Applying an Unified Access Control for IoT-based Intelligent Agent Systems

Abstract

Abstract-The rise of the Internet of Things (IoT) paradigm has allowed the design and development of new services interconnecting heterogeneous devices. However, the complexity of these new systems hasn't been followed by the increase of intelligence and reasoning of the devices connected. On the other hand, intelligent agent systems have developed precisely these characteristics so the combination of both paradigms by modelling intelligent agents in IoT devices is a very promising approach that will enable a more powerful and smart IoT. The interconnection of agents through a Internet-based network implies addressing critical issues that affect all network communications, such as security, privacy and access control, specially given the sensitivity of the information exchanged by agents. In this paper, we propose the application of User-Managed Access (UMA) to provide an unified access control schema for an heterogeneous hybrid architecture of IoT devices and intelligent agents.

ControlChain: Blockchain as a Central Enabler for Access Control Authorizations in the IoT

“…Cabarkapa [53], Rivera et al [54] and Tschofenig et al [55] proposed the use of UMA in the IoT. Cabarkapa proposes to use an UMA-based architecture for controlling authorizations on a Social Web of Things (SWoT) [53].…”

“…After choosing UMA for their architecture, they provide a detailed description about all the phases involved in the architecture system interactions. Rivera et al applies UMA to provide a unified access control in a heterogeneous IoT environment composed by IoT low processing power devices (dummy devices) and intelligent agents (powerful devices) [54]. Finally, Tschofenig et al shows how OAuth can be integrated in the UMA and also presents a mapping of their architecture for several use cases [55].…”

A topic‐centric access control model for the publish/subscribe paradigm

“…Maler et al applied OAuth and UMA to the IoT environment for authorization management and access control. Rivera et al presented an access control scheme for IoT Multi‐Agent Systems based on UMA but do not provide a formal description. Varadharajan and Bansal proposed a scenario‐aware access control mechanism by combining OAuth with UMA.…”

“…Capability‐based access control can better support user‐driven needs and is suitable for a distributed environment, but it does not take context variables into consideration and does not support the dynamism and scalability of access permissions. (3) To accomplish user‐driven access control in the IoT sensing layer, many studies are based on user management access (UMA) and OAuth . However, a central authority is necessary for these mechanisms, which is a performance bottleneck for an IoT environment.…”

“…(3) To accomplish user-driven access control in the IoT sensing layer, many studies are based on user management access (UMA) and OAuth. [8][9][10] However, a central authority is necessary for these mechanisms, which is a performance bottleneck for an IoT environment. To resolve the issues described above, we propose a topic-centric access control model (TCAC) to address the problem of access authorization for the pub/sub paradigm in the IoT sensing layer.…”