Access Control Framework Research Articles

Access Control Models and Frameworks for the IoT Environment: Review, Challenges, and Future Direction

Access Control Models and Frameworks for the IoT Environment: Review, Challenges, and Future Direction

HEALTHSOLID 4.0: A novel solid-pod and blockchain-enabled framework for role-based access control and secure healthcare information exchange

HEALTHSOLID 4.0: A novel solid-pod and blockchain-enabled framework for role-based access control and secure healthcare information exchange

Towards accountable and privacy-preserving blockchain-based access control for data sharing

The integration of blockchain technology with Access Control (AC) systems presents novel opportunities for enhancing data security within decentralized architectures, which is drawing increasing attention in Data Sharing (DS) applications. However, existing works reveal a gap in achieving accountability for anonymous access in the absence of a centralized trusted authority. To address this issue, this paper introduces InvisiReveal, a novel Blockchain-Based AC (BBAC) framework that achieves permission invisibility, access anonymity, and accountability without extra trust assumptions. Users in InvisiReveal generate anonymous credentials to authenticate their requests using Zero Knowledge Proof. To enable accountability, a novel blockchain-oriented verifiable commitment (BC-VC) protocol is designed that allows a user to commit a confidential traceable tag to the blockchain. The system could unveil a malicious requester’s identity by opening the tag commitment under collaboration with the victim user and blockchain. We implement a prototype of InvisiReveal to evaluate its practicality, where an access request is verified within 5 ms.

Adaptive context-aware access control for IoT environments leveraging fog computing

The increasing use of the Internet of Things (IoT) has driven the demand for enhanced and robust access control methods to protect resources from unauthorized access. A cloud-based access control approach brings significant challenges in terms of communication overhead, high latency, and complete reliance. In this paper, we propose a Fog-Based Adaptive Context-Aware Access Control (FB-ACAAC) framework for IoT devices, dynamically adjusting access policies based on contextual information to prevent unauthorised resource access. The main purpose of FB-ACAAC is to provide adaptability to changing access behaviors and context by bringing decision-making and information about policies closer to the end nodes of the network. FB-ACAAC improves the availability of resources and reduces the amount of time for information to be processed. FB-ACAAC extends the widely used eXtensible Access Control Markup Language (XACML) to manage access control decisions. Traditional XACML-based methods do not take into account changing environments, different contexts, and changing access behaviors and are vulnerable to certain types of attacks. To address these issues, FB-ACAAC proposes an adaptive context-aware XACML scheme for heterogeneous distributed IoT environments using fog computing and is designed to be context-aware, adaptable, and secure in the face of unauthorised access. The effectiveness of this new scheme is verified through experiments, and it has a low processing time overhead while providing extra features and improved security.

ZTA-IoT: A Novel Architecture for Zero-Trust in IoT Systems and an Ensuing Usage Control Model

Recently, several researchers motivated the need to integrate Zero Trust (ZT) principles when designing and implementing authentication and authorization systems for IoT. An integrated Zero Trust IoT system comprises the network infrastructure (physical and virtual) and operational policies in place for IoT as a product of a ZT architecture plan. This paper proposes a novel Zero Trust architecture for IoT systems called ZTA-IoT. Additionally, based on different types of interactions between various layers and components in this architecture, we present ZTA-IoT-ACF, an access control framework that recognizes different interactions that need to be controlled in IoT systems. Within this framework, the paper then refines its focus to object-level interactions, i.e., interactions where the target resource is a device (equivalently a thing) or an information file generated or stored by a device. Building on the recently proposed Zero Trust score-based authorization framework (ZT-SAF) we develop the object-level Zero Trust score-based authorization framework for IoT systems, denoted as ZTA-IoT-OL-SAF, to govern access requests in this context. With this machinery in place, we finally develop a novel usage control model for users-to-objects and devices-to-objects interactions, denoted as UCON IoT . We give formal definitions, illustrative use cases, and a proof-of-concept implementation of UCON IoT . This paper is a first step toward establishing a rigorous formally-defined score-based access control framework for Zero Trust IoT systems.

