{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T11:59:06Z","timestamp":1783771146550,"version":"3.55.0"},"reference-count":126,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Guangdong Province Key Research and Development Plan","award":["2019B010137004"],"award-info":[{"award-number":["2019B010137004"]}]},{"name":"National Key Research and Development Plan","award":["2018YFB0803504"],"award-info":[{"award-number":["2018YFB0803504"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1636215"],"award-info":[{"award-number":["U1636215"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61871140"],"award-info":[{"award-number":["61871140"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872100"],"award-info":[{"award-number":["61872100"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong Province Universities and Colleges Pearl River Scholar Funded Scheme"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2020,6]]},"DOI":"10.1109\/jiot.2020.2969326","type":"journal-article","created":{"date-parts":[[2020,1,24]],"date-time":"2020-01-24T22:39:13Z","timestamp":1579905553000},"page":"4682-4696","source":"Crossref","is-referenced-by-count":412,"title":["A Survey on Access Control in the Age of Internet of Things"],"prefix":"10.1109","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4202-7802","authenticated-orcid":false,"given":"Jing","family":"Qiu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9409-5359","authenticated-orcid":false,"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chunlai","family":"Du","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qi","family":"Zuo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2744-3584","authenticated-orcid":false,"given":"Shen","family":"Su","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Binxing","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"204","article-title":"Media access control manner with QoS for control network","author":"lei","year":"2008","journal-title":"Proc 27th Chin Control Conf"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.11"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501979"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2002-10303"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"ref30","first-page":"96","article-title":"Enforcing mandatory access control in object bases","author":"bertino","year":"1993","journal-title":"Proc of the Workshop on Security for Object-oriented Systems"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180418"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/11426639_27"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/507711.507722"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EST.2013.13"},{"key":"ref28","article-title":"Integrity considerations for secure computer systems","author":"biba","year":"1977"},{"key":"ref27","volume":"1","author":"lapadula","year":"1973","journal-title":"Secure Computer Systems Mathematical Foundations MTR-2547"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1985.10014"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CSSS.2012.35"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1108\/17440080810919468"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1057977.1057979"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-0448-1.ch001"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.osnem.2017.09.001"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/IoTSMS.2018.8554688"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3146025"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-05345-1_31"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3007204"},{"key":"ref50","first-page":"1","article-title":"Social-driven Internet of connected objects","author":"mendes","year":"2011","journal-title":"Proc of the Interc Smart Objects with the Internet Workshop"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2007.04.009"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/POLICY.2007.48"},{"key":"ref58","article-title":"Security assertion markup language (SAML) 1422 v2.0 technical overview","author":"hughes","year":"2005"},{"key":"ref57","article-title":"OASIS extensible access control markup language (XACML)","author":"godik","year":"2002"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/1029133.1029140"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2006.05.012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSC.2016.31"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2016.102"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-017-1034-0"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2693380"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.04.011"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2016.7845448"},{"key":"ref6","year":"2011"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2846624"},{"key":"ref8","first-page":"1370","article-title":"General data protection regulation&#x2014;Protection of personal data in an organization","author":"skend\u017ei?","year":"2018","journal-title":"Proc Int Conv Inf Commun Technol Electron Microelectron (MIPRO)"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2017.9"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7907022"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1108\/10662240910952346"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/IOT.2012.6402314"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1002\/dac.2647"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MMUL.2007.82"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/MDM.2007.36"},{"key":"ref42","first-page":"20","article-title":"Design of security access control system of adaptive wireless gateway","author":"zhang","year":"2008","journal-title":"Proc Int Symp Inf Sci Eng"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2015.2417873"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2881422"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2907754"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ICCWAMTIP.2018.8632587"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN.2017.7899433"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2017.8024606"},{"key":"ref73","first-page":"187","article-title":"HGABAC: Towards a formal model of hierarchical attribute-based access control","author":"servos","year":"2014","journal-title":"Proc Int?l Symp Foundations and Practice of