Blockchain-Based IoT-Cloud Authorization and Delegation

Tapas, Nachiket; Merlino, Giovanni; Longo, Francesco

doi:10.1109/smartcomp.2018.00038

Cited by 51 publications

(27 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The first category is to propose permission delegation as a module in access control. The researchers including Ouaddah et al [1], Tapas et al [25], Alcarria et al [26], Xu et al [27], etc. had permission delegation function in the access control model they proposed, but they did not carry out detailed analysis and research on permission delegation.…”

Section: Related Workmentioning

confidence: 99%

A Mechanism to Resolve the Unauthorized Access Vulnerability Caused by Permission Delegation in Blockchain-Based Access Control

Shi

Hou

2020

IEEE Access

View full text Add to dashboard Cite

Permission delegation in access control provides the subject with a second method to obtain object permissions in addition to permission granting. It is especially applicable when the owner and manager of the object are inconsistent. With the development of the Internet of Things, there are more and more scenes where object owners and managers are inconsistent, but the research on permission delegation in access control based on blockchain is not perfect. Therefore, once implemented in these blockchainbased access control algorithms, the permission delegation tends to have an unauthorized access. Based on the analysis of the causes for the unauthorized access vulnerability, this paper proposes a token-constrained permission delegation algorithm (TCPDA), which converts the access control policy corresponding to permissions into constraints for permission use, embeds the constraints in the permission token, and forms constraints on the transfer of tokens. Only subjects that meet the constraint conditions can receive tokens, thereby solving unauthorized access vulnerability caused by permission delegation. Since not all access control models can transform strategies into constraints and integrate them into blockchain tokens, this paper also proposes a permission delegation algorithm for decision-making entities to make desirable decisions. Finally, the security analysis shows that the two proposed schemes can overcome the unauthorized access vulnerability caused by permission delegation, and the algorithm performance is analyzed through experiments.

show abstract

Section: Related Workmentioning

confidence: 99%

A Mechanism to Resolve the Unauthorized Access Vulnerability Caused by Permission Delegation in Blockchain-Based Access Control

Shi

Hou

2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…The access control policies and the rights transfers are visible to the users for audit. Similarly, a BC based access control framework for IoT cloud has been presented in [20]. The proposed framework enables users to audit authorization decisions.…”

Section: Bc Based Authentication and Authorization Within A Singlementioning

confidence: 99%

xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things

et al. 2020

View full text Add to dashboard Cite

The innovation of ubiquitous and pervasive computing helps service-oriented organizations in the realization of a virtual coalition. The virtual coalition is a set of IoT domains i.e., smart homes and smart hospitals that are linked together through communication lines to share resources. Such virtual coalitions need secure cross-domain permission delegation and access control mechanisms. In existing approaches, permission delegation and access control are performed at the resource owner domain or by a single trusted third party. This single trusted third party may fail to work or compromise. Therefore, it will collapse either the whole system or the security of the system. We propose xDBAuth, a decentralized Blockchain (BC) based permission delegation and access control framework for the Internet of Things (IoT). Also, we proposed a hierarchy of local and global smart contracts that perform permission delegation and access control for both internal and external user/IoT devices. Additionally, the proposed framework preserves an external user's privacy by allowing them to get authentication in their parent IoT domains. During authentication, Proof-of-Authenticity/Integrity (PoAI) mechanism is used to find and retrieve user/IoT device platform hashes stored on local BC. After successful authentication, BC authorizes the user/IoT device based on the validation of delegation policies stored on BC. We implemented the proposed framework using Node.js. The results show that the proposed xDBAuth is a lightweight framework with less computational overhead. xDBAuth produces high throughput in an environment having a large number of concurrent requests.

show abstract

“…There are at least three major hurdles to blockchain deployment in a smart city setting which are prevalent in all implementations and have not been addressed effectively yet, viz. scalability, privacy and interoperability (Tapas, N. et al, 2018). Although a number of IT experts contemplate the use of blockchain in almost all ventures, they do not fully understand the key reasons for its use, especially in terms of data management.…”

Section: Open Issues In Current Blockchain Implementationsmentioning

confidence: 99%

A Systematic Review of Blockchain-based Services for Security Upgradation of a Smart City

Feroz¹

2020

EAI Endorsed Transactions on Smart Cities

View full text Add to dashboard Cite

The concept of smart city has gained popularity in recent years. The elementary concept refers to promoting the uninterrupted sharing of data and services within and across communities by the application of emerging technologies. Smart cities strive for cost reduction, optimal use of resources and the development of a more sustainable environment. Considerable advances in modern technologies such as IoT and wireless communication have enabled sharing of data between remote devices which are geared with open data, hence a smart city is susceptible to a number of security threats. It is important to identify these threats, analyze IoT data to improve privacy and security and identify the corresponding consequences. Blockchain has emerged as a promising solution to resolve these challenges. Blockchain is a peer-to-peer shared database technology that cannot be modified once a transaction is recorded and validated. This study explores the contribution of blockchain to smart cities in terms of decentralized security, immutability, transparency and privacy to provide intelligent, customized and context-aware services to smart city dwellers. A brief overview of this novel technology has been given along with its deployment in a smart city setting, the open issues discussed and prospective scope of blockchain application has been presented.

show abstract

Blockchain-Based IoT-Cloud Authorization and Delegation

Cited by 51 publications

References 7 publications

A Mechanism to Resolve the Unauthorized Access Vulnerability Caused by Permission Delegation in Blockchain-Based Access Control

A Mechanism to Resolve the Unauthorized Access Vulnerability Caused by Permission Delegation in Blockchain-Based Access Control

xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things

A Systematic Review of Blockchain-based Services for Security Upgradation of a Smart City

Contact Info

Product

Resources

About