Blockchain-Based Secured Access Control in an IoT System
Source abstract
Abstract
The distributed nature of Internet of Things (IoT) and its rapid increase on a large scale raises many security and privacy issues. Access control is one of the major challenges currently addressed through centralized approaches that may rely on a third party and they are constrained by availability and scalability, which may result in a performance bottleneck. Therefore, this paper proposes a novel solution to manage the delivery of lightweight and decentralized secure access control of an IoT system based on a multi-agent system and a blockchain. The main objective of the proposed solution is to build Blockchain Managers (BCMs) for securing IoT access control, as well as allowing for secure communication between local IoT devices. Moreover, the solution also enables secure communication between IoT devices, fog nodes and cloud computing.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · IoT and Edge/Fog Computing · Privacy-Preserving Technologies in Data
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Information System, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia
Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia
Department of Computer Science, College of Computing in Al-Qunfudah, Umm Al-Qura University, Makkah 24381, Saudi Arabia
Department of Management Information Systems, Faculty of Economics and Administration, King Abdulaziz University, Jeddah 21589, Saudi Arabia
Funding
King Abdulaziz University
References (34)
Show source-provided references
1. Access control in the Internet of Things: Big challenges and new opportunities10.1016/j.comnet.2016.11.007 ↗
2. Aldowah, H., Rehman, S.U., and Umar, I. (2018). Security in Internet of Things: Issues, Challenges and Solutions. International Conference of Reliable Information and Communication Technology, Springer.10.1007/978-3-319-99007-1_38 ↗
3. Ourad, A.Z., Belgacem, B., and Salah, K. (2018). Using blockchain for IOT access control and authentication management. International Conference on Internet of Things 2018 June, Springer.10.1007/978-3-319-94370-1_11 ↗
4. Access control in Internet-of-Things: A survey10.1016/j.jnca.2019.06.017 ↗
5. Ouaddah, A., Mousannif, H., and Ouahman, A.A. (2016, January 17–20). Access control models in loT: The road ahead. Proceedings of the 2015 IEEE/ACS 12th International Conference of Computer Systems and Applications (AICCSA), Marrakech, Morocco.10.1109/AICCSA.2015.7507090 ↗
6. Jia, J., Qiu, X., and Cheng, C. (2012, January 27–29). Access control method for web of things based on role and SNS. Proceedings of the 2012 IEEE 12th International Conference on Computer and Information Technology, Chengdu, China.
7. Xu, R., Chen, Y., Blasch, E., and Chen, G. (August, January 30). Blendcac: A blockchain-enabled decentralized capability-based access control for iots. Proceedings of the 2018 IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData), Halifax, NS, Canada.10.1109/Cybermatics_2018.2018.00191 ↗
8. Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT10.1109/JIOT.2018.2812239 ↗
9. Blockchain in Internet of Things: Challenges and Solutions
10. Gao, W., Hatcher, W.G., and Yu, W. (August, January 30). A survey of blockchain: Techniques, applications, and challenges. Proceedings of the 2018 27th International Conference on Computer Communication and Networks (ICCCN), Hangzhou, China.10.1109/ICCCN.2018.8487348 ↗
11. Dorri, A., Kanhere, S.S., Jurdak, R., and Gauravaram, P. (2017, January 13–17). Blockchain for IoT security and privacy: The case study of a smart home. Proceedings of the 2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops), Kona, HI, USA.10.1109/PERCOMW.2017.7917634 ↗
12. Ouaddah, A., Elkalam, A.A., and Ouahman, A.A. (2017). Towards a Novel Privacy-Preserving Access Control Model Based on Blockchain Technology in Iot. Europe and MENA Cooperation Advances in Information and Communication Technologies, Springer.10.1007/978-3-319-46568-5_53 ↗
13. Liu, J., Xiao, Y., and Chen, C.L.P. (2012, January 18–21). Authentication and access control in the Internet of things. Proceedings of the 2012 32nd International Conference on Distributed Computing Systems Workshops, Macau, China.10.1109/ICDCSW.2012.23 ↗
