{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T22:13:32Z","timestamp":1792793612350,"version":"4.5.0"},"reference-count":75,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2024,8,16]],"date-time":"2024-08-16T00:00:00Z","timestamp":1723766400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF CREST-PRF","award":["2112590"],"award-info":[{"award-number":["2112590"]}]},{"name":"NSF CREST","award":["HRD1736209"],"award-info":[{"award-number":["HRD1736209"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Priv. Secur."],"published-print":{"date-parts":[[2024,8,31]]},"abstract":"<jats:p>\n            Recently, several researchers motivated the need to integrate Zero Trust (ZT) principles when designing and implementing authentication and authorization systems for IoT. An integrated Zero Trust IoT system comprises the network infrastructure (physical and virtual) and operational policies in place for IoT as a product of a ZT architecture plan. This article proposes a novel Zero Trust architecture for IoT systems called ZTA-IoT. Additionally, based on different types of interactions between various layers and components in this architecture, we present ZTA-IoT-ACF, an access control framework that recognizes different interactions that need to be controlled in IoT systems. Within this framework, the article then refines its focus to object-level interactions, i.e., interactions where the target resource is a device (equivalently a thing) or an information file generated or stored by a device. Building on the recently proposed Zero Trust score-based authorization framework (ZT-SAF), we develop the object-level Zero Trust score-based authorization framework for IoT systems, denoted as ZTA-IoT-OL-SAF, to govern access requests in this context. With this machinery in place, we finally develop a novel usage control model for users-to-objects and devices-to-objects interactions, denoted as UCON\n            <jats:inline-formula content-type=\"math\/tex\">\n              <jats:tex-math notation=\"LaTeX\" version=\"MathJax\">\\(_{IoT}\\)<\/jats:tex-math>\n            <\/jats:inline-formula>\n            . We give formal definitions, illustrative use cases, and a proof-of-concept implementation of UCON\n            <jats:inline-formula content-type=\"math\/tex\">\n              <jats:tex-math notation=\"LaTeX\" version=\"MathJax\">\\(_{IoT}\\)<\/jats:tex-math>\n            <\/jats:inline-formula>\n            . This article is a first step toward establishing a rigorous formally defined score-based access control framework for Zero Trust IoT systems.\n          <\/jats:p>","DOI":"10.1145\/3671147","type":"journal-article","created":{"date-parts":[[2024,6,17]],"date-time":"2024-06-17T10:16:23Z","timestamp":1718619383000},"page":"1-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":37,"title":["ZTA-IoT: A Novel Architecture for Zero-Trust in IoT Systems and an Ensuing Usage Control Model"],"prefix":"10.1145","volume":"27","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0473-1682","authenticated-orcid":false,"given":"Safwa","family":"Ameer","sequence":"first","affiliation":[{"name":"Computer Science, The University of Texas at San Antonio, San Antonio, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1298-8590","authenticated-orcid":false,"given":"Lopamudra","family":"Praharaj","sequence":"additional","affiliation":[{"name":"Tennessee Tech University, Cookeville, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3165-1813","authenticated-orcid":false,"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[{"name":"Computer Science, The University of Texas at San Antonio, San Antonio, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5376-4491","authenticated-orcid":false,"given":"Smriti","family":"Bhatt","sequence":"additional","affiliation":[{"name":"Purdue University System, West Lafayette, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9189-2478","authenticated-orcid":false,"given":"Maanak","family":"Gupta","sequence":"additional","affiliation":[{"name":"Tennessee Tech University, Cookeville, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,8,16]]},"reference":[{"key":"e_1_3_2_2_2","unstructured":"2023. AWS-IoT. https:\/\/aws.amazon.com\/iot\/"},{"key":"e_1_3_2_3_2","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1145\/3205977.3205989","volume-title":"23nd ACM on Symposium on Access Control Models and Technologies","author":"Ahmad Tahir","year":"2018","unstructured":"Tahir Ahmad, Umberto Morelli, Silvio Ranise, and Nicola Zannone. 2018. A lazy approach to access control as a service (ACaaS) for IoT: An AWS case study. In 23nd ACM on Symposium on Access Control Models and Technologies. 