CASA‐IoT: Scalable and context‐aware IoT access control supporting multiple users
- 30 August 2019
- journal article
- research article
- Published by Wiley in International Journal of Network Management
- Vol. 29 (5)
Abstract
Summary: The Internet of Things (IoT) supports many users and context‐aware applications controlling heterogeneous IoT devices. This differs from traditional networks, in which a single entity manages each device. Thus, new access control models must be created in order to support more responsive, scalable, secure, and autonomous management. This article presents an attribute‐based access control model, which applies conflict resolution and access delegation in a multiuser and multiapplication environment. With scalability in mind, we propose the caching of access permissions, as well as a split policy processing model in which the devices with enough computational power perform part of the processing. The proposed model was implemented as part of the ManIoT architecture an d evaluated in experiments on a testbed to demonstrate its efficiency. Results show that our model accelerates the processing of access management policies from 51% by up to 79%.Keywords
Funding Information
- Conselho Nacional de Desenvolvimento Científico e Tecnológico
- Coordenação de Aperfeiçoamento de Pessoal de Nível Superior
- Fundação de Amparo à Pesquisa do Estado de Minas Gerais
This publication has 21 references indexed in Scilit:
- An Access Control Model for Resource Sharing Based on the Role-Based Access Control Intended for Multi-Domain Manufacturing Internet of ThingsIEEE Access, 2017
- A Community-Driven Access Control Approach in Distributed IoT EnvironmentsIEEE Communications Magazine, 2017
- Using REST based protocol to enable ABAC within IoT systems2016
- Attributes Enhanced Role-Based Access Control Model2015
- TACIoT: multidimensional trust-aware access control system for the Internet of ThingsSoft Computing, 2015
- Internet of Things (IoT): A vision, architectural elements, and future directionsFuture Generation Computer Systems, 2013
- T-ABAC: An attribute-based access control model for real-time availability in highly dynamic systems2013
- IoT Access Control Issues: A Capability Based Approach2012
- Stuxnet: Dissecting a Cyberwarfare WeaponIEEE Security & Privacy, 2011
- The Internet of Things: A surveyComputer Networks, 2010