Authentication and Authorization Frameworks for IoT

Security in the communications in the Internet of Things (IoT) is an essential task due to the characteristics of IoT deployments that go beyond the traditional Internet, having to consider it from the beginning, not as an afterthought. In this chapter, we introduce the basic concepts related to securing the communications such as authentication, authorization and key management and their relation to the term bootstrapping. We see how through bootstrapping we can set the basis for securing the communications in IoT. We review works such as ZigBee IP and the Open Mobile Alliance (OMA) focusing on how they deal with security, and then we introduce the current work done by the Internet Engineering Task Force (IETF) standardization organization. Finally, we provide a framework to secure the communications for IoT through bootstrapping and key management, and to provide authorization to an IoT deployment.