Journal
IEEE ACCESS
Volume 9, Issue -, Pages 107200-107223Publisher
IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC
DOI: 10.1109/ACCESS.2021.3101218
Keywords
Internet of Things; Access control; Industries; Cloud computing; Computational modeling; Data models; Smart manufacturing; Internet of Things; smart industries; future manufacturing; access control; security; privacy; digital twins; attribute-based access control
Categories
Funding
- National Science Foundation at Tennessee Technological University [2025682]
- NSF CREST Center at The University of Texas at San Antonio (UTSA) [HRD-1736209]
- Directorate for STEM Education
- Division Of Graduate Education [2025682] Funding Source: National Science Foundation
Ask authors/readers for more resources
The Internet of Things (IoT) is improving human lives, but weak authentication and access control mechanisms could lead to unauthorized access and harm. To enhance security in the IoT ecosystem, a flexible and dynamic access control model is necessary to protect smart devices, data, and resources.
Internet of Things (IoT) is revolutionizing and enhancing the quality of human lives in every aspect. With a disruption of IoT devices and applications, attackers are leveraging weak authentication and access control mechanisms on these IoT devices and applications to gain unauthorized access on user devices and data and cause them harm. Access control is a critical security mechanism to secure the IoT ecosystem which comprises cloud computing and edge computing services along with smart devices. Today major cloud and IoT service providers including Amazon Web Services (AWS), Google Cloud Platform (GCP), and Azure utilize some customized forms of Role-Based Access Control (RBAC) model along with specific authorization policies enabled by policy-based access control models. To enable fine-grained access control and overcome limitations of existing access control models, there is an imminent need to develop a flexible and dynamic access control model for securing smart devices, data and resources in the cloud-enabled IoT architecture. In this paper, we develop a formal attribute-based access control (ABAC) model for AWS IoT by building upon and extending previously developed access control model for AWS IoT, known as AWS-IoTAC model. We demonstrate the applicability of our proposed model through an industrial IoT use case and its implementation in the AWS IoT platform. Our proposed fine grained model for AWS IoT incorporates its existing capabilities and introduces new attributes for IoT entities and attribute-based policies for enabling expressive access control in AWS IoT. We also evaluate the performance of our model on the AWS cloud and IoT platform with the future smart industries use-case to depict the feasibility of our model in a real-world platform.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available