A blockchain-based industrial automation system (100a, 100b, 100c, 100d) having access to a blockchain network, the blockchain-based industrial automation system comprising: at least one controller computer (108, 108a, 108b) including: at least one processor; and a memory having stored thereon instructions that, when executed by the at least one processor, cause the at least one controller computer to, after an update operation has been initiated by the blockchain network, wherein the update operation is an incoming command: download only a most recent block and an associated cryptographic certificate of the most recent block from the blockchain network, wherein the cryptographic certificate is configured to be used to authenticate the block with which it is associated; authenticate the most recent block using the cryptographic certificate; authenticate the incoming command, wherein to authenticate the incoming command, the at least one controller computer is configured to check if the incoming command (104, 104a-c) is included in a list of valid commands included in the downloaded most recent block; and generate a response (106, 106b) based on the authentication of the incoming command, wherein when the authentication is successful the response includes a control instruction for modifying a device state of one or more industrial devices based on a control instruction specified in the incoming command, and when the authentication is not successful the response includes preventing execution of the control instruction on the one or more industrial devices. at least one processor; and a memory having stored thereon instructions that, when executed by the at least one processor, cause the at least one controller computer to, after an update operation has been initiated by the blockchain network, wherein the update operation is an incoming command: download only a most recent block and an associated cryptographic certificate of the most recent block from the blockchain network, wherein the cryptographic certificate is configured to be used to authenticate the block with which it is associated; authenticate the most recent block using the cryptographic certificate; authenticate the incoming command, wherein to authenticate the incoming command, the at least one controller computer is configured to check if the incoming command (104, 104a-c) is included in a list of valid commands included in the downloaded most recent block; and generate a response (106, 106b) based on the authentication of the incoming command, wherein when the authentication is successful the response includes a control instruction for modifying a device state of one or more industrial devices based on a control instruction specified in the incoming command, and when the authentication is not successful the response includes preventing execution of the control instruction on the one or more industrial devices. download only a most recent block and an associated cryptographic certificate of the most recent block from the blockchain network, wherein the cryptographic certificate is configured to be used to authenticate the block with which it is associated; authenticate the most recent block using the cryptographic certificate; authenticate the incoming command, wherein to authenticate the incoming command, the at least one controller computer is configured to check if the incoming command (104, 104a-c) is included in a list of valid commands included in the downloaded most recent block; and generate a response (106, 106b) based on the authentication of the incoming command, wherein when the authentication is successful the response includes a control instruction for modifying a device state of one or more industrial devices based on a control instruction specified in the incoming command, and when the authentication is not successful the response includes preventing execution of the control instruction on the one or more industrial devices.