An Access Control Model for Resource Sharing Based on the Role-Based Access Control Intended for Multi-Domain Manufacturing Internet of Things
An Access Control Model for Resource Sharing Based on the Role-Based Access Control Intended for Multi-Domain Manufacturing Internet of Things
复制标题
DOI：
10.1109/access.2017.2693380
复制
发表时间：
2017-01-01
期刊：
影响因子：
3.9
通讯作者：
Chen, Xin
中科院分区：
文献类型：
--
作者：
Liu, Qiang;Zhang, Hao;Chen, Xin
制造物联网（MIoT）代表了面向物联网的制造，具有两个重要特征：资源共享和流程协作。资源共享中的访问控制对于MIoT运行安全非常重要。本文提出了一种基于多域 MIoT 的基于角色的访问控制的资源共享访问控制模型。在多域系统中，为了响应特定用户对特定角色的权限分配请求，采用称为授权路由的权限动作序列来确定适当的授权状态。本文将权限分布最小的最佳授权路径定义为最优授权路径。我们采用智能规划理论对授权路径问题进行建模，并开发了一种名为 PGAO* 的解决算法，该算法可以支持单目标角色授权路径和多目标角色授权路径的外部评估。此外，还提出了一些解决授权路由问题的简单策略。所提出的访问控制模型为协作域中的管理员提供快速高效的授权决策支持，并确保MIoT资源共享中的安全访问。
Manufacturing Internet of Things (MIoT) represents the manufacturing oriented to Internet of Things with two important characteristics, resource sharing and process collaboration. Access control in resource sharing is very important for MIoT operation safety. This paper presents an access control model for resource sharing based on the role-based access control intended for multidomain MIoT. In multidomain systems, in order to response on the assigning request for permission for the certain role from the certain user, an authority action sequence named the authorization route is employed to determine an appropriate authorization state. In this paper, the best authorization route with the least spread of permissions is defined as an optimal authorization route. We employed an intelligent planning theory to model the authorization route problem and to develop a solution algorithm called PGAO*, which can support external evaluation of both single-goal-role authorization routes and multi-goal-role authorization routes. In addition, some simple policies for solving the authorization route problem are presented. The proposed access control model provides a quick and efficient authorization decision support for administrators in collaborative domain and ensures a secure access in resource sharing in MIoT.