Package-Role Based Authorization Control Model for Wireless Network Services

Ngo, Huy Hoang; Wu, Xin; Le, Phu Dung; Wilson, Campbell

doi:10.1109/ares.2009.117

Cited by 3 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Ngo et al . proposed an authorization control model PRBAC based on RBAC to enhance the authorization control for the wireless network services. By combining the WoT with social networks, Guinard et al .…”

Section: Related Workmentioning

confidence: 99%

“…To the best of our knowledge, only a couple of solutions have been proposed to perform access control for IoT. Ngo et al [27] proposed an authorization control model PRBAC based on RBAC to enhance the authorization control for the wireless network services. By combining the WoT with social networks, Guinard et al [66] adopt authentication mechanisms existing in social networks to perform access control in the WoT.…”

Section: Related Workmentioning

confidence: 99%

“…Obviously, context information, including environment context, temporal context, user context, and system context, must be considered in the security and privacy issues of WoT. So far, several mechanisms have been employed to secure IoT, such as encryption , privacy protection , and access control . However, to the best of our knowledge, there is a lack of existing work that combines context awareness with security and privacy protection in the IoT, especially in the WoT.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Context‐aware usage control for web of things

Bai

Yang

et al. 2012

Security Comm Networks

View full text Add to dashboard Cite

The Web of Things (WoT), inherited from the Internet of Things (IoT), encapsulates functionalities into publishable services on the Web to enable the IoT a seamless integration with the Web. The openness of the Web, in turn, directly exposes WoT to existing attacks from the Web. In addition, WoT possesses characteristics of high security and privacy concerns, mobility, and limited capabilities, which require specific and additional security and privacy protection beyond existing mechanisms. More importantly, WoT is inherently connected to its context, so context information must be taken into account in its security and privacy measures. To address these challenges, we propose a context‐aware usage control model (ConUCON), which leverages the context information to enhance data, resource, and service protection for WoT. On the basis of ConUCON, we also design and implement a context‐aware usage control framework on the middleware layer in our ongoing SmartHome project, to provide security and privacy protection. ConUCON is designed specifically to express the context‐aware usage policy specification, such that security and privacy requirements can be easily specified and enforced with the proposed model and framework. Finally, we apply ConUCON to a remote appliance management prototype, as a case study, to demonstrates its feasibility in a real environment. Copyright © 2012 John Wiley & Sons, Ltd.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Context‐aware usage control for web of things

Bai

Yang

et al. 2012

Security Comm Networks

View full text Add to dashboard Cite

show abstract

An extended role based access control model for the Internet of Things

Guo-ping

Tian

2010

2010 International Conference on Information, Networking and Automation (ICINA)

View full text Add to dashboard Cite

Security Architecture for Sensitive Information Systems

Wu¹

2010

Convergence and Hybrid Information Technologies

Self Cite

View full text Add to dashboard Cite

Protecting sensitive information is a growing concern around the globe. Securing critical data in all sectors, including the business, healthcare and military sectors, has become the first priority of sensitive information management. Failing to protect this asset results in high costs and, more importantly, can also result in lost customers and investor confidence and even threaten national security.Sensitive information systems consist of three major components: communication channel, user interface and sensitive information storage; the protection of these three components equates to the protection of sensitive information itself. Previous research in this area has been limited due to the employment of long-term shared keys and public keys. Currently, no complete security solution exists to help protect sensitive information in the three components. Issues such as dynamic sensitive information ownership, group authentication and authorization and privacy protection also create challenges for the protection of sensitive information systems. The research described in this thesis is based on dynamic key theory and group key theory to present a novel security architecture to enable sensitive information systems to overcome these challenges and meet the desired security goals for the three major components.The proposed security architecture consists of dynamic key management, useroriented group key management, authentication and authorization management and II sensitive information management, which guarantee the security of the three major components of sensitive information systems.Because of the lack of the assessment properties of information security models, a new sensitive information security model is also presented in this thesis to evaluate the effectiveness of security architecture. This model proves that the security architecture satisfies the security goals. It can also be used to assess other security architectures, and thus makes a valuable contribution to the field of sensitive information systems security.In summary, the proposed security architecture offers unique features necessary for the security of sensitive information systems. It also overcomes the limitations associated with existing security approaches and enables the complete protection of the three major components of sensitive information systems. III DeclarationIn accordance with Monash University Doctorate Regulation 17 / Doctor of Philosophy and Master of Philosophy (MPhil) regulations, the following declarations are made:

show abstract

Package-Role Based Authorization Control Model for Wireless Network Services

Cited by 3 publications

References 9 publications

Context‐aware usage control for web of things

Context‐aware usage control for web of things

An extended role based access control model for the Internet of Things

Security Architecture for Sensitive Information Systems

Contact Info

Product

Resources

About