An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living
The presence of the Internet of Things (IoT) in healthcare through the use of mobile medical applications and wearable devices allows patients to capture their healthcare data and enables healthcare professionals to be up-to-date with a patient’s status. Ambient Assisted Living (AAL), whic...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2018-05-01
|
| Series: | Informatics |
| Subjects: | |
| Online Access: | http://www.mdpi.com/2227-9709/5/2/23 |
| _version_ | 1828157310163222528 |
|---|---|
| author | Usama Salama Lina Yao Hye-young Paik |
| author_facet | Usama Salama Lina Yao Hye-young Paik |
| author_sort | Usama Salama |
| collection | DOAJ |
| description | The presence of the Internet of Things (IoT) in healthcare through the use of mobile medical applications and wearable devices allows patients to capture their healthcare data and enables healthcare professionals to be up-to-date with a patient’s status. Ambient Assisted Living (AAL), which is considered as one of the major applications of IoT, is a home environment augmented with embedded ambient sensors to help improve an individual’s quality of life. This domain faces major challenges in providing safety and security when accessing sensitive health data. This paper presents an access control framework for AAL which considers multi-level access and privacy preservation. We focus on two major points: (1) how to use the data collected from ambient sensors and biometric sensors to perform the high-level task of activity recognition; and (2) how to secure the collected private healthcare data via effective access control. We achieve multi-level access control by extending Public Key Infrastructure (PKI) for secure authentication and utilizing Attribute-Based Access Control (ABAC) for authorization. The proposed access control system regulates access to healthcare data by defining policy attributes over healthcare professional groups and data classes classifications. We provide guidelines to classify the data classes and healthcare professional groups and describe security policies to control access to the data classes. |
| first_indexed | 2024-04-11T23:26:34Z |
| format | Article |
| id | doaj.art-765cbf12c4654f5f9a5ca1f8423c82a9 |
| institution | Directory Open Access Journal |
| issn | 2227-9709 |
| language | English |
| last_indexed | 2024-04-11T23:26:34Z |
| publishDate | 2018-05-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Informatics |
| spelling | doaj.art-765cbf12c4654f5f9a5ca1f8423c82a92022-12-22T03:57:18ZengMDPI AGInformatics2227-97092018-05-01522310.3390/informatics5020023informatics5020023An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart LivingUsama Salama0Lina Yao1Hye-young Paik2School of Computer Science and Engineering, University of New South Wales, Sydney, NSW 2052, AustraliaSchool of Computer Science and Engineering, University of New South Wales, Sydney, NSW 2052, AustraliaSchool of Computer Science and Engineering, University of New South Wales, Sydney, NSW 2052, AustraliaThe presence of the Internet of Things (IoT) in healthcare through the use of mobile medical applications and wearable devices allows patients to capture their healthcare data and enables healthcare professionals to be up-to-date with a patient’s status. Ambient Assisted Living (AAL), which is considered as one of the major applications of IoT, is a home environment augmented with embedded ambient sensors to help improve an individual’s quality of life. This domain faces major challenges in providing safety and security when accessing sensitive health data. This paper presents an access control framework for AAL which considers multi-level access and privacy preservation. We focus on two major points: (1) how to use the data collected from ambient sensors and biometric sensors to perform the high-level task of activity recognition; and (2) how to secure the collected private healthcare data via effective access control. We achieve multi-level access control by extending Public Key Infrastructure (PKI) for secure authentication and utilizing Attribute-Based Access Control (ABAC) for authorization. The proposed access control system regulates access to healthcare data by defining policy attributes over healthcare professional groups and data classes classifications. We provide guidelines to classify the data classes and healthcare professional groups and describe security policies to control access to the data classes.http://www.mdpi.com/2227-9709/5/2/23access controlambient assisted livingauthenticationInternet of ThingsIoT |
| spellingShingle | Usama Salama Lina Yao Hye-young Paik An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living Informatics access control ambient assisted living authentication Internet of Things IoT |
| title | An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living |
| title_full | An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living |
| title_fullStr | An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living |
| title_full_unstemmed | An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living |
| title_short | An Internet of Things Based Multi-Level Privacy-Preserving Access Control for Smart Living |
| title_sort | internet of things based multi level privacy preserving access control for smart living |
| topic | access control ambient assisted living authentication Internet of Things IoT |
| url | http://www.mdpi.com/2227-9709/5/2/23 |
| work_keys_str_mv | AT usamasalama aninternetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving AT linayao aninternetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving AT hyeyoungpaik aninternetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving AT usamasalama internetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving AT linayao internetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving AT hyeyoungpaik internetofthingsbasedmultilevelprivacypreservingaccesscontrolforsmartliving |