XACML for Mobility (XACML4M)-An Access Control Framework for Connected Vehicles

• Published in: Sensors (Basel, Switzerland) Switzerland), 2023-02, Vol.23 (4), p.1763
• Main Authors: Ashutosh, Ashish, Gerl, Armin, Wagner, Simon, Brunie, Lionel, Kosch, Harald
• Format: Article
• Language: English
• Subjects: ABAC; Access control; Automobile industry; Communication channels; Complex systems; connected vehicles; Electric vehicles; Extensibility; frequency; location; Personal information; Privacy; Road construction; Sensors; Software; Telecommunication systems; Telematics; time; Transportation equipment industry; Wireless networks
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s23041763

The automotive industry is experiencing a transformation with the rapid integration of software-based systems inside vehicles, which are complex systems with multiple sensors. The use of vehicle sensor data has enabled vehicles to communicate with other entities in the connected vehicle ecosystem, such as the cloud, road infrastructure, other vehicles, pedestrians, and smart grids, using either cellular or wireless networks. This vehicle data are distributed, private, and vulnerable, which can compromise the safety and security of vehicles and their passengers. It is therefore necessary to design an access control mechanism around the vehicle data's unique attributes and distributed nature. Since connected vehicles operate in a highly dynamic environment, it is important to consider context information such as when designing a fine-grained access control mechanism. This leads to our research question: How can Attribute-Based Access Control (ABAC) fulfill connected vehicle requirements of ? To address the issue, we propose a data flow model based on Attribute-Based Access Control (ABAC) called . XACML4M adds additional components to the standard eXtensible Access Control Markup Language (XACML) to satisfy the identified requirements of SAC, TBAC, LBAC, and FBAC in connected vehicles. Specifically, these are: We implement a prototype based on these four requirements on a Raspberry Pi 4 and present a proof-of-concept for a real-world use case. We then perform a functional evaluation based on the authorization policies to validate the XACML4M data flow model. Finally, we conclude that our proposed XACML4M data flow model can fulfill all four of our identified requirements for connected vehicles.