Towards a self-adaptive access control middleware for the Internet of Things

Ouechtati, Hamdi; Azzouna, Nadia Ben; Saïd, Lamjed Ben

doi:10.1109/icoin.2018.8343178

Cited by 15 publications

(7 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Due to its flexibility, the ABAC model has been widely used for implementing access control for IoT [31][32][33] [34]. Indeed, relying on identities for authenticating a subject is complex in IoT scenarios where device identities are hard to maintain and assert.…”

Section: Role-based Access Control (Rbac) Groups Permissionsmentioning

confidence: 99%

Access control in the Internet of Things: a survey of existing approaches and open research questions

Bertin

Hussein

Sengul³

et al. 2019

Ann. Telecommun.

View full text Add to dashboard Cite

The Internet of Things operates in a personal-data-rich sector, which makes security and privacy an increasing concern for consumers. Access control is thus a vital issue to ensure trust in the IoT. Several access-control models are today available, each of them coming with various features, making them more or less suitable for the IoT. This article provides a comprehensive survey of these different models, focused both on access control models (e.g., DAC, MAC, RBAC, ABAC) and on access control architectures and protocols (e.g., SAML and XACML, OAuth 2.0, ACE, UMA, LMW2M, AllJoyn). The suitability of each model or framework for IoT is discussed. In conclusion, we provide future directions for research on access control for the IoT: scalability, heterogeneity, openness and flexibility, identity of objects, personal data handling, dynamic access control policies and usable security.Index Terms-Access Control (AC), Internet of Things (IoT),

show abstract

Section: Role-based Access Control (Rbac) Groups Permissionsmentioning

confidence: 99%

Access control in the Internet of Things: a survey of existing approaches and open research questions

Bertin

Hussein

Sengul³

et al. 2019

Ann. Telecommun.

View full text Add to dashboard Cite

show abstract

“…There have also been studies on IoT access control frameworks [5,22,23,24,25,26]. Sciancalepore et al [5] proposed an IoT access control framework that takes into consideration heterogeneous IoT platforms based on Decentralized Multi-Authority Ciphertext-Policy Attribute-Based Encryption (DMA-CP-ABE) and ABAC.…”

Section: Related Workmentioning

confidence: 99%

“…Andaloussi et al [24] implemented Distributed CapBAC (DCapBAC) using JSON-based capability tokens and analyzed the pros and cons of three feasible IoT scenarios (i.e., centralized approach, distributed approach, and hybrid approach). Two other studies [25,26] were based on the ABAC model. Neto et al [25] took advantage of a suite of cryptographic protocols to control access from unknown IoT devices with the consideration of the entire IoT device life-cycle (i.e., pre-deployment, ordering, deployment, functioning, and retirement).…”

Section: Related Workmentioning

confidence: 99%

“…The access control framework proposed in [25] provides seamless interoperability with strong authentication for a new guest device. Ouechtati et al [26] proposed an access control framework to integrate user behaviors and risk assessment in the ABAC model for enhanced access control in an IoT environment. The framework was also designed to be dynamically self-adapting to system failures, changes in resources and user needs.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

An Interoperable Access Control Framework for Diverse IoT Platforms Based on OAuth and Role

Kim

Cho

2019

Sensors

View full text Add to dashboard Cite

Due to the rapid development of Internet of Things (IoT), IoT platforms that can provide common functions for things are becoming increasingly important. However, access control frameworks in diverse IoT platforms have been developed for individual security goals, designs, and technologies. In particular, current OAuth-based access control frameworks that are widely used in IoT research have not been providing interoperability among IoT platforms even though sharing resources and services is a critical issue for IoT platforms. Therefore, we analyze the main requirements for an IoT access control framework to properly design our framework and propose an interoperable access control framework based on OAuth 2.0 and Role. Our approach describes a new extended authorization grant flow to issue an Interoperable Access Token (IAT) that has a global access scope across IoT platforms using multiple pairs of clients’ credentials. With the IAT and proposed framework, we can access client-specific domains in heterogeneous IoT platforms, then valuable resources (e.g., data and services) in the domains can be accessed by validating the roles, which will greatly simplify permission management. Furthermore, IAT supports a simple token management (e.g., token issuance, refreshing, and revocation) by managing only one token for diverse IoT platforms. In addition, we implement our interoperable access control framework on Mobius and FIWARE, which are promising open-source IoT platforms, and test an interoperability scenario to demonstrate our approach with the implementation. Furthermore, the proposed framework is compared with other IoT access control approaches based on the selected requirements in this paper.

show abstract

“…We are cooperating with the devices in a advent connected mode, with the technologies like Internet of Things. Through IoT the digital era is associated with the associated with the physical era [1]. The connectivity amidst the devices and people is boosting day by day.…”

Section: Introductionmentioning

confidence: 99%

A Novel Smart City Using IoT and Open Source Technology

Tejesh*,

Begum,

Mayuri

et al. 2019

IJEAT

View full text Add to dashboard Cite

Through IoT the cities are envisioned into smart cities. The IoT technology is deployed essentially in prevalence of all the applications and is playing a compelling role in day to day liveliness. The Smart cities integrated with the IoT technology can intensify to unravel the contention of the people. The considerable issues in the cities such as smart home automation, smart parking, smart agriculture, smart street lights and smart environment monitoring are addressed in this article. The smart city is refined with the open source technology. The information accumulated from peculiar devices and sensors is received to the Thing speak server and the representatives will visualize the data and engage in required action to take place. The prime aspiration of this article is to emphasize the obstacles in the smart cities. The features of the smart city are enhanced and give a provision to utilize IoT technology

show abstract

Towards a self-adaptive access control middleware for the Internet of Things

Cited by 15 publications

References 22 publications

Access control in the Internet of Things: a survey of existing approaches and open research questions

Access control in the Internet of Things: a survey of existing approaches and open research questions

An Interoperable Access Control Framework for Diverse IoT Platforms Based on OAuth and Role

A Novel Smart City Using IoT and Open Source Technology

Contact Info

Product

Resources

About