Role-Based Administration of Role-Based Smart Home IoT
Role-Based Administration of Role-Based Smart Home IoT
复制标题
DOI：
10.1145/3445969.3450426
复制
发表时间：
2021-04
期刊：
影响因子：
--
通讯作者：
Mehrnoosh Shakarami;R. Sandhu
中科院分区：
文献类型：
--
作者：
Mehrnoosh Shakarami;R. Sandhu
使用基于角色的访问控制（RBAC）来管理RBAC是RBAC吸引人的优点之一，有助于其在实践中长期占据主导地位。管理模型便于管理底层操作模型中的更改（主要是配置）。总体系统安全性在很大程度上取决于管理和运营模式。在本文中，我们开发了一个RBAC管理模型来管理智能家居物联网的EGRBAC（增强型广义基于角色的访问控制）操作模型中的授权分配。我们设计的管理模型的基础上成对不相交的行政单位，其中每一个包含一个唯一分配的管理角色和一组管理任务。管理任务确定可用于管理操作模型分配的管理权限。我们开始使用一个包含单个管理单元的模型，然后扩展它以包含其他单元。多个管理单元实现了分散式管理，可以在智能家居之外的固有分布式和大规模环境中提供可扩展性，例如智能建筑或智能校园。我们提供了我们提出的模型的形式化，并通过指定操作和管理用例来说明它。虽然该模型是基于特定的智能家居操作模型提出的，但我们的方法可以应用于具有类似动态的环境。
Using role-based access control (RBAC) to manage RBAC is among RBAC's attractive benefits, contributing to its long-standing dominance in practice. Administrative models facilitate management of (mostly configuration) changes in the underlying operational models. Overall system security is crucially dependent on both the administrative and operational models. In this paper, we develop an RBAC administrative model to manage authorization assignments in the EGRBAC (enhanced generalized role-based access control) operational model for smart home IoT. We design the administrative model based on pairwise disjoint Administrative Units, each of which contains a uniquely assigned administrative role and a set of administrative tasks. Administrative tasks determine the administrative permissions available to manage the operational model assignments. We begin with a model containing a single administrative unit and then extend it to include additional units. Multiple administrative units enable decentralized administration which could be adapted to provide scalability in inherently distributed and large-scale environments beyond smart home, such as smart buildings or smart campuses. We provide formalism of our proposed model and illustrate it by specifying operational and administrative use cases. Although, the model is proposed based on a specific smart home operational model, our approach could be applied to environments with similar dynamics.