Managing Access Control in Large-Scale Multi-party IoT Systems
Pavana Pradeep Kumar, Krishna Kant, Amitangshu Pal · 2022 22nd IEEE International Symposium on Cluster, Cloud and Internet Computing (CCGrid) · 2022
Large-scale loT systems are likely to involve mul-tiple subsystems deployed and operated by different “parties”, which must collaborate to ensure that their operational rules do not conflict. We codify the smooth functioning of the entire system through a set of “safety properties” that must be enforced collaboratively. However, this requires cross-party access to the sensors/actuators state and the ability to request remote actuations. In this paper, we define an access control architecture for such situations where we distinguish between the static authorization problem that selects parties tasked with safety property enforcement and the dynamic (run-time) control over accesses. This results in a unique enforcer selection problem for which we develop efficient algorithms and quantify their performance through a comprehensive emulation of an extensive smart home. We also show that the additional cost of granting access rights to the parties is quite small in a medium-size emulated multiparty loT environment.