Time‐based legality of information flow in the capability‐based access control model for the Internet of Things. (21st July 2020)

• Record Type: Journal Article
• Authors: Nakamura, Shigenari; Enokido, Tomoya; Takizawa, Makoto
• Other Names: Awan Irfan guestEditor.; Younas Muhammad guestEditor.; Benbernou Salima guestEditor.; Ogiela Lidia guestEditor.; Leu Fang‐Yie guestEditor.; Fiore Ugo guestEditor.
• Is Part Of: Concurrency and computation. Volume 33:Number 23(2021)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2020-07-21
• Subjects: CBAC model -- device security -- illegal information flow -- information flow control -- IoT -- late information flow; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.5944
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: The Internet of Things is composed of sensor and actuator devices. Devices have to be securely accessed by subjects. In this article, we take the capability‐based access control (CBAC) model where a subject is issued a capability token to manipulate a device by a device owner. In the CBAC model, information which a subject is not allowed to get may illegally flow to the subject. Hence, the operation interruption (OI) protocol to prevent illegal information flow is proposed in our previous studies. However, although a subject is not allowed to get data at time τ, the subject can get the data later than the time τ . Here, the data come to the subject later than expected by the subject to get the data, that is, the information flows late to the subject. In this article, we newly propose a time‐based OI (TBOI) protocol to prevent not only illegal information flow but also late information flow. Here, operations implying illegal or late information flow are interrupted, that is, not performed at devices. In the evaluation, we show not only illegal information flow but also late information flow are prevented in the TBOI protocol differently from the OI protocol.