CHARIOT: Cloud-Assisted Access Control for the Internet of Things
The Internet of Things (IoT) technology has ex- panded widely across the world, promising new data management opportunities for industries, companies and individuals in different sectors, such as health services or transport logistics. The exponentially increasing number of IoT devices, their origin diversity, their limited capabilities in terms of resources, as well as the ever-increasing amount of data, raise new challenges for security and privacy protection, precluding traditional access control solutions to be integrated to this new environment. In this paper, we propose a reliable, server-aided, policy-based access control mechanism, named CHARIOT, that enables an IoT platform to verify credentials of different devices requesting access to the data stored within it. CHARIOT enables IoT devices to authenticate themselves to the platform without compromising their privacy by using attribute-based signatures. Our solution also allows secure delegation of costly computational operations to a cloud server, hence relieving the workload at IoT devices' side.