Security analysis and proposal of new access control model in the Internet of Thing

Abstract

the Internet of Things (loT) represents a concept where the barriers between the real world and the cyber-world are progressively annihilated through the inclusion of everyday physical objects combined with an ability to provide smart services. These services are creating more opportunities but at the same time bringing new challenges in particular security and privacy concerns. To address this issue, an access control management system must be implemented. This work introduces a new access control framework for loT environment, precisely the Web of Things (WoT) approach, called "SmartOrBAC" Based on the OrBAC model. SmartOrBAC puts the context aware concern in a first position and deals with the constrained resources environment complexity. To achieve these goals, a list of detailed loT security requirements and needs is drawn up in order to establish the guidelines of the "SmartOrBAC". Then, The OrBAC model is analyzed and extended, regarding these requirements, to specify local a[' well as collaboration access control rules; on the other hand, these security policies are enforced by applying web services mechanisms mainly the RESTFUL approach.Finaly the most important works that emphasize access control in loT environment are discussed.

Fuzzy Logic with Expert Judgment to Implement an Adaptive Risk-Based Access Control Model for IoT

“…Using context awareness when building an access control model can enable interactions between users and IoT devices. Therefore, it is necessary to consider real-time contextual information while determining access decisions [29]. 5.…”

“…Delegation of authority: In some IoT situations, IoT devices need to operate on behalf of a user for a certain period. Therefore, an access model has to consider delegation of authority to enable usability and flexibility of IoT systems [29].…”

“…This is because they use predefined rules that give the same result in different situations. While dynamic access control models use access rules and real-time and contextual information to determine access decisions [7,29].…”

Dynamic Access Control Policy based on Blockchain and Machine Learning for the Internet of Things

“…SOA-based web services) are not systematically supported by IoT constrained nodes. To fix that, SmartOrBAC [28] and [29] objectives are to adapt OrBAC model to IoT situations. The major contribution of this proposition is the fact that it improves the notion of context (present in OrBAC) to respond to the IoT requirements.…”

“…IoT-OrBAC access model, like SmartOrBAC [28], is specially conceived for the IoT context and it is designed through an abstraction layers" perspective that makes use of a deep comprehension of the IoT paradigm as it is presented in the physical world. In the IoT that uses smart services as well as smart devices, contextual information is a key component in the decision making process, and only a real-time consideration of this information will reach smartness.…”