Blockchain based permission delegation and access control in Internet of Things (BACI). Issue 86 (September 2019)

• Record Type: Journal Article
• Authors: Ali, Gauhar; Ahmad, Naveed; Cao, Yue; Asif, Muhammad; Cruickshank, Haitham; Ali, Qazi Ejaz
• Is Part Of: Computers & security. Issue 86(2019)
• Page Start: 318
• Page End: 334
• Publication Date: 2019-09
• Subjects: Blockchain -- Internet of Things -- Access control -- Permission delegation -- Platform verification; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.06.010
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Access control with permission delegation mechanism allows fine granular access to secure resources. In the literature, existing architectures for permission delegation and access control are either event-based or query-based. These previous works assume a single trusted delegation service, which however is likely biased or fails to service. Also, they fail to allow users to verify delegation service operations, as such cannot be directly applied to IoT (Internet of Things) due to low power, low-bandwidth, ad-hoc and decentralized nature. This paper proposes a novel decentralized architecture for permission delegation and access control for IoT application, with demands on event and query base permission delegation. We further apply Blockchain (BC) technology to make delegation services secure, trusted, verifiable and decentralized. We investigate our proposed approach in Simple PROMELA INterpreter (SPIN) model checker using PROMELA (Process Meta Language). The "Platform Verification", "Delegation", "Mutual Exclusion" properties written in Linear Temporal Logic (LTL) are also verified against the PROMELA model.