Protocol to efficiently prevent illegal flow of objects in P2P type of publish/subscribe (PS) systems

Concurrency and Computation

2021

Self Cite

In the Internet of Things, the CBAC (capability-based access control) model is proposed to make devices securely accessed. Here, an owner of a device issues a capability token, that is, a set of access rights, to a subject. The subject is allowed to manipulate ROs (resource objects) in the device according to access rights in the capability token. In the CBAC model, there is a problem a subject sb i can obtain data of an RO r k m by accessing the data in an RO r l n after the data are brought to the RO r l n even if the subject sb i is not allowed to obtain the data from the RO r k m . Here, the data in the RO r k m illegally flow to the subject sb i . In our previous studies, the OI (operation interruption) protocol where illegal operations are interrupted is proposed and evaluated in the simulation.In this article, we implement the OI protocol and evaluate the authorization process of the OI protocol in terms of the execution time. In the evaluation, we make clear the features of the execution time of authorization processes for GET, PUT, POST, and DELETE operations in the OI protocol.

show abstract

Section: Related Studiesmentioning

confidence: 99%

“…S ≠

ϕ

. In order to prevent objects on topics which a target peer is not allowed to subscribe from being delivered to the peer, types of protocols are proposed 6 …”

Section: Related Studiesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Implementation and evaluation of the information flow control for the Internet of Things

Concurrency and Computation

2021

Self Cite

show abstract

Time‐based legality of information flow in the capability‐based access control model for the Internet of Things

Concurrency and Computation

2020

Self Cite

The Internet of Things is composed of sensor and actuator devices. Devices have to be securely accessed by subjects. In this article, we take the capability-based access control (CBAC) model where a subject is issued a capability token to manipulate a device by a device owner. In the CBAC model, information which a subject is not allowed to get may illegally flow to the subject. Hence, the operation interruption (OI) protocol to prevent illegal information flow is proposed in our previous studies. However, although a subject is not allowed to get data at time 𝜏, the subject can get the data later than the time 𝜏. Here, the data come to the subject later than expected by the subject to get the data, that is, the information flows late to the subject. In this article, we newly propose a time-based OI (TBOI) protocol to prevent not only illegal information flow but also late information flow. Here, operations implying illegal or late information flow are interrupted, that is, not performed at devices. In the evaluation, we show not only illegal information flow but also late information flow are prevented in the TBOI protocol differently from the OI protocol.

show abstract

Evaluation of a TBOI (Time-Based Operation Interruption) Protocol to Prevent Late Information Flow in the IoT

Advances in Internet, Data and Web Technologies

2020