Trust-Based Blockchain Authorization for IoT

Authorization or access control limits the actions a user may perform on a computer system, based on predetermined access control policies, thus preventing access by illegitimate actors. Access control for the Internet of Things (IoT) should be tailored to take inherent IoT network scale and device...

Full description

Saved in:
Bibliographic Details
Published in:IEEE eTransactions on network and service management 2021-06, Vol.18 (2), p.1646-1658
Main Authors: Putra, Guntur Dharma, Dedeoglu, Volkan, Kanhere, Salil S., Jurdak, Raja, Ignjatovic, Aleksandar
Format: Article
Language:English
Subjects:
Access control
Authorization
Biological system modeling
Blockchain
Control systems
Cryptography
Internet of Things
IoT
Performance measurement
Privacy
Proposals
reputation
Security management
Smart contracts
Trust management
Trustworthiness
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Authorization or access control limits the actions a user may perform on a computer system, based on predetermined access control policies, thus preventing access by illegitimate actors. Access control for the Internet of Things (IoT) should be tailored to take inherent IoT network scale and device resource constraints into consideration. However, common authorization systems in IoT employ conventional schemes, which suffer from overheads and centralization. Recent research trends suggest that blockchain has the potential to tackle the issues of access control in IoT. However, proposed solutions overlook the importance of building dynamic and flexible access control mechanisms. In this paper, we design a decentralized attribute-based access control mechanism with an auxiliary Trust and Reputation System (TRS) for IoT authorization. Our system progressively quantifies the trust and reputation scores of each node in the network and incorporates the scores into the access control mechanism to achieve dynamic and flexible access control. We design our system to run on a public blockchain, but we separate the storage of sensitive information, such as user's attributes, to private sidechains for privacy preservation. We implement our solution in a public Rinkeby Ethereum test-network interconnected with a lab-scale testbed. Our evaluations consider various performance metrics to highlight the applicability of our solution for IoT contexts.
ISSN:1932-4537
1932-4537
DOI:10.1109/TNSM.2021.3077276