Cruz-Piris Luis, Rivera Diego, Marsa-Maestre Ivan, de la Hoz Enrique, Velasco Juan R
Departamento de Automática, Escuela Politécnica Superior, Universidad de Alcalá, 28805 Alcalá de Henares, Madrid, Spain.
Sensors (Basel). 2018 Mar 20;18(3):917. doi: 10.3390/s18030917.
Internet growth has generated new types of services where the use of sensors and actuators is especially remarkable. These services compose what is known as the Internet of Things (IoT). One of the biggest current challenges is obtaining a safe and easy access control scheme for the data managed in these services. We propose integrating IoT devices in an access control system designed for Web-based services by modelling certain IoT communication elements as resources. This would allow us to obtain a unified access control scheme between heterogeneous devices (IoT devices, Internet-based services, etc.). To achieve this, we have analysed the most relevant communication protocols for these kinds of environments and then we have proposed a methodology which allows the modelling of communication actions as resources. Then, we can protect these resources using access control mechanisms. The validation of our proposal has been carried out by selecting a communication protocol based on message exchange, specifically Message Queuing Telemetry Transport (MQTT). As an access control scheme, we have selected User-Managed Access (UMA), an existing Open Authorization (OAuth) 2.0 profile originally developed for the protection of Internet services. We have performed tests focused on validating the proposed solution in terms of the correctness of the access control system. Finally, we have evaluated the energy consumption overhead when using our proposal.
互联网的发展催生了新型服务，其中传感器和执行器的应用尤为显著。这些服务构成了所谓的物联网（IoT）。当前最大的挑战之一是为这些服务中管理的数据获取一种安全且便捷的访问控制方案。我们建议通过将某些物联网通信元素建模为资源，把物联网设备集成到一个为基于Web的服务设计的访问控制系统中。这将使我们能够在异构设备（物联网设备、基于互联网的服务等）之间获得统一的访问控制方案。为实现这一目标，我们分析了这类环境中最相关的通信协议，然后提出了一种方法，该方法允许将通信行为建模为资源。然后，我们可以使用访问控制机制来保护这些资源。我们通过选择一种基于消息交换的通信协议，具体来说是消息队列遥测传输（MQTT），对我们的提议进行了验证。作为一种访问控制方案，我们选择了用户管理访问（UMA），它是最初为保护互联网服务而开发的现有开放授权（OAuth）2.0配置文件。我们进行了测试，重点是在访问控制系统的正确性方面验证所提出的解决方案。最后，我们评估了使用我们的提议时的能源消耗开销。