14. Security analysis and improvements of authentication and access control in the internet of things10.3390/s140814786 ↗
15. Attribute-role-based hybrid access control in the internet of things
16. Touati, L., and Challal, Y. (2015, January 7–11). Poster: Activity-based access control for IoT. Proceedings of the 1st International Workshop on Experiences with the Design and Implementation of Smart Objects, Paris, France.10.1145/2797044.2797052 ↗
17. Touati, L., and Challal, Y. (2015, January 16–19). Batch-based CP-ABE with attribute revocation mechanism for the Internet of Things. Proceedings of the 2015 International Conference on Computing, Networking and Communications (ICNC), Garden Grove, CA, USA.10.1109/ICCNC.2015.7069492 ↗
18. Sicari, S., Rizzardi, A., Coen-Porisini, A., and Cappiello, C. (2014, January 8–10). A NFP model for internet of things applications. Proceedings of the 2014 IEEE 10th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), Larnaca, Cyprus.10.1109/WiMOB.2014.6962181 ↗
19. Goncalves, F., Macedo, J., Nicolau, M.J., and Santos, A. (2013, January 18–20). Security Architecture for Mobile E-Health Applications in Medication Control. Proceedings of the 2013 21st International Conference on Software, Telecommunications and Computer Networks-(SoftCOM 2013), Primosten, Croatia.10.1109/SoftCOM.2013.6671901 ↗
20. Gusmeroli, S., Piccione, S., and Rotondi, D. (2012, January 4–6). IoT Access Control Issues: A Capability Based Approach. Proceedings of the 2012 Sixth International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, Palermo, Italy.10.1109/IMIS.2012.38 ↗
21. TACIoT: Multidimensional trust-aware access control system for the Internet of Things10.1007/s00500-015-1705-6 ↗
22. Mahalle, P.N., Thakre, P.A., Prasad, N.R., and Prasad, R. (2013, January 24–27). A fuzzy approach to trust based access control in internet of things. Proceedings of the Wireless VITAE 2013, Atlantic City, NJ, USA.10.1109/VITAE.2013.6617083 ↗
23. NTT Innovation Institute (2020, November 16). Mandatory Access Control over IoT Communications. Available online: https://labevent.ecl.ntt.co.jp/forum2017/elements/pdf_eng/03/C-18_e.pdf.
24. Seitz, L., Selander, G., and Gehrmann, C. (2013, January 4–7). Authorization framework for the Internet-of-Things. Proceedings of the 2013 IEEE 14th International Symposium on” A World of Wireless, Mobile and Multimedia Networks”(WoWMoM), Madrid, Spain.10.1109/WoWMoM.2013.6583465 ↗
25. Naedele, M. (2006, January 16–18). An access control protocol for embedded devices. Proceedings of the 2006 4th IEEE International Conference on Industrial Informatics, Singapore.10.1109/INDIN.2006.275623 ↗
26. Distributed privacy-preserving access control in sensor networks10.1109/TPDS.2011.299 ↗
27. An evaluation of the proposed framework for access control in the cloud and BYOD environment
28. Blockchain challenges and opportunities: A survey10.1504/IJWGS.2018.095647 ↗
29. Sahafizadeh, E., and Parsa, S. (2010, January 21–24). Survey on access control models. Proceedings of the 2010 2nd International Conference on Future Computer and Communication, Wuha, China.10.1109/ICFCC.2010.5497850 ↗
30. Li, N. (2010, January 16–18). Research on Diffie-Hellman key exchange protocol. Proceedings of the 2010 2nd International Conference on Computer Engineering and Technology, Chengdu, China.
31. Narendra, M. (2021, January 11). Research Reveals the Most Vulnerable IoT Devices. Available online: https://gdpr.report/news/2019/06/12/research-reveals-themost-vulnerable-iot-devices/.
32. Computer security and the modern home10.1145/2398356.2398377 ↗
33. IoT and Smart Home Data Breach Risks from the Perspective of Data Protection and Information Security Law
34. Cvitić, I., Peraković, D., Periša, M., and Botica, M. (2018, January 6–8). Smart home IoT traffic characteristics as a basis for DDoS traffic detection. Proceedings of the 3rd EAI International Conference on Management of Manufacturing Systems 2018, Dubrovnik, Croatia.10.4108/eai.6-11-2018.2279336 ↗