IoT 환경에서 사물-스마트 단말간 데이터 스트리밍 처리를 위한 속성기반 암호를 이용한 접근제어 기법
Access Control Method Using Attribute-based Encryption for Data Streaming Processing among Smart Devices in the IoT Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
IoT(Internet of Things)는 IoT 사물(Thing)에 센서와 네트워크 기능을 부여해서 모든 사물들이 마치 유기적으로 연결된 것처럼 동작하여 고지능형 데이터를 생성하고, 이 데이터를 이용해서 사용자들에게 양질의 인텔리전스(Intelligence) 서비스 제공을 가능하게 하는 차세대 네트워크 환경이다. 현재 전 세계적으로 IoT의 기술과 서비스에 대한 관심이 증가함과 동시에, 보안성에 관한 관심도 증가하고 있다. IoT 환경이 기존의 네트워크 환경들과 다른 주된 차이점은 다양한 스마트 단말들로부터 수집되는 데이터를 이용하여 새로운 지능형 서비스를 창출할 수 있다는 점에 있다. 이러한 특징을 실현하기 위해서는 각종 센서, 스마트폰 등과 같은 다양한 형태의 스마트 단말들이 필요하고, 이에 대한 접근제어가 중요한 이슈가 된다. IoT 환경에서는 다수의 스마트 단말들이 사용되기 때문에 모든 단말에서 일일이 사용자의 접근권한을 확인하는 것은 성능 저하의 요인이 된다. 본 논문에서는, 속성기반 암호(Attibute-Based Encryption)의 특징을 이용하여 IoT 환경에 적합한 접근제어 방법을 제안한다.
Abstract
IoT(Internet of Things) operate as seamless connection among everything by granting sensing and network function to IoT Things, it is next generation network environment which can produce high-intelligent data, provide a high-quality intelligence service to users based on high-intelligent data. In these day, interest in IoT technologies and services is increasing around the world, while, interest in security is also increasing. The main difference between IoT environment and existing network environment is that IoT can create new intelligence service by using data collected from various smart devices. For realizing these features, it need various type of smart devices such as various sensor, smartphone, an access control for these devices is important issue. Because various smart devices are used in IoT environment, checking accessibilities of every user on all IoT devices is a cause of performance degradation. This paper suggest access control method suitable for IoT environment by using Attribute-Based Encryption features.
참고문헌 (22)
- David Ferraiolo, "Role-based access control (RBAC): Features and motivations", Proceedings of 11th Annual Computer Security Application Conference, pp.241~248 (1995)
- Sudip Chakraborty, "TrustBAC:integrating trust relationships into the RBAC model for access control in open systems", Proceedings of the eleventh ACM symposium on Access control models and technologies, pp.49~58 (2006), ACM
- Elisa Bertino, "Proceedings of the tenth ACM symposium on Access control models and technologies", Proceedings of the tenth ACM symposium on Access control models and technologies, ACM, 2005, pp.29~37 (2005), ACM
- Jacques Wainer, "W-RBAC-A workflow security model incorporating controlled overriding of constraints", International Journal of Cooperative Information Systems, 12(04), pp.455~485 (2003)
- Eric Yuan, "Attributed based access control (ABAC) for web services", Web Services, 2005. ICWS 2005. Proceedings. 2005 IEEE International Conference on. IEEE (2005)
- Rakeshbabu Bobba, "Using attribute-based access control to enable attribute-based messaging", Computer Security Applications Conference, 2006. ACSAC'06. 22nd Annual, pp.403~413 (2006), IEEE
- Ian Foster Bo Lang, "A flexible attribute based access control method for grid computing", Journal of Grid Computing, 7(2), pp.169~180 (2009)
- Torsten Priebe, "Supporting Attributebased Access Control in Authorization and Authentication Infrastructures with Ontologies", Journal of Software, 2(1) (2007)
- Xin Jin, "Data and Applications Security and Privacy XXVI", pp.41~55 (2012), Springer Berlin Heidelberg
- Jing Liu, "Authentication and Access Control in the Internet of Things", ICDCS Workshops, pp.588~592 (2012)
- Mahalle, Parikshit N, "Identity establishment and capability based access control (IECAC) scheme for Internet of Things", Wireless Personal Multimedia Communications (WPMC), 2012 15th International Symposium on, IEEE, 2012, pp.187~191 (2012)
- Eberhard Grummt, "The Internet of Things", pp.35~49 (2008), Springer
- Sergio Gusmeroli, "IoT Access Control Issues: A Capability Based Approach", Innovative Mobile and Internet Services in Ubiquitous Computing (IMIS), 2012 Sixth International Conference on, pp.787~792 (2012), IEEE
- Degan Zhang, "A new medium access control protocol based on perceived data reliability and spatial correlation in wireless sensor network", Computers &Electrical Engineering, 38(3), pp.694~702 (2012)
- John Bethencourt, "Ciphertext-policy attribute-based encryption", Security and Privacy, 2007. SP'07. IEEE Symposium on, pp.321~334 (2007), IEEE
- Amit Sahai, "Advances in Cryptology EUROCRYPT 2005", pp.457~473 (2005), Springer Berlin Heidelberg
- Wang, Changji, "A fuzzy identity based signature scheme", E-Business and Information System Security, 2009. EBISS'09. International Conference on. IEEE (2009)
- Vipul Goyal, "Attribute-based encryption for fine-grained access control of encrypted data", Proceedings of the 13th ACM conference on Computer and communications security, pp.89~98 (2006), ACM
- Brent Waters, "Public Key Cryptography PKC 2011", pp.53~70 (2011), Springer Berlin Heidelberg
- Vipul Goyal, "Automata, Languages and Programming", pp.579~591 (2008), Springer Berlin Heidelberg
- Keita Emura, "Information Security Practice and Experience", pp.13~23 (2009), Springer Berlin Heidelberg
- Vipul Goyal, "Automata, Languages and Programming", pp.579~591 (2008), Springer Berlin Heidelberg