Identity management framework for cloud based internet of things

Horrow, Susmita; Sardana, Anjali

doi:10.1145/2490428.2490456

Cited by 59 publications

(27 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Identity management framework for cloud-based internet of things: Horrow et al [93] propose an IAM framework based on the isolated IAM model. The authors assume a scenario where human users and IoT devices are capable to indirectly communicate with each other through a service hosted at the cloud.…”

Section: Isolated Iamsmentioning

confidence: 99%

Survey on Identity and Access Management for Internet of Things

Cremonezi

Vieira

Nacif

et al. 2020

Preprint

View full text Add to dashboard Cite

The Internet of Things (IoT) encompasses a large number of connected devices, generating and sharing diﬀerent types of data among themselves. These data enable the creation of society-changing applications, such as health monitoring and autonomous vehicles. Under this context, protecting the access of these connected devices and their data is critical to IoT applications’ success, since a single data breach can incur into a cascade eﬀect, which leads to devastating consequences. Identity and Access Management (IAM) systems provide mechanisms to identify individuals at the network and determine their access privileges, thus avoiding inappropriate access. However, the current IAMs system struggles to provide the scale or manage the complex relationships that IoT brings. In this work, we present a comprehensive state-of-the-art survey of IAMs and the main concepts and challenges when applied to IoT. First, we overview the IoT technology, giving its essential characteristics and communication architectures and its main applications. Then, we present IAMs state-of-the-art and the main concepts, existing architectures, and challenges. Finally, we focus on current IAMs that aims to tackle the IoT complexity, along with an in-depth analysis of their proposals and future directions in the ﬁeld.

show abstract

Section: Isolated Iamsmentioning

confidence: 99%

Survey on Identity and Access Management for Internet of Things

Cremonezi

Vieira

Nacif

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

“…An IoT device can identify itself using its identity or its specific features [24]. Cloud-based IoT solutions like that introduced in [25] exploit the former method presenting a framework for identity management with basic functions such as Registration of sensors and receiver device to the cloud, Identification of hosted services, and Authentication of sensors and receiver device.…”

Section: Related Workmentioning

confidence: 99%

MeDI: Measurement-based Device Identification Framework for Internet of Things

Yousefnezhad

Madhikermi

Främling

2018

2018 IEEE 16th International Conference on Industrial Informatics (INDIN)

View full text Add to dashboard Cite

IoT systems may provide information from different sensors that may reveal potentially confidential data, such as a person's presence or not. The primary question to address is how we can identify the sensors and other devices in a reliable way before receiving data from them and using or sharing it. In other words, we need to verify the identity of sensors and devices. A malicious device could claim that it is the legitimate sensor and trigger security problems. For instance, it might send false data about the environment, harmfully affecting the outputs and behavior of the system. For this purpose, using only primary identity values such as IP address, MAC address, and even the public-key cryptography key pair is not enough since IPs can be dynamic, MACs can be spoofed, and cryptography key pairs can be stolen. Therefore, the server requires supplementary security considerations such as contextual features to verify the device identity. This paper presents a measurement-based method to detect and alert false data reports during the reception process by means of sensor behavior. As a proof of concept, we develop a classification-based methodology for device identification, which can be implemented in a real IoT scenario.

show abstract

“…For this purpose, Zhao et al [25] propose a mutual authentication for IoT nodes. In addition, sensors must convince service provider (or cloud) that they are authenticated to store information there [10].…”

Section: Related Workmentioning

confidence: 99%

Authentication and Access Control for Open Messaging Interface Standard

Yousefnezhad

Filippov

Javed

et al. 2017

Proceedings of the 14th EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services

View full text Add to dashboard Cite

The number of Internet of Things (IoT) vendors is rapidly growing, providing solutions for all levels of the IoT stack. Despite the universal agreement on the need for a standardized technology stack, following the model of the worldwide web , a large number of industry-driven domain specific standards hinder the development of a single IoT ecosystem. An attempt to solve this challenge is the introduction of O-MI (Open Messaging Interface) and O-DF (Open Data Format), two domain independent standards published by Open Group. Despite their good compatibility, they define no specific security model. This paper takes the first step of defining a security model for these standards by proposing suitable access control and authentication mechanisms that can regulate the rights of different principles and operations defined in these standards. First, a brief introduction is provided of the O-MI and O-DF standards, including a comparison with existing standards. Second, the envisioned security model is presented, together with the implementation details of the plug-in module developed for the O-MI and O-DF reference implementation.

show abstract

Identity management framework for cloud based internet of things

Cited by 59 publications

References 4 publications

Survey on Identity and Access Management for Internet of Things

Survey on Identity and Access Management for Internet of Things

MeDI: Measurement-based Device Identification Framework for Internet of Things

Authentication and Access Control for Open Messaging Interface Standard

Contact Info

Product

Resources

About