Task‐Oriented Multilevel Cooperative Access Control Scheme for Environment with Virtualization and IoT

Abstract

With the development of cloud computing technology and the proliferation of the Internet of Things (IoT) terminals, more and more scenes need the collaboration of virtual machines and IoT terminals to resolve. However, there are many severe challenges on the security of virtual machines and IoT terminals. Based on Bell-LaPadula Model (BLP), a task-oriented multilevel cooperative access control scheme virtualization and reality BLP, named VR-BLP, is proposed. Specifically, tasks are created for each user of the platform and tasks and users are divided into multiple levels to provide more granularities to limit access between virtual machines and IoT terminals. Moreover, with network isolation cooperating with process isolation and shared memory isolation mechanisms, VR-BLP is implemented to enhance the security isolations between tasks. Performance evaluations show that VR-BLP enhanced the security of environment with virtualization and IoT without causing significant performance penalty.

Access Control Models

“…Task-Role Based Dual System Access Control [44] has the advantages of TaskBAC and RBAC: sequence of tasks and using roles. Another access control model Task-Oriented Multilevel Cooperative Access Control, based on workflow [45], is applied in cloud computing and Internet of things.…”