An Authentication and Authorization Infrastructure for the Web of Things
Marlon Cordeiro Domenech, Azzedine Boukerche, Michelle Silva Wangham · 2016
Due to the distributed feature of the Web of Things (WoT) and its heterogeneous and constrained devices, it is a challenge to provide authentication and authorization mechanisms aligned to the requirements of the WoT scenario. This work presents an Authentication and Authorization Infrastructure for the WoT (AAI4WoT) based on SAML and XACML standards. AAI4WoT provides cross-domain single sign-on solutions for devices and users using different authentication mechanisms, as well as enabling service providers to use different access control models. AAI4WoT is appropriate for distributed applications involving M2M (Machine to Machine) communication. As a proof of concept, a prototype of AAI4WoT was developed and integrated into a WoT industrial application (real case study at an apparel factory). Functional testing and performance evaluation confirmed the feasibility of the solution in this case study.