Abstract:With the rapid advancement of network communication and big data technologies, the Internet of Things (IoT) has permeated every facet of our lives. Meanwhile, the interconnected IoT devices have generated a substantial volume of data, which possess both economic and strategic value. However, owing to the inherently open nature of IoT environments and the limited capabilities and the distributed deployment of IoT devices, traditional access control methods fall short in addressing the challenges of secure IoT data management. On the one hand, the single point of failure issue is inevitable for the centralized access control schemes. On the other hand, most decentralized access control schemes still face problems such as token underutilization, the insecure distribution of user permissions, and inefficiency.This paper introduces a blockchain-based access control framework to address these challenges. Specifically, the proposed framework enables data owners to host their data and achieves user-defined lightweight data management. Additionally, through the strategic amalgamation of smart contracts and hash-chains, our access control scheme can limit the number of times (i.e., n-times access) a user can access the IoT data before the deadline. This also means that users can utilize their tokens multiple times (predefined by the data owner) within the deadline, thereby improving token utilization while ensuring strict access control. Furthermore, by leveraging the intrinsic characteristics of blockchain, our framework allows data owners to gain capabilities for auditing the access records of their data and verifying them. To empirically validate the effectiveness of our proposed framework and approach, we conducted extensive simulations, and the experimental results demonstrated the feasibility and efficiency of our solution.

Access Control for Physical Objects in Internet of Things

Security and Privacy Issues of Physical Objects in the IoT: Challenges and Opportunities

Access Control for IoT: A Survey of Existing Research, Dynamic Policies and Future Directions

Sensor-based IoT Data Privacy Protection

Access Control Models and Frameworks for the IoT Environment: Review, Challenges, and Future Direction

Access Control in Internet of Things: A Survey

Smart Contract-Based Access Control for the Internet of Things

Security Challenges and Concerns of Internet of Things (IoT)

A permission‐combination scalable access control model for Internet of things

An Efficient, Accountable, and Privacy-Preserving Access Control Scheme for Internet of Things in a Sharing Economy Environment

SecIoT: a security framework for the Internet of Things

Privacy in Internet of Things: From Principles to Technologies

A survey of security and privacy issues in the Internet of Things from the layered context

Privacy-Preserving Flexible Access Control for Encrypted Data in Internet of Things

Physical Security and Safety of IoT Equipment: A Survey of Recent Advances and Opportunities

Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

The Study on Security in Internet of Things (IoT)

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things

Internet of Things Security, Device Authentication and Access Control: A Review

Security of the Internet of Things: Perspectives and Challenges

N-Accesses: A Blockchain-Based Access Control Framework for Secure IoT Data Management