Security"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/1943513.1943539"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/1533057.1533097"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35743-5_13"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.014"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/2480741.2480742"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.mcm.2013.02.006"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CSCWD.2018.8465364"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2016.2539165"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2851613.2851979"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/s10723-012-9212-9"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2009.060598"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2013.60"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2010.274"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33124-9_12"},{"key":"ref65","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/504909.504910","article-title":"An algebra for composing access control policies","volume":"5","author":"cheng","year":"2002","journal-title":"ACM Trans Inf Syst Security"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/1542207.1542218"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/1542207.1542229"},{"key":"ref68","first-page":"238","article-title":"EXAM: An environment for access control policy analysis and management, policies for distributed systems and networks","author":"rao","year":"2008","journal-title":"Proceedings of the POLICY Workshop"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2017.2699675"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/1952982.1952991"},{"key":"ref1","first-page":"511","article-title":"The future of 5G technology present & previous generations","volume":"9","author":"nasr","year":"2018","journal-title":"Int J Sci Eng Res"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1145\/2808797.2809361"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2016.09.025"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/Cybermatics_2018.2018.00191"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.08.006"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2012.38"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2014.6847945"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-18681-8_2"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883667"},{"key":"ref105","first-page":"319","article-title":"An extended role based access control model for the Internet of Things","author":"zhang","year":"2010","journal-title":"Proc Int Conf Inf Netw Autom (ICINA)"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSACW.2013.52"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2012.81"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.06.001"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.11.007"},{"key":"ref102","first-page":"604","article-title":"Capability-based access control delegation model on the federated IoT network","author":"anggorojati","year":"2012","journal-title":"Proc 5th Int Symp Wireless Pers Multimedia Commun"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/1108906.1108908"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2010.02.002"},{"key":"ref110","author":"xu","year":"2018","journal-title":"A federated capability-based access control mechanism for internet of things (iots)"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2840131"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3054977.3054980"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.4236\/jcc.2017.51010"},{"key":"ref97","first-page":"309","article-title":"Identity authentication and capability based access control (IACAC) for the Internet of Things","volume":"1","author":"mahalle","year":"2013","journal-title":"J Cyber Security and Mobility"},{"key":"ref10","article-title":"The failure of fair information practice principles","author":"cate","year":"2008","journal-title":"Consumer Protection in the Age of the Information Economy"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2019.2910217"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.12.054"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2015.108"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2014.11.008"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45608-2_3"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/WICT.2015.7489657"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27189-2_2"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-016-0317-1"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35130-3_7"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2010.05.010"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/s10703-013-0187-3"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CCCM.2009.5270462"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/ICSPCC.2015.7338765"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26823-1_2"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICWOAL.2014.7009188"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1360\/crad20050703"},{"key":"ref114","first-page":"724","article-title":"The research of access control based on UCON in the Internet of Things","volume":"6","author":"guoping","year":"2011","journal-title":"J Softw"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/1330295.1330298"},{"key":"ref116","first-page":"35","article-title":"Introducing usage control in MQTT","author":"la marra","year":"2017","journal-title":"Proc SECPRE"},{"key":"ref80","first-page":"163","article-title":"PonderFlow: A new policy specification language to SDN OpenFlow-based networks","volume":"7","author":"batista","year":"2014","journal-title":"International Journal On Advances in Networks and Services"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/HPCS.2018.00169"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-017-1064-3"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1016\/j.fss.2011.06.008"},{"key":"ref121","author":"ferrag","year":"2019","journal-title":"Authentication and Authorization for Mobile IoT Devices Using Bio-Features Recent Advances and Future Trends"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1748"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2812239"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93698-7_7"},{"key":"ref86","first-page":"169","article-title":"Policy conflict resolution in IoT via planning","author":"g\u00f6yn\u00fcg\u00fcr","year":"2017","journal-title":"Proc Can Conf AI"},{"key":"ref87","first-page":"1","article-title":"The trusted attribute aggregation service","author":"chadwick","year":"2013","journal-title":"Proc IEEE Int Conf Availability Rel Secur"},{"key":"ref88","first-page":"1011","article-title":"An attribute aggregation architecture with trust-based evaluation for access control","author":"lee","year":"2008","journal-title":"Proc IEEE Netw Oper Manag Symp"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/9115800\/08968396.pdf?arnumber=8968396","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:25:42Z","timestamp":1651080342000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8968396\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6]]},"references-count":126,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2020.2969326","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,6]]}}}