IoT access control issues: A capability based approach

Proceedings - 6th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, IMIS 2012

Volumn , Issue , 2012, Pages 787-792

  Gusmeroli, S ^a   Piccione, S ^a   Rotondi, D ^a  

^a TXT E solutions SpA ^*  (Italy)

Author keywords

Authorization; Capability Based Access Control; Delegation; Internet of Things; Rights Revocation

Indexed keywords

AUTHORIZATION; AUTHORIZATION FRAMEWORKS; CONTROL PROCESS; DELEGATION; DISTRIBUTED SYSTEMS; INFORMATION PROTECTION; INTERACTION DYNAMICS; INTERNET OF THINGS (IOT); RIGHTS REVOCATION; SHOP FLOOR;

INTERNET; UBIQUITOUS COMPUTING;

ACCESS CONTROL;

EID: 84867696056     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMIS.2012.38     Document Type: Conference Paper

References (25)

1. See project home page: http://iot-at-work.eu
2. Wikipedia. Capability-based security. Available: http://en.wikipedia.org/ wiki/Capability-based-security
3. J. Li, A. H. Karp, "Access Control for the Services Oriented Architecture," in ACM Workshop on Secure Web Services (SWS'07), November 2007
4. A. H. Karp, "Authorization-Based Access Control for the Services Oriented Architecture," in Proc. 4th Int. Conf. on Creating, Connecting, and Collaborating through Computing (C5), January 2006
5. A. H. Karp, H. Haury, M. H. Davis, "From ABAC to ZBAC: The Evolution of Access Control Models," HP Laboratories, Tech. Report HPL-2009-30, February 2009
6. A. H. Karp, J. Li, "Solving the Transitive Access Problem for the Services Oriented Architecture," in Proc. 2010 Int. Conf. on Availability, Reliability, and Security (ARES '10), February 2010
7. th Int. Conf. on Information Technology and Applications (ICITA 2009), November 2009
8. th Annual PKI R&D Workshop, April 2005
9. N. Hardy, "The Confused Deputy: (or why capabilities might have been invented)," ACM SIGOPS Operating Systems Review, vol. 22, no. 4, October 1988
10. th National Computer Security Conf., 1992
11. Information Technology: Requirements for the Implementation and Interoperability of Role Based Access Control, ANSI/INCITS Standard 459-2011, January 2011
12. eXtensible Access Control Markup Language Version 3.0, OASIS XACML v. 3.0, August 2010
13. J. B. Dennis, E. C. Van Horn, "Programming Semantics For Multiprogrammed Computations," MIT, Tech. Report MIT/LCS/TR-23, 1965
14. H. Levy, "Capability-Based Computer Systems," Digital Press, Bedford, Massachusetts, 1984. Available: http://www.cs.washington.edu/homes/ levy/capabook/
15. th Int. Conf. on Distributed Computing Systems, 1986, pp. 558-563. Available: ftp://ftp.cs.vu.nl/pub/papers/amoeba/dcs86.ps.Z
16. SPKI Certificate Theory, IETF RFC 2693, September 1999. Available: http://www.ietf.org/rfc/rfc2693.txt
17. ITU-T Recommendation X.509: Information technology - Open systems interconnection - The Directory: Public-key and attribute certificate frameworks (also know as ISO/IEC 9594-8), ITU-T Recommendation X.509, November 2008
18. An Internet Attribute Certificate Profile for Authorization, IETF RFC 3281, April 2002. Available: http://www.ietf.org/rfc/rfc3281.txt
19. D. Balfanz, G. E. Durfee, D. K. Smetters, "Making the impossible easy: usable PKI," in Security and Usability, Chap. 16 edited by L. Cranor and S. Garfinkel, O'Reilly, 2005
20. nd Workshop on Isolation and Integration in Embedded Systems (IIES '09), April 2009
21. M. Miller, Ka-Ping Yee, J. Shapiro, "Capability Myths Demolished," Systems Research Laboratory, Johns Hopkins University, Tech. Report SRL2003-02, 2003
22. D. Uckelman, M. Harrison, F. Michahelles (eds.), Architecting the Internet of Things, Springer-Verlag Berlin Heidelberg, 2011
23. th Int. Conf. on Intelligence in Next Generation Networks (ICIN 2009), September 2009
24. E. Yuan, J. Tong, "Attributed Based Access Control (ABAC) for Web Services," in Proc. of the IEEE Int. Conf. on Web Services (ICWS'05), July 2005
25. D. R. Kuhn, E. J. Coyne, T. R. Weil, "Adding Attributes to Role-Based Access Control," IEEE Computer, vol. 43, no. 6, June 2010