title: Spatiotemporal access model based on reputation for the sensing layer of the IoT.
abstract: Access control is a key technology in providing security in the Internet of Things (IoT). The mainstream security approach proposed for the sensing layer of the IoT concentrates only on authentication while ignoring the more general models. Unreliable communications and resource constraints make the traditional access control techniques barely meet the requirements of the sensing layer of the IoT. In this paper, we propose a model that combines space and time with reputation to control access to the information within the sensing layer of the IoT. This model is called spatiotemporal access control based on reputation (STRAC). STRAC uses a lattice-based approach to decrease the size of policy bases. To solve the problem caused by unreliable communications, we propose both nondeterministic authorizations and stochastic authorizations. To more precisely manage the reputation of nodes, we propose two new mechanisms to update the reputation of nodes. These new approaches are the authority-based update mechanism (AUM) and the election-based update mechanism (EUM). We show how the model checker UPPAAL can be used to analyze the spatiotemporal access control model of an application. Finally, we also implement a prototype system to demonstrate the efficiency of our model.
authors.affiliation: Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China ; Beijing Key Laboratory of IOT Information Security, Beijing 100093, China.
authors.forename: Yunchuan
authors.initials: Y
authors.lastname: Guo
authors.affiliation: Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China ; Beijing Key Laboratory of IOT Information Security, Beijing 100093, China.
authors.forename: Lihua
authors.initials: L
authors.lastname: Yin
authors.affiliation: Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China ; Beijing Key Laboratory of IOT Information Security, Beijing 100093, China.
authors.forename: Chao
authors.initials: C
authors.lastname: Li
authors.affiliation: Guangxi Key Laboratory of Trusted Software, Guilin University of Electronic Technology, Guilin 541004, China.
authors.forename: Junyan
authors.identifier: 0000-0002-1325-6975
authors.initials: J
authors.lastname: Qian
mesh_terms: D000465:Algorithms; D003199:Computer Systems; D058998:Remote Sensing Technology