Exploring on Cloud Security Landscapes:A Comprehensive Review

Nowadays, the massive growth of data and the adoption of the cloud-based architecture indicate that the secure storage of data is a very essential issue. Cloud storage is the solution to convenient, scalable and cost-effective storage, yet security issues persist, especially regarding the protection of sensitive information. The encryption plays a vital role in which data is made unreadable and only accessible by those with the proper authorization. This helps in data management and minimizes data leaks. Shared responsibility in cloud security entails collaboration between the operators and users through the encryption strategy and a number of security measures to protect the data, apps, and infrastructure. This paper deals with the different cryptographic techniques and technologies used for improving cloud security. It discusses the notion of Non-Deterministic Cryptographic Scheme (NCS), which is a secure technique that effectively utilizes randomness in cryptographic algorithms. Regarding the Intel architecture compatibility, SGX and blockchain technology implementation not only ensures data immutability, but it also strengthens the data against cyber threats. SGX produces secure compartments inside cloud platforms, while blockchain makes data integrity possible through decentralized and immutable ledger technology. The research gives an impression of the seaside and multi sided cloud security. Involving encryption, access control, data loss prevention, and intrusion detection systems. Technologies of cryptography like Group Key Based Attribute Encryption (GKBAE) and Modified Random Fibonacci Cryptography (MRFC) offers both data protection and reduced resource requirement in clouds. GKBAE enables fine-grained access control and attribute-based encryption that ensures high data security without any additional computation. In addition, the paper also talks about the privacy-preserving technology, and policy-oriented access control framework. Techniques like Linear Elliptical Curve Digital Signature (LECDS) that combine digital signatures with blockchain technologies can also be used to implement the above features. To sum up, the changing scenario of cloud security requires ceaseless innovation and application of the latest cryptographic methods. Through encryption, hardware level security features and distributed ledger technology implementation, data environment is more strengthened and vulnerabilities to hacking, data leakage, and unauthorized access are decreased. Making use of the modern security tools not only does the data safety but also is responsible for the trustworthiness and stability of the cloud computing infrastructure. Keywords— Cloud Security, Encryption, Data Protection, Non-Deterministic Cryptographic Scheme (NCS), Intel SGX, Blockchain, Group Key Based Attribute Encryption (GKBAE), Modified Random Fibonacci Cryptography (MRFC), Data Confidentiality.

Blockchain-Enabled Secure Electronic Health Records Management: A Comprehensive Framework for Access Control, Encryption, Data Validation

Blockchain-Enabled Secure Electronic Health Records Management: A Comprehensive Framework for Access Control, Encryption, Data Validation

Correction to: A blockchain-based privacy-preserving and access-control framework for electronic health records management

Correction to: A blockchain-based privacy-preserving and access-control framework for electronic health records management

A Block Chain-Based Access Control Framework with Privacy Protection in Cloud

Access control is a pivotal aspect of modern computing systems, ensuring that only authorized entities can interact with sensitive data and resources. Traditional access control methods, while effective, face challenges in terms of security, transparency, and scalability. Blockchain technology has emerged as a promising solution to enhance access control in cloud computing environments. Blockchain's inherent features, such as decentralization, immutability, and cryptographic security, offer a unique framework for addressing the limitations of traditional access control systems. In this paper, we explore the integration of blockchain technology with cloud computing to establish a more secure and transparent access control mechanism. By utilizing blockchain, access control policies and permissions can be stored in a tamper-proof and transparent ledger. Scalability is an issue since processing many access control transactions on the blockchain might cause network congestion and sluggish processing. Transactions take time to upload to the blockchain, which can delay real-time access choices. It takes skill to integrate and manage blockchain and cloud technologies together. Choosing the correct consensus mechanism affects system efficiency and security. Consider the costs of establishing and maintaining such a system and the difficulty of fixing faults owing to blockchain immutability. In conclusion, this paper underscores the significance of access control in cloud computing and the limitations of traditional approaches. By harnessing the power of blockchain technology, a more secure, transparent, and scalable access control framework can be established, revolutionizing the way we manage access to sensitive data and resources in complex digital ecosystems.

