Research and application of secure access control method for multi-granularity sensitive resource of industrial IoT based on DC-MABAC hybrid model
Mingshi Li, Yue Ma, Zhenyu Yin, Chunxiao Wang, Anying Chai · 2022 34th Chinese Control and Decision Conference (CCDC) · 2022
The secure access method and dynamic authorization management mechanism of multi-grained sensitive data in industrial IoT environment are the key issues of current research in the field of industrial IoT secure communication. In this article, we analyze the dynamic correlation law between multiple permissions, roles, scenarios and resources, introduce a dynamic change mechanism of multi-granularity resource sensitivity and communication environment in the process of information access. We propose a secure access control method for multi-granularity sensitive resource of industrial IoT, establish a secure access hybrid model DC-MABAC for industrial IoT based on dynamic permission assignment, and determine a multi-granularity sensitive resource access mechanism with a combination of roles and attributes. This method can dynamically adjust the access permissions of users, complete hierarchical dynamic access permissions control, and realize the relative isolation of sensitive information such as fault data, processing data, and health status data. We verily the effectiveness of the security access decision mechanism by applying the DC model to the security access control subsystem in practice. And we further evaluate the security of the access control method proposed in this paper in combination with the security constraints defined in the model comprehensively.The example validation shows that this method can improve the security of sensitive resource data access control.