xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things
The innovation of ubiquitous and pervasive computing helps service-oriented organizations in the realization of a virtual coalition. The virtual coalition is a set of IoT domains i.e., smart homes and smart hospitals that are linked together through communication lines to share resources. Such virtu...
| Main Authors: | , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2020-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/9044312/ |
| _version_ | 1829140025855442944 |
|---|---|
| author | Gauhar Ali Naveed Ahmad Yue Cao Shahzad Khan Haitham Cruickshank Ejaz Ali Qazi Azaz Ali |
| author_facet | Gauhar Ali Naveed Ahmad Yue Cao Shahzad Khan Haitham Cruickshank Ejaz Ali Qazi Azaz Ali |
| author_sort | Gauhar Ali |
| collection | DOAJ |
| description | The innovation of ubiquitous and pervasive computing helps service-oriented organizations in the realization of a virtual coalition. The virtual coalition is a set of IoT domains i.e., smart homes and smart hospitals that are linked together through communication lines to share resources. Such virtual coalitions need secure cross-domain permission delegation and access control mechanisms. In existing approaches, permission delegation and access control are performed at the resource owner domain or by a single trusted third party. This single trusted third party may fail to work or compromise. Therefore, it will collapse either the whole system or the security of the system. We propose xDBAuth, a decentralized Blockchain (BC) based permission delegation and access control framework for the Internet of Things (IoT). Also, we proposed a hierarchy of local and global smart contracts that perform permission delegation and access control for both internal and external user/IoT devices. Additionally, the proposed framework preserves an external user's privacy by allowing them to get authentication in their parent IoT domains. During authentication, Proof-of-Authenticity/Integrity (PoAI) mechanism is used to find and retrieve user/IoT device platform hashes stored on local BC. After successful authentication, BC authorizes the user/IoT device based on the validation of delegation policies stored on BC. We implemented the proposed framework using Node.js. The results show that the proposed xDBAuth is a lightweight framework with less computational overhead. xDBAuth produces high throughput in an environment having a large number of concurrent requests. |
| first_indexed | 2024-12-14T19:46:41Z |
| format | Article |
| id | doaj.art-ae2aba77617e4155b77b64d38e701a74 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-14T19:46:41Z |
| publishDate | 2020-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-ae2aba77617e4155b77b64d38e701a742022-12-21T22:49:33ZengIEEEIEEE Access2169-35362020-01-018588005881610.1109/ACCESS.2020.29825429044312xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of ThingsGauhar Ali0Naveed Ahmad1https://orcid.org/0000-0003-2941-9780Yue Cao2https://orcid.org/0000-0002-2098-7637Shahzad Khan3https://orcid.org/0000-0001-6709-1558Haitham Cruickshank4https://orcid.org/0000-0001-7314-760XEjaz Ali Qazi5https://orcid.org/0000-0003-1199-0540Azaz Ali6https://orcid.org/0000-0001-9691-7347Department of Computer Science, University of Peshawar, Peshawar, PakistanDepartment of Computer Science, University of Peshawar, Peshawar, PakistanSchool of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaDepartment of Computer Science, University of Peshawar, Peshawar, PakistanInstitute of Communication Systems, University of Surrey, Guildford, U.K.Department of Computer Science, University of Peshawar, Peshawar, PakistanSchool of Computer Science, China West Normal University, Nanchong, ChinaThe innovation of ubiquitous and pervasive computing helps service-oriented organizations in the realization of a virtual coalition. The virtual coalition is a set of IoT domains i.e., smart homes and smart hospitals that are linked together through communication lines to share resources. Such virtual coalitions need secure cross-domain permission delegation and access control mechanisms. In existing approaches, permission delegation and access control are performed at the resource owner domain or by a single trusted third party. This single trusted third party may fail to work or compromise. Therefore, it will collapse either the whole system or the security of the system. We propose xDBAuth, a decentralized Blockchain (BC) based permission delegation and access control framework for the Internet of Things (IoT). Also, we proposed a hierarchy of local and global smart contracts that perform permission delegation and access control for both internal and external user/IoT devices. Additionally, the proposed framework preserves an external user's privacy by allowing them to get authentication in their parent IoT domains. During authentication, Proof-of-Authenticity/Integrity (PoAI) mechanism is used to find and retrieve user/IoT device platform hashes stored on local BC. After successful authentication, BC authorizes the user/IoT device based on the validation of delegation policies stored on BC. We implemented the proposed framework using Node.js. The results show that the proposed xDBAuth is a lightweight framework with less computational overhead. xDBAuth produces high throughput in an environment having a large number of concurrent requests.https://ieeexplore.ieee.org/document/9044312/Access controlblockchainInternet of Thingspermission delegation |
| spellingShingle | Gauhar Ali Naveed Ahmad Yue Cao Shahzad Khan Haitham Cruickshank Ejaz Ali Qazi Azaz Ali xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things IEEE Access Access control blockchain Internet of Things permission delegation |
| title | xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things |
| title_full | xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things |
| title_fullStr | xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things |
| title_full_unstemmed | xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things |
| title_short | xDBAuth: Blockchain Based Cross Domain Authentication and Authorization Framework for Internet of Things |
| title_sort | xdbauth blockchain based cross domain authentication and authorization framework for internet of things |
| topic | Access control blockchain Internet of Things permission delegation |
| url | https://ieeexplore.ieee.org/document/9044312/ |
| work_keys_str_mv | AT gauharali xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT naveedahmad xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT yuecao xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT shahzadkhan xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT haithamcruickshank xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT ejazaliqazi xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings AT azazali xdbauthblockchainbasedcrossdomainauthenticationandauthorizationframeworkforinternetofthings |