Enhanced dynamic team access control for collaborative Internet of Things using context

Abstract

Summary The development of the Internet of Things (IoT) aims to overcome security issues especially in critical areas that require integrity, confidentiality and a high level of privacy of the data. Among security challenges, the access control model should be well defined and adapted to the characteristics and security requirements of IoT applications. The work presented here proposes big enforcement of security for dynamic team access control using context information in order to provide granular and secure authorizations with different access control levels related to collaborative IoT. The enhanced dynamic team access control (EDTMAC) model introduces a formal theoretical model which relies on the top of the role‐based access control model. The use of different context information with a global context information security policy and security rules raised the model strength against unauthorized access and avoided security breaches such as the leak of information by providing the least privileges for the users. The result of EDTMAC analysis shows that the model is well adapted to IoT dynamic nature and collaborative IoT activities for teams. Moreover, the model is flexible and scalable, user‐driven, reliable, and secure against unauthorized access requests. The developed model supports the well‐known least‐privilege principle and separation of duties for the team members. In addition, it allows easy management of the teams, provides fine‐grained access control authorizations and supports delegation.

Service-Based Hybrid Access Control Technology with Priority Level for the Internet of Vehicles under the Cloud Architecture

“…Our proposed S-RABAC (V) adds some extra features to enhance the flexibility of the access control model based on RBAC and ABAC. Compared with the access control models in papers 20,26,30,31,32,34,41, S-RABAC (V) can provide "Adjustable permissions" and "Permission reservation" as two extra features. It also has "hierarchies" and "priority mechanism" functions.…”

“…e RBAC access control model is an access control model that clusters attributes by roles. Djilali et al improved the RBAC model by proposing an enhanced dynamic team access control model that incorporates the concept of team in roles [20]. But, RBAC always has the problem of granularity of permissions, which is an important reason for the instability of RBAC security.…”

“…For example, when the police are investigating criminal vehicles in a certain area, they can achieve a higher level of authority by increasing the authority level for performing official duties in the area, to get the location information of vehicles of the same brand in the area. (2) When the bumps of the vehicle exceed normal conditions, the average bumps data of the road section can help judge whether the current vehicle is Various efficient authentication mechanisms Single, undiversified authentication result [20][21][22][23] Enhance the dynamic nature of RBAC, security, as far as possible to weaken the role of permissions encapsulation generated by the role of granularity issues ere is always the problem of static role permissions. e overall permission system cannot affect role permissions [24][25][26][27][28][29][30][31][32] e ABAC attribute mechanism is used to improve the granularity and the orderliness of permissions.…”

Systematic Review of Authentication and Authorization Advancements for the Internet of Things

“…Context : [ 11 , 14 , 18 , 22 , 23 , 29 , 32 , 35 , 36 , 37 , 39 , 41 , 42 , 44 , 48 , 49 , 53 , 57 , 64 , 69 , 70 , 74 , 76 , 80 , 90 , 92 , 96 , 97 , 98 , 99 , 100 , 101 , 102 , 103 , 104 , 105 , 106 , 107 , 108 , 109 , 110 , 111 , 112 , 113 , 114 , 115 ]…”

“…Services : [ 26 , 33 , 35 , 37 , 38 , 39 , 40 , 41 , 44 , 46 , 48 , 52 , 57 , 65 , 66 , 69 , 72 , 81 , 84 , 85 , 86 , 87 , 93 , 97 , 98 , 103 , 106 , 107 , 111 , 113 , 116 , 117 , 118 , 119 , 120 , 121 , 122 , 123 , 124 , 125 , 126 , 127 , 128 ]…”