things 2025,34:101819. https://doi.org/10.1016/j.iot.2025.101819
Akapyev VL, Savotchenko SE, Zhukova NA. The development of the Internet of Things and the problems of ensuring its security. Matters Russ Int Law 2024,14:257-67.
Akli A, Chougdali K. Towards tamper-proof trust evaluation of Internet of Things nodes leveraging IOTA ledger. Sensors 2025,25:4697. https://doi.org/10.3390/s25154697
Alsboui T, Al-Aqrabi H, Manasrah A, Artemi M. Toward a secure and scalable IoT: A survey of IOTA-based distributed ledger technologies. Sustain Comput Inform Syst 2025,48:101225. https://doi.org/10.1016/j.suscom.2025.101225
Arunodhai V, Susan LP, Kannimoola JM. EdgeGuard: Real-time rule-based spam detection for IOTA tangle on edge devices. In: 2024 5th International Conference for Emerging Technology (INCET). New York: IEEE; 2024a. p. 1-9. https://doi.org/10.1109/incet61516.2024.10593345
Arunodhai V, Susan LP, Kannimoola JM. EdgeShield: Hybrid real-time attack detection in IOTA tangle via edge devices. In: 2024 15th International Conference on Computing Communication and Networking Technologies (ICCCNT). New York: IEEE; 2024b. p. 1-11. https://doi.org/10.1109/icccnt61001.2024.10724609
Baumgartner A, Akkari N, Barua S, Bauschert T. Secure transmission of immutable data for low-power, long-range wireless IoT services. In: 2024 IEEE International Conference on Blockchain and Cryptocurrency (ICBC). New York: IEEE; 2024. p. 1-6. https://doi.org/10.1109/ICBC59979.2024.10634434
Cherkesova LV, Savelyev VA, Revyakina EA, Polulyakh AR, Sementsov MA. Mechanism for data
Gazizov et al. A Method for Applying a Directed Acyclic Graph to Ensure Resource Security
218
recovery as a result of data corruption, infection and/or unauthorized modification. Herald Dagestan State Tech Univ Tech Sci 2025,52:134-46. https://doi.org/10.21822/2073-6185-2025-52-1-134-146
Federal Agency for Technical Regulation and Metrology. GOST R 56939-2024 Information Protection. Secure Software Development. General Requirements. Moscow: FGBU "RST"; 2024.
International Organization for Standardization (ISO), International Electrotechnical Commission (IEC). ISO/IEC 27001 Information security, cybersecurity and privacy protection — Information security management systems — Requirements. 2022a. https://www.iso.org/standard/27001
International Organization for Standardization (ISO), International Electrotechnical Commission (IEC). ISO/IEC 27002 Information security, cybersecurity and privacy protection — Information security controls. 2022b. https://www.iso.org/standard/75652.html
Isaeva OS, Kulyasov NV, Isaev SV. Infrastructure for collecting data and simulating security threats in the internet of things network. Sib Aerospace J 2025,26:8-20. https://doi.org/10.31772/2712-8970-2025-26-1-8-20
Kazaryan MM, Cherkesova LV, Reshetnikova IV, Revyakina EA. Analysis of the possibilities of conducting attacks on the functions of transferring control of the operating system console using active reconnaissance methods. H&ES Res 2024,16:18-29. https://doi.org/10.36724/2409-5419-2024-16-3-18-29
Kiba MR, Zaitseva EV, Kochneva AA, Timokhin MYu. Mathematical model of information distribution in a professional network. Herald Comput Inform Technol 2025,8:27-32. https://doi.org/10.14489/vkit.2025.08.pp.027-032
Kodatsky NM, Revyakina EA, Gazizov AR. System analysis and information processing to solve the problem of detecting breakdowns of computer information storage. Herald Dagestan State Tech Univ Tech Sci 2024,51:87-98. https://doi.org/10.21822/2073-6185-2024-51-4-87-98
Pankov KN, Einman AD. Issledovaniye tekhnologii sistemy raspredelennogo reyestra v sisteme promyshlennogo interneta veshchey s tochki zreniya informatsionnoy bezopasnosti [Research of distributed registry system technology in the industrial Internet of Things system from the point of view of information security]. Sistemy sinkhronizatsii, formirovaniya i obrabotki signalov 2022,13:33-40.
Shamsutdinov RR, Vasiliev VI, Vulfin AM. Intelligent system for monitoring information security of the industrial Internet of Things using artificial immune systems mechanisms. Syst Eng Inform Technol 2024,6:14-31. https://doi.org/10.54708/2658-5014-SIIT-2024-no4-p14
Smirnov NN, Kuznetsov AS. Information support of data processing operations of Internet of things devices in automated information eco-monitoring system. News Kabardino-Balkar Sci Center RAS 2024;26:92-102.
State Duma of the Federal Assembly of the Russian Federation. Federal Law of July 27, 2006, No. 149-FZ "On information, information technologies, and information protection". 2006. http://www.kremlin.ru/acts/bank/24157?ysclid=mnedbgrv6n706840466
State Duma of the Federal Assembly of the Russian Federation. Federal Law of July 26, 2017, No. 187-FZ "On the security of critical information infrastructure of the Russian Federation". Sobranie Zakonodatel’stva Rossiiskoi Federatsii [SZ RF] [Collection of Legislation of the RF] 31.07.2017, No. 31 (Part I), Item 4736.
Voulgaridis K, Karampatzakis D, Sarigiannidis P, Lagkas T. ABS-TD3: Efficient IoT data submission in DAG-based DLTs for digital circular economy. Internet of Things 2025,34:101814. https://doi.org/10.1016/j.iot.2025.101814
Wei Q, Dang S, Ge Z, Li X, Zhang Z. Performance analysis of direct acyclic graph-based ledgers in low-to-high load regime. IEEE Trans Mob Comput 2025,24:12441-55. https://doi.org/10.1109/TMC.2025.3586668
Yang H, Lee S, Kim S. A tip for IOTA privacy: IOTA light node deanonymization via tip selection. In: 2024 IEEE International Conference on Blockchain and Cryptocurrency (ICBC). New York: IEEE; 2024. p. 494-502. https://doi.org/10.1109/ICBC59979.2024.10634353