Abstract:Future smart cities and intelligent world will have connected vehicles and smart cars as its indispensable and most essential components. The communication and interaction among such connected entities in this vehicular internet of things (IoT) domain, which also involves smart traffic infrastructure, road-side sensors, restaurant with beacons, autonomous emergency vehicles, etc., offer innumerable real-time user applications and provide safer and pleasant driving experience to consumers. Having more than 100 million lines of code and hundreds of sensors, these connected vehicles (CVs) expose a large attack surface, which can be remotely compromised and exploited by malicious attackers. Security and privacy are serious concerns that impede the adoption of smart connected cars, which if not properly addressed will have grave implications with risk to human life and limb. In this research, we present a formalized dynamic groups and attribute-based access control (ABAC) model (referred as \cvac) for smart cars ecosystem, where the proposed model not only considers system wide attributes-based security policies but also takes into account the individual user privacy preferences for allowing or denying service notifications, alerts and operations to on-board resources. Further, we introduce a novel notion of groups in vehicular IoT, which are dynamically assigned to moving entities like connected cars, based on their current GPS coordinates, speed or other attributes, to ensure relevance of location and time sensitive notification services to the consumers, to provide administrative benefits to manage large numbers of smart entities, and to enable attributes and alerts inheritance for fine-grained security authorization policies. We present proof of concept implementation of our model in AWS cloud platform demonstrating real-world uses cases along with performance metrics.

Toward Achieving Fine-Grained Access Control of Data in Connected and Autonomous Vehicles

A Semi-Decentralized Security Framework for Connected and Autonomous Vehicles

Secure Cloud Assisted Smart Cars Using Dynamic Groups and Attribute Based Access Control

RFAP: A Revocable Fine-Grained Access Control Mechanism for Autonomous Vehicle Platoon

AACS: A Secure Attribute Based Data Access Control for Cloud-aided Internet of Vehicles Using SGX

Efficient and Secure Access Control Scheme in the Standard Model for Vehicular Cloud Computing

Secure Operations of Connected and Autonomous Vehicles

Adaptive Multimedia Data Forwarding for Privacy Preservation in Vehicular Ad-Hoc Networks.

FADB: A Fine-Grained Access Control Scheme for VANET Data Based on Blockchain.

Dynamic fine-grained access control scheme for vehicular ad hoc networks

Secure, Efficient and Revocable Data Sharing Scheme for Vehicular Fogs

Enabling Efficient Data Sharing With Auditable User Revocation for IoV Systems

Flexible and Secure Cross-Domain Signcrypted Data Authorization in Multi-Platoon Vehicular Networks

Cognitive Risk Control for Anti-Eavesdropping in Connected and Autonomous Vehicles Network

Chaotic Map-Based Authentication Scheme Using Physical Unclonable Function for Internet of Autonomous Vehicle

An Identity-Based and Revocable Data-Sharing Scheme in VANETs

Secure Control of Connected and Automated Vehicles Using Trust-Aware Robust Event-Triggered Control Barrier Functions

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

BFDAC: A Blockchain-Based and Fog-Computing-Assisted Data Access Control Scheme in Vehicular Social Networks

An ECC-based access control scheme with lightweight decryption and conditional authentication for data sharing in vehicular networks

Fine-grained access control based on Trusted Execution Environment