Access Control Model for IoT Environment Including Automated Configuration

Abstract

While the number of IoT devices continues increasing, proper access control of the device is important to protect user's privacy. To perform efficiently and unified access control for the IoT devices, there are several approaches utilizing OAuth have been proposed. However, OAuth is an authorization protocol which designed for use in web services, and the users need to perform pre-configuration and re-configuration tasks when utilizing OAuth in the IoT environment. Since previous access control approaches have not shown effective solutions to reduce these configuration tasks, it becomes burdens to the users and would be a barrier to introduce proper access management in the IoT environment. In this paper, we present an access control and management model for the IoT environment including automated configuration to solve the issues of conventional studies. The automated configuration registers devices and issues authentication information at the first time of connection instead of the user. In addition, the evaluation results show that our model has feasibility and reasonable resource consumption even when managing a large number of devices.