Title: An adaptive distributed access control model for IoT and fog computing environments

Authors: Lalla Amina Charaf; Imam Alihamidi; Anass Deroussi; Abdessalam Ait Madi; Adnane Addaim; Moulay El Hassan Charaf

Addresses: National School of Applied Sciences, Ibn Tofail University, Kenitra, Morocco ' National School of Applied Sciences, Ibn Tofail University, Kenitra, Morocco ' National School of Applied Sciences, Ibn Tofail University, Kenitra, Morocco ' National School of Applied Sciences, Ibn Tofail University, Kenitra, Morocco ' Department of Electrical Engineering, Mohammadia School of Engineers, Mohamed V University, Rabat, Morocco ' Laboratory of Research in Informatics, Faculty of Sciences, Ibn Tofail University, Kenitra, Morocco

Abstract: In this paper, we present a framework for handling access control in fog-based implementations. In order to accommodate the distributed aspect of the proposed fog-based architecture, we extend XACML-based control to a distributed adaptive XACML (DA-XACML) model. As a main contribution, we define the layers of our architecture, the communication scheme between the different components of the architecture, and how to integrate DA-XACML to overcome the drawbacks of centralised access control solutions in the core cloud. Finally, we provide a simulation of our approach in an e-health case study using the iFogsim2 simulator. Based on simulation results, the fog-based implementation not only yielded low energy use, network utilisation, delay, and policy execution cost, but also improved simulation time compared to cloud-based implementations.

Keywords: fog computing; internet of things; IoT; security and privacy; XACML; access control.

DOI: 10.1504/IJMIC.2024.137996

International Journal of Modelling, Identification and Control, 2024 Vol.44 No.3, pp.230 - 245

Received: 21 Sep 2022
Received in revised form: 26 Jan 2023
Accepted: 04 Feb 2023

Published online: 16 Apr 2024 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article