Abstract
Adoption of the Internet of Things (IoT) in education brings many benefits. However, the poor implementation of access control of educational data produced by the IoT devices has brought students’ and teachers’ privacy into danger. Attackers can access educational data that they are not permitted to access and even erase the records during access. To tackle this problem, we employ blockchain technology to guarantee the integrity of access control rules and trace the records of access events. In this paper, we propose a blockchain‐based access control scheme for the data produced by IoT devices. The scheme consists of three components: (1) a well‐implemented data collection module that is deployed in smart classrooms, which collects and uploads data about the real‐time situation inside the smart classroom to the data center; (2) a MongoDB‐based data center and its control module that makes access control decisions based on the verification of the permissions of visitors, where the permissions are managed by blockchain; and (3) a customized blockchain system that stores and keeps security policy updates of the role‐based access control module and records access events in a trusted way. Our analysis indicates that the proposed access control scheme guarantees the correctness of the access control process and makes the access of collected educational data auditable and responsible. Our system collectively analyzes the context of the smart classroom and is capable of detecting multiple scenarios such as absence, lateness, and gunshot. We show how the scheme preserves students’ and teachers’ privacy by carrying out extensive experimental studies. The results indicate that the proposed data management system can give correct responses as quickly as a traditional data server does while preserving privacy.
Highlights
With the rapid development of Internet of Things (IoT), cities around the world are becoming smarter and smarter
We proposed a scheme to preserve privacy in educational application of IoT
We implemented the full system including the components of collecting educational data, storing the data in a data center, and maintaining a role-based access control on educational data
Summary
With the rapid development of Internet of Things (IoT), cities around the world are becoming smarter and smarter. Moreira et al [2] conducted a study to provide personalized education to learners by using the data collected through IoT, cloud computing, and learning analytical tools. Their study indicated that IoT in education can be used to (1) manage energy and monitor ecosystem; (2) implement secure campus and classroom access control; and (3) monitor student’s health. Attackers can erase the records of their visits using simple methods To address these issues, we propose a blockchain-based access control scheme to ensure that the probability at which an adversary successfully accesses the data is a negligible probability. We use blockchain as a trusted, distributed database to store and keep the updates of the security policies involved in the role-based access control scheme, achieving secure and trusted data management.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.