title: Preserving Smart Objects Privacy through Anonymous and Accountable Access Control for a M2M-Enabled Internet of Things.
abstract: As we get into the Internet of Things era, security and privacy concerns remain as the main obstacles in the development of innovative and valuable services to be exploited by society. Given the Machine-to-Machine (M2M) nature of these emerging scenarios, the application of current privacy-friendly technologies needs to be reconsidered and adapted to be deployed in such global ecosystem. This work proposes different privacy-preserving mechanisms through the application of anonymous credential systems and certificateless public key cryptography. The resulting alternatives are intended to enable an anonymous and accountable access control approach to be deployed on large-scale scenarios, such as Smart Cities. Furthermore, the proposed mechanisms have been deployed on constrained devices, in order to assess their suitability for a secure and privacy-preserving M2M-enabled Internet of Things.
authors.affiliation: Department of Information and Communications Engineering, Computer Science Faculty, University of Murcia, Murcia 30100, Spain. jluis.hernandez@um.es.
authors.forename: José L
authors.initials: JL
authors.lastname: Hernández-Ramos
authors.affiliation: Department of Information and Communications Engineering, Computer Science Faculty, University of Murcia, Murcia 30100, Spain. jorgebernal@um.es.
authors.forename: Jorge Bernal
authors.initials: JB
authors.lastname: Bernabe
authors.affiliation: Department of Information and Communications Engineering, Computer Science Faculty, University of Murcia, Murcia 30100, Spain. mvmoreno@um.es.
authors.forename: M Victoria
authors.initials: MV
authors.lastname: Moreno
authors.affiliation: Department of Information and Communications Engineering, Computer Science Faculty, University of Murcia, Murcia 30100, Spain. skarmeta@um.es.
authors.forename: Antonio F
authors.initials: AF
authors.lastname: Skarmeta
keywords: Internet of Things; access control; anonymous credential systems; certificateless cryptography; privacy