Access Control Model for Virtual Objects (Shadows) Communication for AWS Internet of Things
Access Control Model for Virtual Objects (Shadows) Communication for AWS Internet of Things
复制标题
AWS 物联网虚拟对象（影子）通信的访问控制模型
DOI：
10.1145/3176258.3176328
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Sandhu, Ravi
中科院分区：
文献类型：
--
作者：
Alshehri, Asma;Benson, James;Patwa, Farhan;Sandhu, Ravi
近年来，物联网（IoT）的概念得到了广泛的关注和发展。学术界对物联网的访问控制模型进行了大量研究，而公司已经部署了几个支持云的物联网平台。然而，对于支持云的物联网的正式访问控制模型还没有达成共识。面向访问控制（ACO）架构最近被提出用于支持云的物联网，其中虚拟对象（VOs）和云服务位于中间层。在ACO的基础上，已经发布了用于支持云的物联网中的虚拟对象通信的操作和管理访问控制模型，并以感知超速汽车为例进行了说明。在本文中，我们将AWS物联网作为主要的商业云-物联网平台进行研究，并研究其实现上述ACO和VO通信控制学术模型的适用性。虽然AWS物联网具有与VOs非常相似的数字阴影概念，但它缺乏明确的VO通信能力，因此无法进行VO通信控制。因此，AWS物联网与这些学术模型之间存在明显的不匹配。本文的主要贡献是通过展示如何使用AWS物联网机制有效地实现VO通信模型来调和这种不匹配。为此，我们开发了AWS物联网中虚拟对象（阴影）通信的访问控制模型，称为AWS-IoT- acmvo。在此模型的指导下，我们在AWS物联网中开发了超速汽车用例的概念验证实施，并提供了选定的性能测量。最后，我们讨论了该用例在AWS IoT中的可能替代实现。
The concept of Internet of Things (IoT) has received considerable attention and development in recent years. There have been significant studies on access control models for IoT in academia, while companies have already deployed several cloud-enabled IoT platforms. However, there is no consensus on a formal access control model for cloud-enabled IoT. The access-control oriented (ACO) architecture was recently proposed for cloud-enabled IoT, with virtual objects (VOs) and cloud services in the middle layers. Building upon ACO, operational and administrative access control models have been published for virtual object communication in cloud-enabled IoT illustrated by a use case of sensing speeding cars as a running example.In this paper, we study AWS IoT as a major commercial cloud-IoT platform and investigate its suitability for implementing the afore-mentioned academic models of ACO and VO communication control. While AWS IoT has a notion of digital shadows closely analogous to VOs, it lacks explicit capability for VO communication and thereby for VO communication control. Thus there is a significant mismatch between AWS IoT and these academic models. The principal contribution of this paper is to reconcile this mismatch by showing how to use the mechanisms of AWS IoT to effectively implement VO communication models. To this end, we develop an access control model for virtual objects (shadows) communication in AWS IoT called AWS-IoT-ACMVO. We develop a proof-of-concept implementation of the speeding cars use case in AWS IoT under guidance of this model, and provide selected performance measurements. We conclude with a discussion of possible alternate implementations of this use case in AWS IoT.
DOI：
10.1109/icsenst.2012.6461705
发表时间：
2012-12
期刊：
2012 Sixth International Conference on Sensing Technology (ICST)
影响因子：
--
作者：
Prahlada Rao B.B.;P. Saluia;N. Sharma;A. Mittal;S. Sharma
通讯作者：
Prahlada Rao B.B.;P. Saluia;N. Sharma;A. Mittal;S. Sharma
AWS 公共云中基于社区的安全信息和资源共享
DOI：
10.1109/cic.2015.42
发表时间：
2015
期刊：
2015 IEEE Conference on Collaboration and Internet Computing (CIC)
影响因子：
--
作者：
Yun Zhang;Farhan Patwa;R. Sandhu
通讯作者：
R. Sandhu
影响因子：
35.6
作者：
Al-Fuqaha, Ala;Guizani, Mohsen;Ayyash, Moussa
通讯作者：
Ayyash, Moussa