Role-Based Administration of Role-Based Smart Home IoT

Shakarami, Mehrnoosh; Sandhu, Ravi

doi:10.1145/3445969.3450426

Cited by 3 publications

(2 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, RBAC has challenges in supporting granularity, complexity, and dynamicity in the IoT. However, RBAC model is also popular in the IoT [ 68 , 69 ] due to its simplicity. ReBAC integrates relationships into access control.…”

Section: Access Control Models In Iotmentioning

confidence: 99%

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions

Ragothaman

Wang

Rimal

et al. 2023

Sensors

View full text Add to dashboard Cite

Internet of Things (IoT) provides a wide range of services in domestic and industrial environments. Access control plays a crucial role in granting access rights to users and devices when an IoT device is connected to a network. However, many challenges exist in designing and implementing an ideal access control solution for the IoT due to the characteristics of the IoT including but not limited to the variety of the IoT devices, the resource constraints on the IoT devices, and the heterogeneous nature of the IoT. This paper conducts a comprehensive survey on access control in the IoT, including access control requirements, authorization architecture, access control models, access control policies, access control research challenges, and future directions. It identifies and summarizes key access control requirements in the IoT. The paper further evaluates the existing access control models to fulfill the access control requirements. Access control decisions are governed by access control policies. The existing approaches on dynamic policies’ specification are reviewed. The challenges faced by the existing solutions for policies’ specification are highlighted. Finally, the paper presents the research challenges and future directions of access control in the IoT. Due to the variety of IoT applications, there is no one-size-fits-all solution for access control in the IoT. Despite the challenges encountered in designing and implementing the access control in the IoT, it is desired to have an access control solution to meet all the identified requirements to secure the IoT.

show abstract

Section: Access Control Models In Iotmentioning

confidence: 99%

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions

Ragothaman

Wang

Rimal

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…Many researchers attempted to provide tweaked solutions to address this problem to make ACL better support the requirements of the IIoT [14]. However, the conflicting roles and adaptable policies for handling the conflicting permissions in such scenarios is still an open problem [16]. Recent studies have employed the blockchain to address the distributed nature of the devices in the network and proposed flexible ACL frameworks [17].…”

mentioning

confidence: 99%

A Blockchain Based Scalable Domain Access Control Framework for Industrial Internet of Things

Usman,

Sarfraz,

Aftab

et al. 2024

IEEE Access

View full text Add to dashboard Cite

Industrial Internet of Things (IIoT) applications consist of resource constrained interconnected devices that make them vulnerable to data leak and integrity violation challenges. The mobility, dynamism, and complex structure of the network further make this issue more challenging. To control the information flow in such environments, access control is critical to make collaboration and communication safe. To deal with these challenges, recent studies employ attribute-based access control on top of blockchain technology. However, the attribute-based access control frameworks suffer due to high computational overhead. In this paper, we propose an improved role-based access control framework using hyperledger blockchain to deal with IIoT requirements with less computational overhead making the information control process more efficient and real-time. The proposed framework leverages a layered architecture of chaincodes to implement the improved access control framework that handles the permission delegation and conflict management to deal with the dynamism of the IIoT network. The system uses a Policy Contract, Device Contract, and Access Contract to manage the workflow of the whole access control process. Each chaincode in the proposed framework is isolated in terms of its responsibilities to make the design low coupled. The integration of improved access control with blockchain enables the proposed framework to provide a highly scalable solution, tamper-proof, and flexible to manage conflicting scenarios. The proposed system outperforms the recent studies significantly in computational overhead in extensive simulation results. To verify the scalability and efficiency, the proposed is evaluated against a large number of concurrent virtual clients in simulation and statistical analysis proves that the proposed system is promising for further research in this domain.

show abstract

Security Analysis of Access Control Policies for Smart Homes

Cimorelli Belfiore,

Ferrara

2023

Proceedings of the 28th ACM Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

Role-Based Administration of Role-Based Smart Home IoT

Cited by 3 publications

References 23 publications

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions

A Blockchain Based Scalable Domain Access Control Framework for Industrial Internet of Things

Security Analysis of Access Control Policies for Smart Homes

Contact Info

Product

Resources

About