Entitlement-Based Access Control for Smart Cities Using Blockchain
Open Access
Abstract
Smart cities use the Internet of Things (IoT) devices such as connected sensors, lights, and meters to collect and analyze data to improve infrastructure, public utilities, and services. However, the true potential of smart cities cannot be leveraged without addressing many security concerns. In particular, there is a significant challenge for provisioning a reliable access control solution to share IoT data among various users across organizations. We present a novel entitlement-based blockchain-enabled access control architecture that can be used for smart cities (and for any ap-plication domains that require large-scale IoT deployments). Our proposed entitlement-based access control model is flexible as it facilitates a resource owner to safely delegate access rights to any entities beyond the trust boundary of an organization. The detailed design and implementation on Ethereum blockchain along with a qualitative evaluation of the security and access control aspects of the proposed scheme are presented in the paper. The experimental results from private Ethereum test networks demonstrate that our proposal can be easily implemented with low latency. This validates that our proposal is applicable to use in the real world IoT environments.Keywords
This publication has 33 references indexed in Scilit:
- Blockchain Meets IoT: An Architecture for Scalable Access Management in IoTIEEE Internet of Things Journal, 2018
- Access Control Model for AWS Internet of Things2017
- Scalable Role-Based Data Disclosure Control for the Internet of Things2017
- Internet of Things security: A surveyJournal of Network and Computer Applications, 2017
- An Access Control Model for Resource Sharing Based on the Role-Based Access Control Intended for Multi-Domain Manufacturing Internet of ThingsIEEE Access, 2017
- Security and Privacy in Smart City Applications: Challenges and SolutionsIEEE Communications Magazine, 2017
- FairAccess: a new Blockchain‐based access control framework for the Internet of ThingsSecurity and Communication Networks, 2016
- Attribute-Based Access ControlComputer, 2015
- An Efficient Authentication and Access Control Scheme for Perception Layer of Internet of ThingsApplied Mathematics & Information Sciences, 2014
- A capability-based security approach to manage access control in the Internet of ThingsMathematical and Computer Modelling, 2013