Survey on Identity and Access Management for Internet of Things

Abstract

The Internet of Things (IoT) encompasses a large number of connected devices, generating and sharing different types of data among themselves. These data enable the creation of society-changing applications, such as health monitoring and autonomous vehicles. Under this context, protecting the access of these connected devices and their data is critical to IoT applications’ success, since a single data breach can incur into a cascade effect, which leads to devastating consequences. Identity and Access Management (IAM) systems provide mechanisms to identify individuals at the network and determine their access privileges, thus avoiding inappropriate access. However, the current IAMs system struggles to provide the scale or manage the complex relationships that IoT brings. In this work, we present a comprehensive state-of-the-art survey of IAMs and the main concepts and challenges when applied to IoT. First, we overview the IoT technology, giving its essential characteristics and communication architectures and its main applications. Then, we present IAMs state-of-the-art and the main concepts, existing architectures, and challenges. Finally, we focus on current IAMs that aims to tackle the IoT complexity, along with an in-depth analysis of their proposals and future directions in the field.

Uma Política de Cache de Identidades Multinível para Névoas Computacionais

“…O [Cremonezi et al 2019] propõe o uso de armazenamento nos nós da rede usando as identidades como servic ¸os e os objetos são persistidos por meio de políticas de cache conhecidas. Ele avalia a distribuic ¸ão em diferentes capacidades de armazenamento e comprovam que os algoritmos probabilísticos possuem um desempenho melhor que os demais.…”

“…Ele avalia a distribuic ¸ão em diferentes capacidades de armazenamento e comprovam que os algoritmos probabilísticos possuem um desempenho melhor que os demais. Este trabalho surgiu da necessidade de verificar melhor os algoritmos de replicac ¸ões e substituic ¸ões sugerido em [Cremonezi et al 2019]. A pesquisa foi evoluída usando uma entrada de dados real, antes era uma entrada simulada pela distribuic ¸ão Zipf.…”

PrivyKG: Security and Privacy Preservation of Knowledge Graphs Using BlockChain Technology

“…Therefore, these two tasks are seen as authentication and authorization of entities in the system. As mentioned in the work of [20], the authentication methods can use different factors for human and non-human such as knowledge factor, possession factor, inherence factor and contextaware factor. The authorization methods can be classified as: Discretionary Access Control (DAC), Mandatory Access Control (MAC), Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Capability-Based Access Control (Cap-BAC).…”

Blockchain-Based Identity Management Systems in Health IoT: A Systematic Review

“…In addition, security analyses have been conducted on a number of mainstream IAM attacks, such as a man-in-the-middle attacks, insider attacks, replay attacks, and session/cookie attacks. Cremonezi et al [17], conducted a survey study on conventional IAM systems covering AuthN, AuthZ operations, and IAM models in IoT environments, where the IoT system architecture and characteristics are considered. Other researchers have conducted studies on the AuthZ part of IAM for IoT.…”