A Smart-Contract-Based Policy-Domain Access Control Framework for Distributed Industrial IoT

A Smart-Contract-Based Policy-Domain Access Control Framework for Distributed Industrial IoT

Efficient and Secure Blockchain-Based Access Control for Fog-Assisted IoT Cloud in Electronic Medical Records Sharing

Fog-assisted IoT Cloud environments have emerged as a result of the rapid spread of Internet of Things (IoT) devices and the requirement for seamless data sharing in the healthcare industry. The effective and safe management of access control to sensitive data, such as Electronic Medical Records (EMRs), becomes crucial in such configurations. The Efficient and Secure Blockchain-Based Access Control (ESBAC) framework, designed specifically for Fog-assisted IoT Cloud scenarios in EMR sharing, is our creative approach to this problem. The ESBAC architecture makes use of the blockchain's openness and immutability to provide reliable access control and auditability. The implementation of a consortium blockchain includes participants including healthcare providers, patients, and authorised entities. Each EMR has a smart contract attached to it that specifies access restrictions and permissions to make sure that only authorised parties are able to access and edit the data. Because of the decentralisation provided by the blockchain, security and privacy are improved because no single party has overwhelming control. Proposed framework uses attribute-based access control and lightweight encryption methods to provide a fair trade-off between security and efficiency. As a result, there can be fine-grained access control policies with the least amount of computing overhead. Comprehensive simulations are used to evaluate the suggested solution and compare it to current methods. The outcomes show that ESBAC improves security in EMR sharing and greatly lowers access latency.

A blockchain-based privacy-preserving and access-control framework for electronic health records management

A blockchain-based privacy-preserving and access-control framework for electronic health records management

A blockchain based lightweight and secure access control framework for IoT-enabled supply chain

A blockchain based lightweight and secure access control framework for IoT-enabled supply chain

Design of access control framework for big data as a service platform

<span>Big data as a service (BDaaS) platform is widely used by various organizations for handling and processing the high volume of data generated from different internet of things (IoT) devices. Data generated from these IoT devices are kept in the form of big data with the help of cloud computing technology. Researchers are putting efforts into providing a more secure and protected access environment for the data available on the cloud. In order to create a safe, distributed, and decentralised environment in the cloud, blockchain technology has emerged as a useful tool. In this research paper, we have proposed a system that uses blockchain technology as a tool to regulate data access that is provided by BDaaS platforms. We are securing the access policy of data by using a modified form of ciphertext policy-attribute based encryption (CP-ABE) technique with the help of blockchain technology. For secure data access in BDaaS, algorithms have been created using a mix of CP-ABE with blockchain technology. Proposed smart contract algorithms are implemented using Eclipse 7.0 IDE and the cloud environment has been simulated on CloudSim tool. Results of key generation time, encryption time, and decryption time has been calculated and compared with access control mechanism without blockchain technology.</span>

MRAAC: A Multi-Stage Risk-Aware Adaptive Authentication and Access Control Framework for Android

Adaptive authentication enables smartphones and enterprise apps to decide when and how to authenticate users based on contextual and behavioral factors. In practice, a system may employ multiple policies to adapt its authentication mechanisms and access controls to various scenarios. However, existing approaches suffer from contradictory or insecure adaptations, which may enable attackers to bypass the authentication system. Besides, most existing approaches are inflexible and do not provide desirable access controls. We design and build a multi-stage risk-aware adaptive authentication and access control framework (MRAAC), which provides the following novel contributions: Multi-stage: MRAAC organizes adaptation policies in multiple stages to handle different risk types and progressively adapts authentication mechanisms based on context, resource sensitivity, and user authenticity. Appropriate access control: MRAAC provides libraries to enable sensitive apps to manage the availability of their in-app resources based on MRAAC’s risk awareness. Extensible: While existing proposals are tailored to cater to a single use case, MRAAC supports a variety of use cases with custom risk models. We exemplify these advantages of MRAAC by deploying it for three use cases: an enhanced version of Android Smart Lock, guest-aware continuous authentication, and corporate app for BYOD. We conduct experiments to quantify the CPU, memory, latency, and battery performance of MRAAC. Our evaluation shows that MRAAC enables various stakeholders (device manufacturers, enterprise and secure app developers) to provide complex adaptive authentication workflows on COTS Android with low processing and battery overhead.

A Literature Survey on Digital Identity Verification Based on Blockchain for Social Media

This review delves into the dynamic realms of digital identity and blockchain technology, thoroughly investigating recent advancements and inventive applications where these domains intersect. The examined literature covers a broad spectrum, encompassing diverse subjects like user authentication, decentralized identity management, secure access control frameworks, and accreditation systems. Through a meticulous analysis, the review unveils a variety of methodologies employed to enhance digital identity verification, capitalizing on blockchain's inherent attributes, including decentralization, immutability, and transparency.

