.png){kind=icon}
.png){kind=icon}
Return
Capability token selection algorithms to implement lightweight protocols
.png){kind=icon}
PRE
AI
DOI：10.1016/j.iot.2022.100542.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The IoT (Internet of Things) is now one of the most significant infrastructure and has to be secure against malicious accesses. Especially, it is critical to make devices secure in the IoT. In the CBAC (Capability-Based Access Control) model adopted to the IoT, device owners issue subjects capability tokens, i.e. a set of access rights on objects in devices. Objects in devices are data resource manipulated by subjects. Data are exchanged among subjects and objects through manipulating objects. Here, if subjects attempt to manipulate objects in accordance with the capability tokens issued, the subjects can get data which the subjects are not authorized to get, i.e. illegal information flow and late information flow occur. In our previous studies, protocols are implemented to prevent both illegal and late types of information flows from occurring. Here, operations implying such information flows are interrupted. However, the request processing time gets longer as the number of capability tokens used increases. In this paper, an MRCTSD (Minimum Required Capability Token Selection for Devices) algorithm is newly proposed to reduce the number of capability tokens used. In the evaluation, it is shown that the request processing times and the numbers of capability tokens used in the lightweight protocols realized with the MRCTSD algorithm are shorter and smaller than the conventional protocols, respectively.
Keywords:
CBAC (Capability-Based Access Control) model
Capability token selection algorithm
CoAP (Constrained Application Protocol)
Information flow control
IoT (Internet of Things)
Lightweight protocol