Non-intrusive user identity provisioning in the internet of things

Abstract

The Internet of Things (IoT) represents an evolutionary vision and a new era of such smart environments that encompass all identifiable things in a dynamic and interacting network of networks. Each user has wide interactions with a huge number of entities. It would be impractical to require users to confirm themselves every time they cross various network boundaries, as the frequent verification process would disrupt the users' normal activities and degrades the overall performance. This paper presents a service provisioning framework for IoT that relies on verifying user identity using a non-intrusive method of monitoring and inferring certain types of user activities. The framework helps in supporting the purpose of the IoT for being smart, boundless, easier and safer to improve people's lives. The proposed framework reduces the risk of identity theft that results from losing user devices, where the user identity is usually stored. It copes with the loss of the user's ID or people impersonating other people, and raises an alarm to block an intruder from being verified as a legitimate user.

Survey on Identity and Access Management for Internet of Things

“…The cause of this adaptation, on the other hand, varies a lot from one work to another. Previous works as [98], for example, take the time and location of the user into one university to make the authentication operation adapt based on the safety level required of the place and time. On the other hand, [102] uses the trust relationship of the device's owner to decrease the safety level of the authentication operation to friends when visiting his home.…”

“…On the other hand, [102] uses the trust relationship of the device's owner to decrease the safety level of the authentication operation to friends when visiting his home. However, as pointed out by the own author of [98], most of the current contextual information is very simple and has some major flaws. The work of [98] concludes that it takes some time to learn the user mobility pattern inside the university to make the authentication mechanism adequate.…”

“…However, as pointed out by the own author of [98], most of the current contextual information is very simple and has some major flaws. The work of [98] concludes that it takes some time to learn the user mobility pattern inside the university to make the authentication mechanism adequate. If this user changes its routine for some reason, the adaptive authentication operation must learn this patter again.…”

“…In [93], the author implemented all IoT relationships and interactions into a simple publisher-subscriber approach. The proposals [98,106] are the ones who address the IoT relationship more. The first one creates a friend list that changes the authentication based on their friendship and trust, while the second creates some ownership relationships.…”

“…Al-Karkhi et al [98] propose authentication and authorization methods based on user behavior. The authors argue that, since IoT devices are becoming part of people's lives, the way their devices interact with other devices and services, such as smartphones and connected vehicles, follows the user's behavior.…”