HRL-Based Access Control for Wireless Communications With Energy Harvesting

This paper studies the access control problem of long-term throughput maximization in wireless communication systems with Energy Harvesting (EH). In the existing research, many access schemes based on accurate environmental information have been proposed, such as channel information and the EH process. However, access to environmental information is costly, and traditional access control frameworks are expensive to explore in high-dimensional spaces. Thus, an access control framework based on hierarchical reinforcement learning (HRL) is proposed in this paper. In HRL, the control problem in the Markov decision process (MDP) form is decomposed into a multilevel sequential control problem. It includes high-level channel number selection, mid-level channel selection, and low-level channel matching subproblems. The scheme is obtained by combining the solutions of subproblems at different level which are solved in sequence. In addition, to improve learning efficiency, the deterministic action (DA) module and the prior knowledge (PK) module are put forward. The DA module solves the channel matching problem under the additional guidance given by the previous subproblem, which selects definite good low-level actions. The PK module provides the framework with the common knowledge of the system structure learned from the hypothetical environment, so as to obtain better initial performance. Experimental results show that our framework achieves better performance and better learning efficiency compared with several recent transmission schemes. <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Note to Practitioners</i> —Access control is an important issue in wireless communication systems, and users need to be scheduled to solve the constraint of limited resources, such as energy usually provided by batteries. In recent years, in order to overcome the energy limitation, energy harvesting devices have been developed and applied to wireless communication systems. However, the energy collection ability of the system is greatly influenced by the environment, which leads to the poor performance of most traditional control schemes that rely on the prior knowledge of the environment. Therefore, this paper proposes a novel hierarchical reinforcement learning (HRL)-based model-free access control framework for wireless communication system to maximize the system throughput without any prior environmental knowledge. The scheme abstracts the original control problem into three sub-control sub control problems according to tasks and solves them sequentially, thus simplifying the original control problem. This scheme can not only learn independently, but also does not depend on the prior knowledge of the environment. Moreover, this method is also suitable for the large-scale environment while the conventional end-to-end reinforcement learning is not suitable for. Compared with traditional algorithms, our method has better performance and higher learning efficiency.

Zero Trust-Based Blockchain Based IoT Security with Consensus and Access Control Framework

As the Internet and computer technology develop, more gadgets are linked wirelessly, expanding the Internet of Things (IoT). IoT is a huge network of sensors and gateways that links them. IoT devices generate images, music, video, digital signals, and more by interacting with their surroundings. To exchange resources and information, all IoT equipment and apps may connect to the Internet. Everything is connected in our world. Due to the broad deployment and massive size of IoT devices, access control of device resources is problematic. Obtaining IoT device resources unlawfully will have major implications since they include personal and sensitive information. Many systems and situations employ access control technologies to secure resources. Discriminatory, identity-based, and MAC access control schemes are traditional (mandatory access control). However, these centralized methods have single-point failure, scalability issues, poor dependability, and low throughput. IoT devices may belong to several organizations or people, be mobile, and function badly, making centralized access management problematic. Another innovative data management solution is blockchain, which uses distributed storage to stabilize data. A transaction writes the data reading or modification record into a block, and the blocks are connected as a chain using a hash to maintain data integrity. It synchronizes data between nodes via a peer-to-peer network and consensus process, assuring data consistency for blockchain network participants. Zero Trust-Based Blockchain, an open source blockchain development platform, offers more efficient consensus methods, larger throughputs, smart contracts, and support for different organizations and ledgers. Proposed work build the fabric-IoT access control system using Zero Trust-Based Blockchain to apply blockchain technology to IoT access control in this study. Distributed processing and storage for IoT data may solve these critical issues with blockchain. Thus, developing distributed IoT-based e-healthcare services using blockchain technology may have been feasible. FabricIoT can keep records, handle dynamic access control, and solve the IoT access control problem using distributed architecture.

Blockchain-enabled Secure Communication Framework for Enhancing Trust and Access Control in the Internet of Vehicles (IoV)

Blockchain-enabled Secure Communication Framework for Enhancing Trust and Access Control in the Internet of Vehicles (IoV)

A Blockchain Based Scalable Domain Access Control Framework for Industrial Internet of Things

A Blockchain Based Scalable Domain Access Control Framework for Industrial Internet of Things