Attribute-based access control and authentication mechanism using smart cards for cloud-based IoT applications. (11th May 2020)

• Record Type: Journal Article
• Authors: Gupta, B.B.; Quamara, Megha
• Is Part Of: International journal of embedded systems. Volume 13:Number 1(2020)
• Page Start: 40
• Page End: 49
• Publication Date: 2020-05-11
• Subjects: attribute -- access control -- authentication -- authorisation -- smart cards -- cloud -- internet of things -- IoT -- access control policy testing -- ACPT -- AVISPA -- on-the-fly model checker -- OFMC; Embedded computer systems -- Periodicals; 004.16
• Languages: English
• ISSNs: 1741-1068

Abstract

With exploding growth in information technology (IT), numerous services and applications having enhanced capabilities are coming into picture with an aim to serve the users. Internet of things (IoT) along with its enabling cutting-edge technologies is establishing a scenario where these services can be utilised effectively. However, with large number of users and applications, it becomes challenging to safeguard the identifying information being transmitted to provide access to these services. This paper presents a refined version of an integrated attribute-based access control and authentication mechanism using smart cards for cloud-based IoT applications. System-wide attributes not only restrict the users to access the remote cloud services, but also ensure user anonymity. We also implement the proposed mechanism on ACPT and AVISPA tool for its validation and to verify its correctness. Moreover, we present an analysis of its security and performance efficiency on the basis of different parameters.