Smart Contract-Based Access Control for the Internet of Things

By Yuanyu Zhang, S. Kasahara, Yulong Shen, Xiaohong Jiang, Jianxiong Wan. IEEE Internet of Things Journal, 2018

652 citations recorded by the source corpus.

This paper investigates a critical access control issue in the Internet of Things (IoT). In particular, we propose a smart contract-based framework, which consists of multiple access control contracts (ACCs), one judge contract (JC), and one register contract (RC), to achieve distributed and trustworthy access control for IoT systems. Each ACC provides one access control method for a subject-object pair, and implements both static access right validation based on predefined policies and dynamic access right validation by checking the behavior of the subject. The JC implements a misbehavior-judging method to facilitate the dynamic validation of the ACCs by receiving misbehavior reports from the ACCs, judging the misbehavior and returning the corresponding penalty. The RC registers the information of the access control and misbehavior-judging methods as well as their smart contracts, and also provides functions (e.g., register, update, and delete) to manage these methods. To demonstrate the application of the framework, we provide a case study in an IoT system with one desktop computer, one laptop and two Raspberry Pi single-board computers, where the ACCs, JC, and RC are implemented based on the Ethereum smart contract platform to achieve the access control.

Subfields: Artificial Intelligence, Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/ce6a10bb54b0ed3043f1b62f0bd6d6a5671797a7

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

In Sociology and Political Science

Citations in the corpus

Blockchain for Secure EHRs Sharing of Mobile Cloud Based E-Health Systems (2019, background): “[28] R. Xu, Y. Chen, E. Blasch, and G. Chen, ‘‘BlendCAC: A smart contract enabled decentralized capability-based access control mechanism for the IoT,’’ Computers, vol. 7, no. 3, p. 39, 2018.”
Survey on blockchain based smart contracts: Applications, opportunities and challenges (2021, background): “Decentralized Identity Management: [108], [109], [110], [111] ,[113], [114] • Privacy enforcement of clinical research data • Eliminated trusted third party •Ensured availability Identity management service unavailability risk due to centralization X”
Enabling Massive IoT Toward 6G: A Comprehensive Survey (2021, background): “Different from these works, the authors of [142] proposed a smart contract-based access control framework, which consisted of multiple access control contracts to achieve distributed access control for untrustworthy IoT systems.”
When Blockchain Meets Supply Chain: A Systematic Literature Review on Current Development and Potential Applications (2020, background): “To pursue a wider spectrum of applications, more research endeavors must focus on solving validation/veriﬁcation issues [40], enhancing security and privacy, and contract-based integration with other technologies [41]–[43].”
Blockchain Meets Cloud Computing: A Survey (2020, background): “’s work [82], three smart contracts, namely,”
Survey on blockchain for Internet of Things (2019, background): “[115] proposed a contract-based intelligent framework, which includes multiple access control contracts (ACCs), a judge contract (JC) and a registration contract (RC), thus enabling decentralized secure access control of IoT systems.”
Blockchain smart contracts: Applications, challenges, and future trends (2021, background): “The second smart contract can only be called by the first one to storing data on and retrieving data from the blockchain.”