Addressing Data-Centric Security Requirements for IoT-Based Systems
- Allowing users to control access to their data is paramount for the success of the Internet of Things; therefore, it is imperative to ensure it, even when data has left the users' control, e.g. shared with cloud infrastructure. Consequently, we propose several state of the art mechanisms from the security and privacy research fields to cope with this requirement. To illustrate how each mechanism can be applied, we derive a data-centric architecture providing access control and privacy guaranties for the users of IoT-based applications. Moreover, we discuss the limitations and challenges related to applying the selected mechanisms to ensure access control remotely. Also, we validate our architecture by showing how it empowers users to control access to their health data in a quantified self use case.
Author: | Juan D. Parra Rodriguez, Daniel Schreckling, Joachim PoseggaORCiDGND |
---|---|
URN: | urn:nbn:de:bvb:739-opus4-6546 |
DOI: | https://doi.org/10.1109/SIoT.2016.007 |
ISBN: | 978-1-5090-5091-8 |
Parent Title (English): | 2016 International Workshop on Secure Internet of Things (SIoT) |
Publisher: | IEEE Xplore |
Place of publication: | Heraklion, Greece |
Document Type: | Conference Proceeding |
Language: | English |
Year of Completion: | 2017 |
Date of Publication (online): | 2017/04/27 |
Date of first Publication: | 2017/04/27 |
Publishing Institution: | Universität Passau |
Release Date: | 2019/07/30 |
Tag: | Data-Centric Security; Differential Privacy; Internet of Things; Secure Cloud Storage; Security Architecture |
Page Number: | [10] Seiten |
Institutes: | Fakultät für Informatik und Mathematik |
Dewey Decimal Classification: | 0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 004 Datenverarbeitung; Informatik |
open_access (DINI-Set): | open_access |
Licence (German): | Standardbedingung laut Einverständniserklärung |