Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources
Internet growth has generated new types of services where the use of sensors and actuators is especially remarkable. These services compose what is known as the Internet of Things (IoT). One of the biggest current challenges is obtaining a safe and easy access control scheme for the data managed in...
| Authors: | ; ; ; |
|---|---|
| Format: | Article |
| Publication date: | 2018 |
| Country: | España |
| Institution: | Universidad de Alcalá (UAH) |
| Repository: | e_Buah Biblioteca Digital Universidad de Alcalá |
| Language: | English |
| OAI Identifier: | oai:ebuah.uah.es:10017/32818 |
| Online Access: | http://hdl.handle.net/10017/32818 https://dx.doi.org/10.3390/s18030917 |
| Access Level: | Open access |
| Keyword: | Access control Internet of Things (IoT) Security MQTT OAuth Telecomunicaciones Telecommunication |
| _version_ | 1878733772474548224 |
|---|---|
| author | Rivera Pinto, Diego|||0000-0002-7076-9048 |
| author2 | Marsá Maestre, Iván|||0000-0002-5529-2851 Hoz de la Hoz, Enrique de la|||0000-0003-4837-3837 Velasco Pérez, Juan Ramón|||0000-0003-0239-1116 |
| author2_role | author author author |
| author_browse | Hoz de la Hoz, Enrique de la|||0000-0003-4837-3837 Marsá Maestre, Iván|||0000-0002-5529-2851 Rivera Pinto, Diego|||0000-0002-7076-9048 Velasco Pérez, Juan Ramón|||0000-0003-0239-1116 |
| author_facet | Rivera Pinto, Diego|||0000-0002-7076-9048 Marsá Maestre, Iván|||0000-0002-5529-2851 Hoz de la Hoz, Enrique de la|||0000-0003-4837-3837 Velasco Pérez, Juan Ramón|||0000-0003-0239-1116 |
| author_role | author |
| collection | e_Buah Biblioteca Digital Universidad de Alcalá |
| description | Internet growth has generated new types of services where the use of sensors and actuators is especially remarkable. These services compose what is known as the Internet of Things (IoT). One of the biggest current challenges is obtaining a safe and easy access control scheme for the data managed in these services. We propose integrating IoT devices in an access control system designed for Web-based services by modelling certain IoT communication elements as resources. This would allow us to obtain a unified access control scheme between heterogeneous devices (IoT devices, Internet-based services, etc.). To achieve this, we have analysed the most relevant communication protocols for these kinds of environments and then we have proposed a methodology which allows the modelling of communication actions as resources. Then, we can protect these resources using access control mechanisms. The validation of our proposal has been carried out by selecting a communication protocol based on message exchange, specifically Message Queuing Telemetry Transport (MQTT). As an access control scheme, we have selected User-Managed Access (UMA), an existing Open Authorization (OAuth) 2.0 profile originally developed for the protection of Internet services. We have performed tests focused on validating the proposed solution in terms of the correctness of the access control system. Finally, we have evaluated the energy consumption overhead when using our proposal. |
| eu_rights_str_mv | openAccess |
| format | article |
| id | ES_5cb8a6bb7fe45bc487b2b181f5113c1f |
| institution | Universidad de Alcalá (UAH) |
| instname_str | Universidad de Alcalá (UAH) |
| language | eng |
| network_acronym_str | ES |
| network_name_str | España |
| oai_identifier_str | oai:ebuah.uah.es:10017/32818 |
| publishDate | 2018 |
| publishDateSort | 2018 |
| reponame_str | e_Buah Biblioteca Digital Universidad de Alcalá |
| spelling | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources Rivera Pinto, Diego|||0000-0002-7076-9048 Marsá Maestre, Iván|||0000-0002-5529-2851 Hoz de la Hoz, Enrique de la|||0000-0003-4837-3837 Velasco Pérez, Juan Ramón|||0000-0003-0239-1116 Access control Internet of Things (IoT) Security MQTT OAuth Telecomunicaciones Telecommunication Internet growth has generated new types of services where the use of sensors and actuators is especially remarkable. These services compose what is known as the Internet of Things (IoT). One of the biggest current challenges is obtaining a safe and easy access control scheme for the data managed in these services. We propose integrating IoT devices in an access control system designed for Web-based services by modelling certain IoT communication elements as resources. This would allow us to obtain a unified access control scheme between heterogeneous devices (IoT devices, Internet-based services, etc.). To achieve this, we have analysed the most relevant communication protocols for these kinds of environments and then we have proposed a methodology which allows the modelling of communication actions as resources. Then, we can protect these resources using access control mechanisms. The validation of our proposal has been carried out by selecting a communication protocol based on message exchange, specifically Message Queuing Telemetry Transport (MQTT). As an access control scheme, we have selected User-Managed Access (UMA), an existing Open Authorization (OAuth) 2.0 profile originally developed for the protection of Internet services. We have performed tests focused on validating the proposed solution in terms of the correctness of the access control system. Finally, we have evaluated the energy consumption overhead when using our proposal. Ministerio de Economía y Competitividad Universidad de Alcalá http://hdl.handle.net/10017/32818 https://dx.doi.org/10.3390/s18030917 |
| spellingShingle | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources Rivera Pinto, Diego|||0000-0002-7076-9048 Access control Internet of Things (IoT) Security MQTT OAuth Telecomunicaciones Telecommunication |
| title | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| title_full | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| title_fullStr | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| title_full_unstemmed | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| title_short | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| title_sort | Access Control Mechanism for IoT Environments Based on Modelling Communication Procedures as Resources |
| topic | Access control Internet of Things (IoT) Security MQTT OAuth Telecomunicaciones Telecommunication |
| topic_facet | Access control Internet of Things (IoT) Security MQTT OAuth Telecomunicaciones Telecommunication |
| url | http://hdl.handle.net/10017/32818 https://dx.doi.org/10.3390/s18030917 |