Access Control Model for IoT Environment Including Automated Configuration

Yokogi, Kenta; Kitagawa, Naoya; Yamai, Nariyoshi

doi:10.1109/compsac.2018.10306

Cited by 4 publications

(4 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…If the attribute information is correctly granted, the ABAC model can handle the increasing number of access control entities and changes in the attribute information. By performing the automated configuration of the IoT devices based on the ABAC model, it is possible to efficiently manage access control in largescale IoT environments [6].…”

Section: Related Work 21 Access Controlmentioning

confidence: 99%

Section: Access Policy Configurationmentioning

confidence: 99%

“…( 5 ) The service sends the decrypted DEK to the proxy. ( 6 ) The proxy decrypts the encrypted data using the received DEK. ( 7 ) The proxy sends the decrypted data to the service as the DEK response in step 5.…”

Section: Data Download and Decryptionmentioning

confidence: 99%

“…A query language or policy description language such as extensible access control markup language[19], can be used to describe the access policy. The detailed approach of automated registration of clients and services and the access control based on the attribute information in the IoT environment have been studied in our previous work[6].3.2.4 Data Encryption and UploadFigure4illustrates the data encryption and upload process. The data encryption and upload process has the following steps:( 1 ) The client uploads the data to the proxy.…”

mentioning

confidence: 99%

See 3 more Smart Citations

IoT-oriented Secure Data Sharing Using Public Cloud

Yokogi

Kitagawa

Yamai

2021

Journal of Information Processing

Self Cite

View full text Add to dashboard Cite

The number of IoT devices is continuously increasing. Secure data sharing governed by appropriate access control is required to safely utilize data generated by IoT devices. Storing data in a public cloud is suitable for deploying services with distributed data sharing on a large scale. However, this raises security concerns since even when the data are encrypted, an adverse third party may access them if a decryption key is stored within the same environment (key escrow problem). Conventional methods are not supposed to be used in the IoT environment or have issues with security, key distribution, and changing access authority. We propose a novel approach to securely share the data generated by IoT devices within a public cloud. Our method enables 1) addressing the key escrow problem; 2) providing forward secrecy; 3) ensuring indistinguishability under Adaptive Chosen Ciphertext Attack (safety equivalent to IND-CCA2); 4) changing access authority easily; and 5) saving computational resources of IoT devices. We implemented this method and evaluated its performance. The experimental results show that it has comparable or better performance compared with conventional methods. Furthermore, we confirm that resource consumption in our method is more practical even in the large-scale IoT environment.

show abstract

Section: Related Work 21 Access Controlmentioning

confidence: 99%

Section: Access Policy Configurationmentioning

confidence: 99%

Section: Data Download and Decryptionmentioning

confidence: 99%

mentioning

confidence: 99%

See 2 more Smart Citations