Poster: Activity-Based Access Control for IoT

Lyes Touati (1, 2) , Yacine Challal (1, 2)

1 Labex MS2T - Laboratoire d'Excellence "Maîtrise des Systèmes de Systèmes Technologiques"
2 Heudiasyc - Heuristique et Diagnostic des Systèmes Complexes [Compiègne]

In traditional access control systems, a process is granted or not the access to a resource following a control on a single action without taking into consideration user and/or system context. In this paper we introduce a novel concept and a generalized version of context-aware access control in the Internet of Things that we name Activity Control. Our approach is aimed to be aware of the user's context and the overall system's one to make decision on granting or denying the requested action. To implement our concept we used a finite-state machine and the asymmetric encryption mechanism called Ciphertext-Policy Attribute-Based Encryption to achieve a real-time access policy adaptation following user's and/or system's context evolution.

Mots clés: Finite-State Machine; CP-ABE; Internet of Things; Activity Control; Access Control

Domaines: Informatique ubiquitaire; Cryptographie et sécurité [cs.CR]

Lyes Touati, Yacine Challal. Poster: Activity-Based Access Control for IoT. Workshop on experiences with the design and implementation of smart objects, Sep 2015, Paris, France. ⟨10.1145/2797044.2797052⟩. ⟨hal-01226167⟩