Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources

Abstract

Internet growth has generated new types of services where the use of sensors and actuators is especially remarkable. These services compose what is known as the Internet of Things (IoT). One of the biggest current challenges is obtaining a safe and easy access control scheme for the data managed in these services. We propose integrating IoT devices in an access control system designed for Web-based services by modelling certain IoT communication elements as resources. This would allow us to obtain a unified access control scheme between heterogeneous devices (IoT devices, Internet-based services, etc.). To achieve this, we have analysed the most relevant communication protocols for these kinds of environments and then we have proposed a methodology which allows the modelling of communication actions as resources. Then, we can protect these resources using access control mechanisms. The validation of our proposal has been carried out by selecting a communication protocol based on message exchange, specifically Message Queuing Telemetry Transport (MQTT). As an access control scheme, we have selected User-Managed Access (UMA), an existing Open Authorization (OAuth) 2.0 profile originally developed for the protection of Internet services. We have performed tests focused on validating the proposed solution in terms of the correctness of the access control system. Finally, we have evaluated the energy consumption overhead when using our proposal.

Dynamic User Preference Parameters Selection and Energy Consumption Optimization for Smart Homes Using Deep Extreme Learning Machine and Bat Algorithm

“…To develop the Alpha Beta filter, we suppose a system sufficiently approximated by a model having two-interval states. First, we do initialization, as shown in (1)(2). (2) We have used (3) to update the position, and (4) to read the sensor data.…”

“…The internet of things (IoT) has changed the living styles of people. The ordinary cities are being converted to smart cities, with facilities like automated parking, smart lights, smart cars, automated trains, and so forth [1,2]. In smart homes, there are security issues regarding the confidentiality and misuse of technology [3].…”

Breaking Down the Compatibility Problem in Smart Homes: A Dynamically Updatable Gateway Platform

“…Also, it is easy to create additional services or applications based on the virtual device approach. For example, a security feature such as access control [39] can be built by adding user permissions information into virtual devices. Meanwhile, an intrusion detection service can be developed by combining time-series data of virtual devices and machine learning techniques [40].…”

Deployment of IoT Edge and Fog Computing Technologies to Develop Smart Building Services

“…Some of the MQTT protocol's main features are shown in different works [43][44][45][46][47][48] which makes it especially suitable for this research. Some of them are:…”