An OpenRBAC Semantic Model for Access Control in Vehicular Networks

Alsarra, Sultan; Yen, I-Ling; Huang, Yongtao; Bastani, Farokh B.; Thuraisingham, Bhavani

doi:10.1145/3322431.3326328

Cited by 2 publications

(3 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Comparing the result and referring to our brief literature overview in Table 1 , 26 , 27 , 28 ] consider at most three of our requirements. Although the requirements are mentioned briefly in each, no further information is available, either because the project was disbanded [ 26 ], or because there was no exemplary policy implementation to compare with.…”

Section: Discussionmentioning

confidence: 99%

“…In another work by Alsarra et al [ 28 ], they propose a theoretical access control model for vehicular networks based on RBAC. Their proposed OpenRBAC model sets itself apart from other models with its distinction between open and closed domains with automotive belonging to an open domain where roles within RBAC cannot be defined uniformly.…”

Section: Related Workmentioning

confidence: 99%

“…Furthermore, location-based access was also considered in [ 26 , 27 , 28 ], although none of them provided any reference policy to compare our work. For example, [ 28 ] only provides a formal definition of their model and [ 27 ] stores access logs, policies, and configuration files but does not provide access to them.…”

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

XACML for Mobility (XACML4M)—An Access Control Framework for Connected Vehicles

Ashutosh

Gerl

Wagner

et al. 2023

Sensors

View full text Add to dashboard Cite

The automotive industry is experiencing a transformation with the rapid integration of software-based systems inside vehicles, which are complex systems with multiple sensors. The use of vehicle sensor data has enabled vehicles to communicate with other entities in the connected vehicle ecosystem, such as the cloud, road infrastructure, other vehicles, pedestrians, and smart grids, using either cellular or wireless networks. This vehicle data are distributed, private, and vulnerable, which can compromise the safety and security of vehicles and their passengers. It is therefore necessary to design an access control mechanism around the vehicle data’s unique attributes and distributed nature. Since connected vehicles operate in a highly dynamic environment, it is important to consider context information such as location, time, and frequency when designing a fine-grained access control mechanism. This leads to our research question: How can Attribute-Based Access Control (ABAC) fulfill connected vehicle requirements of Signal Access Control (SAC), Time-Based Access Control (TBAC), Location-Based Access Control (LBAC), and Frequency-Based Access Control (FBAC)? To address the issue, we propose a data flow model based on Attribute-Based Access Control (ABAC) called eXtensible Access Control Markup Language for Mobility (XACML4M). XACML4M adds additional components to the standard eXtensible Access Control Markup Language (XACML) to satisfy the identified requirements of SAC, TBAC, LBAC, and FBAC in connected vehicles. Specifically, these are: Vehicle Data Environment (VDE) integrated with Policy Enforcement Point (PEP), Time Extensions, GeoLocation Provider, Polling Frequency Provider, and Access Log Service. We implement a prototype based on these four requirements on a Raspberry Pi 4 and present a proof-of-concept for a real-world use case. We then perform a functional evaluation based on the authorization policies to validate the XACML4M data flow model. Finally, we conclude that our proposed XACML4M data flow model can fulfill all four of our identified requirements for connected vehicles.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%