返回
A Comprehensive Security Framework for Publish/Subscribe-Based IoT Services Communication
DOI:10.1109/ACCESS.2019.2899076.png)
摘要
En 中文
The publish/subscribe paradigm provides a loosely-coupled and scalable communication model for the large-scale IoT service systems, such as supervisory control and data acquisition (SCADA). Data confidentiality and service privacy are two crucial security issues for the publish/subscribe model deployed in different domains. The existing access control schemes for such model cannot address both the issues at the same time. In this paper, we propose a comprehensive access control framework (CACF) to bridge this gap. The design principle of the proposed framework is twofold: (a) a bi-directional policy matching scheme for protecting the privacy of IoT services; and (b) a fully homomorphic encryption scheme for encrypting published events to protect data confidentiality. We analyze the correctness and security of the CACF, moreover, we prototype CACF based on Apache ActiveMQ, an open source message broker, and evaluate its performance. The experimental results indicate that our security system meets the latency requirements for very high-quality SCADA services.
Keyword:
Access control
publish-subscribe
Internet of Things
data privacy
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
The Accuracy of Computerized Adaptive Testing in Heterogeneous Populations: A Mixture Item-Response Theory Analysis
PLOS ONE
IF0
Design and Implementation of a Hardware Versatile Publish-Subscribe Architecture for the Internet of Things
IEEE ACCESS
IF3.6
Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption使用基于属性的加密在云计算中实现个人健康记录的可扩展和安全共享

