An Attribute-Based Access Control for Cloud Enabled Industrial Smart Vehicles

• Published in: IEEE transactions on industrial informatics Vol. 17; no. 6; pp. 4288 - 4297
• Main Authors: Gupta, Maanak, Awaysheh, Feras M., Benson, James, Alazab, Mamoun, Patwa, Farhan, Sandhu, Ravi
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01-06-2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Access control; Attribute-based access control (ABAC); Authorization; Cloud computing; Ecosystems; Industrial Internet-of-Vehicles (IIoV); Intelligent sensors; Intelligent Transportation System (ITS); Intelligent transportation systems; Intelligent vehicles; Internet of Vehicles; Policies; Privacy; Remote control; Security; Security management; security policies; smart-connected vehicles; Vision; Web services
• ISSN: 1551-3203; 1941-0050
• DOI: 10.1109/TII.2020.3022759

Smart cities' vision will encompass connected industrial vehicles, which will offer data-driven and intelligent services to the user. Such interaction within dispersed connected objects are sometimes referred as the industrial Internet-of-Vehicles (IIoV). The prime motivation of an intelligent transportation system (ITS) is ensuring the safety of the drivers and offering a comfortable experience to the user. However, such complex infrastructures opens broad attack surfaces to the adversaries, which can remotely exploit and control the critical mechanics in the smart vehicles, including engine and brake systems. Security and privacy concerns are significant barriers to the wide adoption of this revolutionary technology that has to be addressed before a comprehensive implementation of the real vision of ITS. This article is a stepping stone to address access control issues in the IIoV ecosystem and propose a formal attribute-based access control system (referred to ITS-ABAC<inline-formula><tex-math notation="LaTeX">\mathrm{_G}</tex-math></inline-formula>). The proposed model introduces the notion of groups, which are assigned to various smart entities based on the different attributes. It also offers the implementation of fine-grained security policies and considers individualized privacy preferences along with system-wide policies to accept or reject notification, alerts, and advertisements from different participating smart entities. We present the prototype implementation of our proposed model in the Amazon Web Services IoT platform together with extensive performance to reflect the practicality and wide-scale adoption of the proposed system.