Abstract:Future smart cities and intelligent world will have connected vehicles and smart cars as its indispensable and most essential components. The communication and interaction among such connected entities in this vehicular internet of things (IoT) domain, which also involves smart traffic infrastructure, road-side sensors, restaurant with beacons, autonomous emergency vehicles, etc., offer innumerable real-time user applications and provide safer and pleasant driving experience to consumers. Having more than 100 million lines of code and hundreds of sensors, these connected vehicles (CVs) expose a large attack surface, which can be remotely compromised and exploited by malicious attackers. Security and privacy are serious concerns that impede the adoption of smart connected cars, which if not properly addressed will have grave implications with risk to human life and limb. In this research, we present a formalized dynamic groups and attribute-based access control (ABAC) model (referred as \cvac) for smart cars ecosystem, where the proposed model not only considers system wide attributes-based security policies but also takes into account the individual user privacy preferences for allowing or denying service notifications, alerts and operations to on-board resources. Further, we introduce a novel notion of groups in vehicular IoT, which are dynamically assigned to moving entities like connected cars, based on their current GPS coordinates, speed or other attributes, to ensure relevance of location and time sensitive notification services to the consumers, to provide administrative benefits to manage large numbers of smart entities, and to enable attributes and alerts inheritance for fine-grained security authorization policies. We present proof of concept implementation of our model in AWS cloud platform demonstrating real-world uses cases along with performance metrics.

Efficient and Secure Access Control Scheme in the Standard Model for Vehicular Cloud Computing

A Novel Anonymous Authentication Scheme Based on Edge Computing in Internet of Vehicles

Adaptive Multimedia Data Forwarding for Privacy Preservation in Vehicular Ad-Hoc Networks.

An ECC-based access control scheme with lightweight decryption and conditional authentication for data sharing in vehicular networks

An Identity-Based and Revocable Data-Sharing Scheme in VANETs

A Lightweight CP-ABE Scheme with Direct Attribute Revocation for Vehicular Ad Hoc Network

Extensible Conditional Privacy Protection Authentication Scheme for Secure Vehicular Networks in a Multi-Cloud Environment

Enabling Efficient Data Sharing With Auditable User Revocation for IoV Systems

Publicly Accountable Data-sharing Scheme Supporting Privacy Protection for Fog-enabled VANETs

SEMD: Secure and Efficient Message Dissemination with Policy Enforcement in VANET

Fog-Aided Verifiable Privacy Preserving Access Control for Latency-Sensitive Data Sharing in Vehicular Cloud Computing

Toward Achieving Fine-Grained Access Control of Data in Connected and Autonomous Vehicles

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Dynamic fine-grained access control scheme for vehicular ad hoc networks

Secure and Efficient Lightweight Protocol for Emergency Vehicle Avoidance Based on Cloud

A lightweight CP‐ABE scheme in the IEEEP1363 standard with key tracing and verification and its application on the Internet of Vehicles

Secure Cloud Assisted Smart Cars Using Dynamic Groups and Attribute Based Access Control

RAAC: Robust and Auditable Access Control with Multiple Attribute Authorities for Public Cloud Storage

An Effective and Secure Access Control System Scheme in the Cloud

A Semi-Decentralized Security Framework for Connected and Autonomous Vehicles

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing