Enabling Identity for the IoT-as-a-Service Business Model

Abstract

The IoT-as-a-Service (IoTaaS) business model has already been identified by some people from both industry and academia, but has not been formally defined. IoTaaS offers IoT devices on demand, with considerable cost savings and resource optimization. In addition, it enables different applications to reuse the existing devices. However, this business model is associated with different technological challenges that need to be addressed, one of which is the identity problem. Focusing on this, self-sovereign identity (SSI) schemes have proven to provide better privacy and scalability than traditional identity paradigms, which is especially important in the IoT owing to its characteristics. In this paper, we formally analyze an IoTaaS business model, identifying and detailing its main technological challenges. In addition, we tackle the identity problem of this business model and propose an SSI-based identity management system, which is compliant with the existing standards from the W3C, and include a performance evaluation.

Decentralized Identity With Applications to Security and Privacy for the Internet of Things

“…De Diego et al [82] leverage SSI in order to create an IoT-as-a-service (IoTaaS) business model. In particular, the authors highlight the importance of IoTaaS as a model that offers IoT devices on demand, which results in lower costs, optimized use of resources and the ability to reuse an IoT device.…”

“…VCs can also be revoked and thus when a device should no longer have access to a resource or when it is compromised, the permission to use this resource can be easily denied. ZKPs and selective disclosure are used in several papers [7,79,82]. In these systems, device owners are able to select the attributes they will disclose to the Verifier, while no additional data is required for the verification process.…”