.png){kind=icon}
.png){kind=icon}
返回
Information Flow Control Based on Capability Token Validity for Secure IoT: Implementation and Evaluation
.png){kind=icon}
PRE
AI
DOI：10.1016/j.iot.2021.100423.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In the CBAC (Capability-Based Access Control) model proposed for realizing the secure IoT (Internet of Things), authorizers issue subjects capability tokens, i.e. sets of access rights on objects in devices. Objects are data resources which are used to store sensor data and action data. Data of an object may be stored in another object through communication among subjects and devices. A subject can get data of an object from another object even if the subject is not allowed to get the data, i.e. information illegally flows from the object to the subject. In addition, a subject can get data generated at time before which the capability token to get the data starts to be valid. Here, information flows from the object to the subject later than expected by the subject to get the data. In our previous studies, the OI (Operation Interruption) and the TBOI (Time-Based OI) protocols are proposed to interrupt operations implying illegal type of information flow and not only illegal but also late types of information flows, respectively. In this paper, the TBOI protocol is designed and implemented. In the evaluation, it is shown the late information flow is prevented in addition to the illegal one in the TBOI protocol although the request processing time is almost the same as the OI protocol. (C) 2021 Elsevier B.V. All rights reserved.
Keyword:
IoT (Internet of Things)
Device security
CBAC (Capability-Based Access Control) model
Information flow control
CoAP (Constrained Application Protocol)
Implementation
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。