Secure and fine-grained access control on e-healthcare records in mobile cloud computing

Liu, Yi; Zhang, Yinghui; Ling, Jie; Liu, Zhusong

doi:10.1016/j.future.2016.12.027

Cited by 110 publications

(68 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Fine-grained. A lot of works already saw the potential of having an access control with fine-grained control [40,13,41,42]. As the IoT has a wide variety of information, the fine adjustments in the access control is very welcome in complex environments that requires it.…”

Section: Iot Access Control Requirementsmentioning

confidence: 99%

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

Pinno

Grégio

Bona

2017

GLOBECOM 2017 - 2017 IEEE Global Communications Conference

130

View full text Add to dashboard Cite

Section: Iot Access Control Requirementsmentioning

confidence: 99%

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

Pinno

Grégio

Bona

2017

GLOBECOM 2017 - 2017 IEEE Global Communications Conference

130

View full text Add to dashboard Cite

“…Fine‐grained. A lot of works already saw the potential of having an access control with fine‐grained control . As the IoT has a wide variety of information, the fine adjustments in the access control is very welcome in complex environments that requires it.…”

Section: Introductionmentioning

confidence: 99%

ControlChain: A new stage on the IoT access control authorization

Pinno

Grégio

Bona

2019

Concurrency and Computation

View full text Add to dashboard Cite

The IoT is changing the way we interact with the world. Very soon, almost all of our daily tasks will be made through self intelligent systems embedded in devices scattered all around us. Their mission is to turn our cities, transportation systems, buildings, homes, and bodies in smart environments. These environments will bring us more comfort, improve our performance, increase our profits, and take away time-consuming tasks. However, besides its great benefits, the IoT is also a big source of concerns, mainly because a good part of its devices will handle private and confidential information. Recently, cases of successful IoT invasions only worsen this scenario and show us that the today's adopted access control systems need to be replaced by more efficiently and secure ones. To overcome these access control problems, in this work, we present the ControlChain. The ControlChain is an access control authorization architecture that is heavily based on Blockchain technology. We also demonstrate the viability of the ControlChain through the E-ControlChain, a proof-of-concept developed to run over the Ethereum network.Our proposals follows the IoT tendency requirements and are user-transparent, user-friendly, fully decentralized, scalable, fault tolerant, and compatible with a wide range of today's access control models already used in the IoT. Finally, we also make a cost and a performance analysis of E-ControlChain, using a Raspberry Pi as an IoT device.

show abstract

“…RBAC can be used to manage the scale of the number of users by employing role-relationships, but typically needs a priori identification of the authorised users and is infliexble in the face of dynamic user assignment. Capabilities can be used to generate unique permissions for each of the users and can reduce the centralisation of the system but capabilities come with well-known management issues [16]. Thus, there is a need for alternative approaches to access control for IoT-enabled smart healthcare systems.…”

Section: Background and Problem Statementmentioning

confidence: 99%

Fine-Grained Access Control for Smart Healthcare Systems in the Internet of Things

Pal¹,

Hitchens²,

Varadharajan³

et al. 2018

EAI Endorsed Transactions on Industrial Networks and Intelligen

View full text Add to dashboard Cite

There has been tremendous growth in the application of the Internet of Things (IoT) in our daily lives. Yet with this growth has come numerous security concerns and privacy challenges for both the users and the systems. Smart devices have many uses in a healthcare system, e.g. collecting and reporting patient data and controlling the administration of treatment. In this paper, we address the specific security issue of access control for smart healthcare systems and the protection of smart things from unauthorised access in such large scale systems. Commonly used access control approaches e.g. Role-Based Access Control (RBAC), AttributeBased Access Control (ABAC) and Capability-Based Access Control (CapBAC) do not, in isolation, provide a complete solution for securing access to IoT-enabled smart healthcare devices. They may, for example, require an overly-centralised solution or an unmanageably large policy base. We propose a novel access control architecture which improves policy management by reducing the required number of authentication policies in a large-scale healthcare system while providing fine-grained access control. The devised access control model employs attributes, roles and capabilities. We apply attributes for role membership assignment and in permission evaluation. Membership of roles grants capabilities. The capabilities which are issued may be parameterised based on attributes of the user and are then used to access specific services provided by things. We also provide a formal specification of the model and a description of its implementation and demonstrate its application through different use-case scenarios. The evaluation results of core functionality of our architecture are provided with the practical testbed experiments.

show abstract

Secure and fine-grained access control on e-healthcare records in mobile cloud computing

Cited by 110 publications

References 15 publications

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

ControlChain: A new stage on the IoT access control authorization

Fine-Grained Access Control for Smart Healthcare Systems in the Internet of Things

Contact Info

Product

Resources

About