Scholarlink

<p>The Internet of Things (IoT) presents distinct challenges for access control due to its dynamic, heterogeneous, and evolving nature, which existing mechanisms often struggle to address. To overcome these challenges, this paper proposes a novel context-aware role-capability based access control (CRCBAC) system which effectively handles key issues such as dynamic adaptation, capability delegation, context awareness, scalability, and security. At its core, CRCBAC utilizes a structured role capability tree (RCT) to ensure secure capability propagation and management across roles, resolving conflicts through a priority system. Additionally, we design a set of protocols leveraging RCT-operations to securely evaluate access requests, as well as to create, transfer, and revoke capabilities. These protocols are validated through formal analysis using BAN logic and Scyther-based attack simulation, demonstrating CRCBAC’s robustness in ensuring both confidentiality and integrity. Experimental evaluation confirms CRCBAC’s superior scalability and efficiency, achieving up to <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(75\%\)</EquationSource> </InlineEquation> lower response times and 4.6 times higher throughput compared to state-of-the-art approaches. The capability delegation mechanism consistently maintains response times below 3&#xa0;ms, even as user capabilities scale, while also reducing energy consumption by <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(87.5\%\)</EquationSource> </InlineEquation> compared to state-of-the-art approach, making CRCBAC particularly well-suited for energy-constrained IoT environments.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

A Dynamic Context-Aware and Role-Capability Based Access Control Mechanism for Internet of Things

  • 期刊论文

  • 发表日期：

    2025年11月19日

查看全文
  • Rudra Krishnasrija,
  • Amit Kr. Mandal,
  • Raju Halder,
  • Agostino Cortesi

摘要

The Internet of Things (IoT) presents distinct challenges for access control due to its dynamic, heterogeneous, and evolving nature, which existing mechanisms often struggle to address. To overcome these challenges, this paper proposes a novel context-aware role-capability based access control (CRCBAC) system which effectively handles key issues such as dynamic adaptation, capability delegation, context awareness, scalability, and security. At its core, CRCBAC utilizes a structured role capability tree (RCT) to ensure secure capability propagation and management across roles, resolving conflicts through a priority system. Additionally, we design a set of protocols leveraging RCT-operations to securely evaluate access requests, as well as to create, transfer, and revoke capabilities. These protocols are validated through formal analysis using BAN logic and Scyther-based attack simulation, demonstrating CRCBAC’s robustness in ensuring both confidentiality and integrity. Experimental evaluation confirms CRCBAC’s superior scalability and efficiency, achieving up to \(75\%\) lower response times and 4.6 times higher throughput compared to state-of-the-art approaches. The capability delegation mechanism consistently maintains response times below 3 ms, even as user capabilities scale, while also reducing energy consumption by \(87.5\%\) compared to state-of-the-art approach, making CRCBAC particularly well-suited for energy-constrained IoT environments.