CASA‐IoT: Scalable and context‐aware IoT access control supporting multiple users

Abstract

Summary The Internet of Things (IoT) supports many users and context‐aware applications controlling heterogeneous IoT devices. This differs from traditional networks, in which a single entity manages each device. Thus, new access control models must be created in order to support more responsive, scalable, secure, and autonomous management. This article presents an attribute‐based access control model, which applies conflict resolution and access delegation in a multiuser and multiapplication environment. With scalability in mind, we propose the caching of access permissions, as well as a split policy processing model in which the devices with enough computational power perform part of the processing. The proposed model was implemented as part of the ManIoT architecture an d evaluated in experiments on a testbed to demonstrate its efficiency. Results show that our model accelerates the processing of access management policies from 51% by up to 79%.

Cache de Atributos Oportunista: Melhorando a eficiência do ABAC com o uso de uma política de distribuição de identidades em redes multinível para névoas computacionais

“…No trabalho de [Castro et al 2019] são apresentadas modificac ¸ões necessárias em uma arquitetura IoT para agilizar a avaliac ¸ão de políticas de controle de acesso. Os autores propõem um sistema de controle de acesso híbrido, que avalia parcialmente as políticas nos dispositivos IoT, além de um mecanismo de cache de políticas.…”

An access control for IoT based on network community perception and social trust against Sybil attacks

“…Recommendation (R ij ) is the indirect trust of device i about device j, which means that device i builds its trust about device j taking into account the shared opinions from other communities devices about device j. We obtain R ij by Equation (7).…”

“…The data dissemination and sharing in IoT naturally demand an effective service of access control (AC), adaptive to changes in the context, and resilient to non-authorized network access. 7,8 However, a couple of issues inherent to IoT (e.g., heterogeneity, mobility, computing resource, and power) often inhibit the use of such services. 9 At the systemlevel, the maintenance of system operation availability relies on security methods 10 to analyze physical behavior and support the decision making, 11 as the threat of attacks is always a possibility, demanding measures to detect them and mitigate their effects.…”

Zero Trust Access Control with Context-Aware and Behavior-Based Continuous Authentication for Smart Homes

“…The Internet of Things (IoT) is an established paradigm, where many things are interconnected providing services to the people [Castro et al 2019]. As things are being connected, many systems assumed social characteristics intrinsic to human problems.…”