Implementation of a Device Adopting the OI (Operation Interruption) Protocol to Prevent Illegal Information Flow in the IoT

Nakamura, Shigenari; Enokido, Tomoya; Ogiela, Lidia; Takizawa, Makoto

doi:10.1007/978-3-030-70639-5_16

Cited by 2 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…15 The execution time of the authorization processes for GET and PUT operations to detect the illegal operations is measured. 24 Each capability token has a validity period. Even if data come to a subject issued a capability token to get the data, the data are generated before the capability token starts to be valid.…”

Section: Related Studiesmentioning

confidence: 99%

See 1 more Smart Citation

Implementation and evaluation of the information flow control for the Internet of Things

Nakamura

Enokido

Takizawa

2021

Concurrency and Computation

Self Cite

View full text Add to dashboard Cite

In the Internet of Things, the CBAC (capability-based access control) model is proposed to make devices securely accessed. Here, an owner of a device issues a capability token, that is, a set of access rights, to a subject. The subject is allowed to manipulate ROs (resource objects) in the device according to access rights in the capability token. In the CBAC model, there is a problem a subject sb i can obtain data of an RO r k m by accessing the data in an RO r l n after the data are brought to the RO r l n even if the subject sb i is not allowed to obtain the data from the RO r k m . Here, the data in the RO r k m illegally flow to the subject sb i . In our previous studies, the OI (operation interruption) protocol where illegal operations are interrupted is proposed and evaluated in the simulation.In this article, we implement the OI protocol and evaluate the authorization process of the OI protocol in terms of the execution time. In the evaluation, we make clear the features of the execution time of authorization processes for GET, PUT, POST, and DELETE operations in the OI protocol.

show abstract

Section: Related Studiesmentioning

confidence: 99%

“…In order to prevent the illegal information flow, the OI protocol where the operations implying illegal information flow are interrupted at devices is proposed 15 . The execution time of the authorization processes for GET and PUT operations to detect the illegal operations is measured 24 …”

Section: Related Studiesmentioning

confidence: 99%