Delegation authorization mechanism with controllable permissions propagation for IoT devices sharing

Yubo SONG; Shanshan QI; Aiqun HU

doi:10.11959/j.issn.2096-109x.2019015

您当前的位置：

首页 >

文章列表页 >

Delegation authorization mechanism with controllable permissions propagation for IoT devices sharing

Papers | 更新时间：2024-06-03

- Delegation authorization mechanism with controllable permissions propagation for IoT devices sharing
- Chinese Journal of Network and Information Security Vol. 5, Issue 2, Pages: 40-49(2019)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019015
  CLC： TP309
- Online First：2019-04，
  
  Published：15 April 2019
- 稿件说明：
移动端阅览
Yubo SONG, Shanshan QI, Aiqun HU. Delegation authorization mechanism with controllable permissions propagation for IoT devices sharing[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 40-49.
DOI：

Yubo SONG, Shanshan QI, Aiqun HU. Delegation authorization mechanism with controllable permissions propagation for IoT devices sharing[J]. Chinese Journal of Network and Information Security, 2019, 5(2): 40-49. DOI： 10.11959/j.issn.2096-109x.2019015.

摘要

为了解决在共享模式下设备所有者在委托授权时权限敏感度保护以及中间代理滥用授权的问题，综合基于信任度访问控制模型和代理签名的特征，提出了一种基于信任度的可控部分权限委托授权机制。该机制采用基于角色和信任度值的授权策略，通过代理签名实现可控的部分权限委托传递。经安全分析证明，该机制可满足权限传递所需的可验证性、不可否认性、可区分性、可识别性和不可滥用性等安全属性，确保了设备所有者权限的可控安全传递，有效防止中间代理过度授权的问题。

Abstract

In order to solve the problems of privilege sensitivity protection and the abuse of authorization by the agent when the device owner delegates authorization in IoT devices sharing environment

a trust-based delegation mechanism for controllable partial permissions was proposed with the trust access control model and the proxy signature.This mechanism generates trust values and authorization policies based on the relationship between the users

and implements controllable partial authority delegation through the proxy signature.According to the security analysis

the mechanism can meet the security attributes such as verifiability

non-repudiation

distinguishability

identifiability and non-abuse required by the permission transfer

and ensure the controllable security transfer of the device owner's permission.The problem of over authorization of an intermediary agent is effectively prevented.

关键词

Keywords

references

JIN J , GUBBI J , MARUSIC S , et al . An information framework for creating a smart city through Internet of things [J ] . IEEE Internet of Things Journal , 2016 , 1 ( 2 ): 112 - 121 .

MC-KINLAY P . Make way for smart cities:opportunities,challenges and capacities of New Zealand local governments [J ] . Asia Pacific Journal of Public Administration , 2017 , 39 ( 4 ): 297 - 303 .

SANDHU R S , COYNE E J , FEINSTEIN H L , et al . Role-based access control models [J ] . Computer , 1996 , 29 ( 2 ): 38 - 47 .

ZHANG G , TIAN J . An extended role based access control model for the Internet of things [C ] // 2010 International Conference on Information Networking and Automation (ICINA) . 2010 : 319 - 323 .

FU Y , YE C . Using XACML to define access control policy in information system [C ] // IET Conference on Wireless,Mobile and Sensor Networks (CCWMSN 17) . 2017 : 676 - 679 .

LI N , WINSBOROUGH W H , MITCHELL J C . Distributed credential chain discovery in trust management:extended abstract [C ] // ACM Conference on Computer and Communications Security . 2016 : 156 - 165 .

KOLEV A , ČOBANOV S , . Trustbac—integrating trust relationships into the rbac model for access control in open systems [C ] // ACM Symposium on Access Control Models and Technologies . 2016 : 49 - 58 .

翟征德 , 冯登国 , 徐震 . 细粒度的基于信任度的可控委托授权模型 [J ] . 软件学报 , 2017 , 18 ( 8 ).

ZHAI Z D , FENG D G , XU Z . Fine-grained controllable delegation authorization model based on trustworthiness [J ] . Journal of Software , 2017 , 18 ( 8 ).

YU J , WANG G , MU Y , et al . An efficient generic framework for three-factor authentication with provably secure instantiation [J ] . IEEE Transactions on Information Forensics and Security , 2016 , 9 ( 12 ): 2302 - 2313 .

XUE K , MA C , HONG P , et al . A temporal credential based mutual authentication and key agreement scheme for wireless sensor networks [J ] . Journal of Network and Computer Applications , 2017 , 36 ( 1 ): 316 - 323 .

JIANG Q , MA J , LU X , et al . An efficient two-factor user authentication scheme with unlinkability for wireless sensor networks [J ] . Peer-to-Peer Networking and Applications , 2016 , 8 ( 6 ): 1070 - 1081 .

Views

1815

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and implementation of proxy-protected proxy signature based on SM2

Related Author

Qing-xiao GUO

Da-wei ZHANG

Liang CHANG

Xiao-dong LIU

Jing-wen SONG

Related Institution

School of Computer and Information Technology, Beijing Jiaotong University

Guangxi Key Laboratory of Trusted Software,Guilin University of Electronic Technology

Institute of Network Information Security,Shandong University

⁰