Capabilities-based access control for IoT devices using Verifiable Credentials
No Thumbnail Available
Access rights
openAccess
Journal Title
Journal ISSN
Volume Title
Conference article in proceedings
This publication is imported from Aalto University research portal.
View publication in the Research portal
Other link related to publication
View publication in the Research portal
Other link related to publication
Date
2022-07-25
Department
Major/Subject
Mcode
Degree programme
Language
en
Pages
7
222-228
222-228
Series
2022 IEEE Security and Privacy Workshops (SPW)
Abstract
Capabilities-based access control is a promising paradigm that can handle the particularities of IoT systems. Nevertheless, existing systems are not interoperable and they have limitations, such as lack of proof of possession, inefficient revocation mechanisms, and reliance on trusted third parties. In this paper we overcome these limitations by designing and implementing a system that leverages Verifiable Credentials (VCs) to encode the access rights. Our solution specifies protocols for requesting and using VCs that can be mapped to OAuth 2.0, includes an efficient and privacy preserving proof of possession mechanism, and it supports revocation. We implement and evaluate our solution and we show that it can be directly used even by constrained devices.Description
| openaire: EC/H2020/957246/EU//IoT-NGIN
Keywords
decentralized identifiers, OAuth 2.0, Proof-of-Possession, internet of things
Other note
Citation
Fotiou, N, Siris, V A, Polyzos, G C, Kortesniemi, Y & Lagutin, D 2022, Capabilities-based access control for IoT devices using Verifiable Credentials . in Proceedings - 43rd IEEE Symposium on Security and Privacy Workshops, SPW 2022 . IEEE Security and Privacy Workshops, IEEE, pp. 222-228, IEEE Workshop on the Internet of Safe Things, San Francisco, California, United States, 26/05/2022 . https://doi.org/10.1109/SPW54247.2022.9833873
