Delegated Authenticated Authorization for Constrained Environments

Gerdes, Stefanie; Bergmann, Olaf; Bormann, Carsten

doi:10.1109/icnp.2014.104

Cited by 11 publications

(10 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Architecture layer in Objectives, Models, Architecture and Mechanism reference model. Note that this architecture is compatible with the one proposed in this work in progress by the IETF .…”

Section: Fairaccess's Om‐am Reference Modelsupporting

confidence: 52%

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

Ouaddah

Elkalam

Ouahman

2016

Security Comm Networks

560

275

View full text Add to dashboard Cite

Security and privacy are huge challenges in Internet of Things (IoT) environments, but unfortunately, the harmonization of the IoT-related standards and protocols is hardly and slowly widespread. In this paper, we propose a new framework for access control in IoT based on the blockchain technology. Our first contribution consists in providing a reference model for our proposed framework within the Objectives, Models, Architecture and Mechanism specification in IoT. In addition, we introduce FairAccess as a fully decentralized pseudonymous and privacy preserving authorization management framework that enables users to own and control their data. To implement our model, we use and adapt the blockchain into a decentralized access control manager. Unlike financial bitcoin transactions, FairAccess introduces new types of transactions that are used to grant, get, delegate, and revoke access. As a proof of concept, we establish an initial implementation with a Raspberry PI device and local blockchain. Finally, we discuss some limitations and propose further opportunities.

show abstract

Section: Fairaccess's Om‐am Reference Modelsupporting

confidence: 52%

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

Ouaddah

Elkalam

Ouahman

2016

Security Comm Networks

560

275

View full text Add to dashboard Cite

show abstract

“…Specifically, in step 1 the client requests resource access from the AS. The AS generates a random PoP key which it sends to the client 1 together with its encryption with the secret 1 The communication link between the client and the AS is secured, hence the PoP key cannot be obtained through eavesdropping.…”

Section: A Model #1: Linking Authorization Grants To Payments and Rementioning

confidence: 99%

“…Authorization for constrained IoT devices (Things), with limited connectivity and computation power, requires support from an authorization server (AS) [1]; relevant use cases range from authorization for home door locks and health monitoring devices to smart container tracking and industrial actuator control [2]. Offloading authorization functionality from IoT devices to an AS also facilitates the collective management of authorization policies.…”

Section: Introductionmentioning

confidence: 99%

Interledger Smart Contracts for Decentralized Authorization to Constrained Things

Siris

Dimopoulos

Fotiou

et al. 2019

IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)

View full text Add to dashboard Cite

We present models that utilize smart contracts and interledger mechanisms to provide decentralized authorization for constrained IoT devices. The models involve different tradeoffs in terms of cost, delay, complexity, and privacy, while exploiting key advantages of smart contracts and multiple blockchains that communicate with interledger mechanisms. These include immutably recording hashes of authorization information and policies in smart contracts, resilience through the execution of smart contract code on all blockchain nodes, and cryptographically linking transactions and IoT events recorded on different blockchains using hash and time-lock mechanisms. The proposed models are evaluated on the public Ethereum testnets Rinkeby and Ropsten, in terms of execution cost (gas), delay, and reduction of data that needs to be sent to the constrained IoT devices.

show abstract

“…Authorization and authentication are required for the safety of WoT. Figure 12 shows an overall authentication architecture which is proposed by [65]. Exclusively for constrained environments another authentication and authorization architecture, is proposed by [66].…”

Section: ) Authentication and Authorizationmentioning

confidence: 99%

Web of Things: Security Challenges and Mechanisms

Sardar

Anees

2021

IEEE Access

View full text Add to dashboard Cite

Web of things (WoT) is an improved and most promising infrastructure of the internet of things (IoT) which permits the smart things to not only integrate to the internet but also to the web. It allows the users to share and create content as well as provide capabilities for data aggregation and analysis through a network to become part of the World Wide Web (W3). Despite these advances, it has shown several security challenges that need to be addressed for the successful deployment of WoT on a commercially variable and large scale. In this paper, authors have analyzed the most noticeable security challenges related to WoT such as unauthorized access, eavesdropping, denial of service attack, tempering, and impersonating, through an analysis of already published empirical studies. Further, we have discussed some of the available mechanisms to overcome security related issues while taking into account the network size and mobility. Authors have used Threat analysis and attack modeling methods to inform the users about defensive measures and to prevent security threats from taking advantage of system flaws Authors have provided the necessary insight into how security can be improved by using certain existing mechanisms and algorithms. The findings of the study revealed that security mechanisms to secure WoT are still immature and future research is required to resolve these challenges. INDEX TERMS Web of things, internet of things, security challenges, security mechanisms, World Wide Web, security analysis, attack modelling I.

show abstract

Delegated Authenticated Authorization for Constrained Environments

Cited by 11 publications

References 15 publications

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

FairAccess: a new Blockchain‐based access control framework for the Internet of Things

Interledger Smart Contracts for Decentralized Authorization to Constrained Things

Web of Things: Security Challenges and Mechanisms

Contact Info

Product

Resources

About