Towards Blockchain-Based Identity and Access Management for Internet of Things in Enterprises

Nuss, M. C.; Puchta, Alexander; Kunz, M.

doi:10.1007/978-3-319-98385-1_12

Cited by 35 publications

(33 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Other works highlighted the benefits from the union between Blockchain and IoT. In addition, the works of Kumar and Mallick and Panarello et al discussed the challenges of IoT networks and its integration with the Blockchain.…”

Section: Related Workmentioning

confidence: 99%

“…Panarello et al also constructed a systematic survey, where they categorized a wide range of works in application domains, usage domains and development level. Nuss et al discussed the benefits of Blockchain adoption in an Identity and Access Management (IAM) in an enterprise context. It also proposed an architecture similar to our previous work .…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

ControlChain: A new stage on the IoT access control authorization

Pinno

Grégio

Bona

2019

Concurrency and Computation

View full text Add to dashboard Cite

The IoT is changing the way we interact with the world. Very soon, almost all of our daily tasks will be made through self intelligent systems embedded in devices scattered all around us. Their mission is to turn our cities, transportation systems, buildings, homes, and bodies in smart environments. These environments will bring us more comfort, improve our performance, increase our profits, and take away time-consuming tasks. However, besides its great benefits, the IoT is also a big source of concerns, mainly because a good part of its devices will handle private and confidential information. Recently, cases of successful IoT invasions only worsen this scenario and show us that the today's adopted access control systems need to be replaced by more efficiently and secure ones. To overcome these access control problems, in this work, we present the ControlChain. The ControlChain is an access control authorization architecture that is heavily based on Blockchain technology. We also demonstrate the viability of the ControlChain through the E-ControlChain, a proof-of-concept developed to run over the Ethereum network.Our proposals follows the IoT tendency requirements and are user-transparent, user-friendly, fully decentralized, scalable, fault tolerant, and compatible with a wide range of today's access control models already used in the IoT. Finally, we also make a cost and a performance analysis of E-ControlChain, using a Raspberry Pi as an IoT device.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

ControlChain: A new stage on the IoT access control authorization

Pinno

Grégio

Bona

2019

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…The authors of [95], [96] and [97] highlight the benefits of joining Blockchain and IoT. In addition, [95] and [97] discuss the challenges of IoT networks and its integration with the Blockchain.…”

Section: Blockchain-based Access Controlmentioning

confidence: 99%

“…[97] also constructed a systematic survey, where they categorized a wide range of works in application domains, usage domains and development level. [96] discuss the benefits of Blockchain adoption in an Identity and Access Management (IAM) in an enterprise context. It also proposes an architecture similar to ours previous work [19].…”

Section: Blockchain-based Access Controlmentioning

confidence: 99%

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

Pinno

Grégio

Bona

2017

GLOBECOM 2017 - 2017 IEEE Global Communications Conference

138

View full text Add to dashboard Cite

“…The same online service can replace the corporate asset-tracking system for an individual user. Furthermore, there are proposals for logging Internet-of-Things devices to a blockchain [32,39], which could also be used for asset tracking.…”

Section: Asset Trackingmentioning

confidence: 99%

Misbinding Attacks on Secure Device Pairing and Bootstrapping

Sethi

Peltonen

Aura

2019

Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security

View full text Add to dashboard Cite

In identity misbinding attacks against authenticated key-exchange protocols, a legitimate but compromised participant manipulates the honest parties so that the victim becomes unknowingly associated with a third party. These attacks are well known, and resistance to misbinding is considered a critical requirement for security protocols on the Internet. In the context of device pairing, on the other hand, the attack has received little attention outside the trusted-computing community. This paper points out that most device pairing protocols are vulnerable to misbinding. Device pairing protocols are characterized by lack of a-priory information, such as identifiers and cryptographic roots of trust, about the other endpoint. Therefore, the devices in pairing protocols need to be identified by the user's physical access to them. As case studies for demonstrating the misbinding vulnerability, we use Bluetooth and a protocol that registers new IoT devices to authentication servers on wireless networks. We have implemented the attacks. We also show how the attacks can be found in formal models of the protocols with carefully formulated correspondence assertions. The formal analysis yields a new type of double misbinding attack. While pairing protocols have been extensively modelled and analyzed, misbinding seems to be an aspect that has not previously received sufficient attention. Finally, we discuss potential ways to mitigate the threat and its significance to security of pairing protocols. CCS CONCEPTS• Security and privacy → Systems security; Network security; Formal methods and theory of security; • Networks → Network protocol design.

show abstract

Towards Blockchain-Based Identity and Access Management for Internet of Things in Enterprises

Cited by 35 publications

References 30 publications

ControlChain: A new stage on the IoT access control authorization

ControlChain: A new stage on the IoT access control authorization

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

Misbinding Attacks on Secure Device Pairing and Bootstrapping

Contact Info

Product

Resources

About