A Model to Enable Application-scoped Access Control as a Service for IoT Using OAuth2.0
- 1. A Model to Enable Application-scoped Access Control as a Service for IoT Using OAuth 2.0 Federico Fernández (Technical University of Madrid), Álvaro Alonso (Technical University of Madrid), Lourdes Marco (Technical University of Madrid), Joaquín Salvachúa (Technical University of Madrid) Special Session: Trust and Access Control for the Internet of Things March 8, 2017
- 2. Outline 1. Introduction • Interaction between services and IoT devices • Requirements 2. Contribution • As-a-service access control using OAuth 2.0 • Main components of our model 3. Conclusions • Achievements • Future lines 2March 8, 2017 Special Session: Trust and Access Control for the Internet of Things
- 3. Securing interactions IoT↔Services • Devices in IoT interact with services – Sensors: publish information – Actuators: read information • Requirements to secure these interactions – Application-scoped – Client-independent – Flexible – Delegated 3March 8, 2017 Special Session: Trust and Access Control for the Internet of Things
- 4. 4March 8, 2017 Special Session: Trust and Access Control for the Internet of Things As-a-service AC using OAuth 2.0
- 5. • Identity Provider (IdP) – Credentials (username+password) – Groups of devices – Role assignment – Service registration (OAuth 2.0 credentials) • Policy Administration Point (PAP) – Permissions & roles management • Policy Enforcement Point (PEP) – Roles information retrieval from IdP – One for each service • Policy Decision Point (PDP) – Policies fetch from database to make final decision 5March 8, 2017 Special Session: Trust and Access Control for the Internet of Things As-a-service AC using OAuth 2.0
- 6. • Enable access control in IoT contexts • OAuth 2.0 protocol – Interoperability with other RESTful services – Light for devices • An as-a-service authorization layer that can be added • Centrally-managed policies Future lines • Implement and validate – Already on-going in the scope of FIWARE 6March 8, 2017 Special Session: Trust and Access Control for the Internet of Things Conclusions
- 7. Thank you! #ICIN2017 Special Session: Trust and Access Control for the Internet of Things March 8, 2017
Editor's Notes
- #4: Hablar de related work!