235\u2013246."},{"issue":"2","key":"e_1_3_2_4_2","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1007\/s10207-021-00558-3","article-title":"Extending access control in AWS IoT through event-driven functions: An experimental evaluation using a smart lock system","volume":"21","author":"Ahmad Tahir","year":"2022","unstructured":"Tahir Ahmad, Umberto Morelli, Silvio Ranise, and Nicola Zannone. 2022. Extending access control in AWS IoT through event-driven functions: An experimental evaluation using a smart lock system. International Journal of Information Security 21, 2 (2022), 379\u2013408.","journal-title":"International Journal of Information Security"},{"issue":"4","key":"e_1_3_2_5_2","doi-asserted-by":"crossref","first-page":"2347","DOI":"10.1109\/COMST.2015.2444095","article-title":"Internet of Things: A survey on enabling technologies, protocols, and applications","volume":"17","author":"Al-Fuqaha Ala","year":"2015","unstructured":"Ala Al-Fuqaha, Mohsen Guizani, Mehdi Mohammadi, Mohammed Aledhari, and Moussa Ayyash. 2015. Internet of Things: A survey on enabling technologies, protocols, and applications. IEEE Communications Surveys & Tutorials 17, 4 (2015), 2347\u20132376.","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"e_1_3_2_6_2","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1016\/j.jnca.2017.04.002","article-title":"Internet of Things security: A survey","volume":"88","author":"Alaba Fadele Ayotunde","year":"2017","unstructured":"Fadele Ayotunde Alaba, Mazliza Othman, Ibrahim Abaker Targio Hashem, and Faiz Alotaibi. 2017. Internet of Things security: A survey. Journal of Network and Computer Applications 88 (2017), 10\u201328.","journal-title":"Journal of Network and Computer Applications"},{"key":"e_1_3_2_7_2","first-page":"530","volume-title":"2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC\u201916)","author":"Alshehri Asma","year":"2016","unstructured":"Asma Alshehri and Ravi Sandhu. 2016. Access control models for cloud-enabled Internet of Things: A proposed architecture and research agenda. In 2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC\u201916). IEEE, 530\u2013538."},{"key":"e_1_3_2_8_2","doi-asserted-by":"crossref","unstructured":"Safwa Ammer James Benson and Ravi Sandhu. 2022. Hybrid approaches (ABAC and RBAC) toward secure access control in smart home IoT. IEEE Transactions on Dependable and Secure Computing (2022).","DOI":"10.1109\/TDSC.2022.3216297"},{"key":"e_1_3_2_9_2","volume-title":"2020 IEEE 21st International Conference on Information Reuse and Integration for Data Science (IRI)","author":"Ameer Safwa","year":"2020","unstructured":"Safwa Ameer, James Benson, and Ravi Sandhu. 2020. The EGRBAC model for smart home IoT. In 2020 IEEE 21st International Conference on Information Reuse and Integration for Data Science (IRI). IEEE."},{"issue":"2","key":"e_1_3_2_10_2","doi-asserted-by":"crossref","first-page":"60","DOI":"10.3390\/info13020060","article-title":"An attribute-based approach toward a secured smart-home IoT access control and a comparison with a role-based approach","volume":"13","author":"Ameer Safwa","year":"2022","unstructured":"Safwa Ameer, James Benson, and Ravi Sandhu. 2022. An attribute-based approach toward a secured smart-home IoT access control and a comparison with a role-based approach. Information 13, 2 (2022), 60.","journal-title":"Information"},{"key":"e_1_3_2_11_2","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1145\/3532105.3535020","volume-title":"Proceedings of the 27th ACM on Symposium on Access Control Models and Technologies","author":"Ameer Safwa","year":"2022","unstructured":"Safwa Ameer, Maanak Gupta, Smriti Bhatt, and Ravi Sandhu. 2022. BlueSky: Towards convergence of zero trust principles and score-based authorization for IoT enabled smart systems. In Proceedings of the 27th ACM on Symposium on Access Control Models and Technologies. 235\u2013244."},{"key":"e_1_3_2_12_2","first-page":"283","volume-title":"13th ACM Conference on Data and Application Security and Privacy","author":"Ameer Safwa","year":"2023","unstructured":"Safwa Ameer, Ram Krishnan, Ravi Sandhu, and Maanak Gupta. 2023. Utilizing the DLBAC approach toward a ZT score-based authorization for IoT systems. In 13th ACM Conference on Data and Application Security and Privacy. 283\u2013285."},{"key":"e_1_3_2_13_2","volume-title":"ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SAT-CPS\u201921)","author":"Ameer Safwa","year":"2021","unstructured":"Safwa Ameer and Ravi Sandhu. 2021. The HABAC model for smart home IoT and comparison to EGRBAC. In ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SAT-CPS\u201921)."},{"key":"e_1_3_2_14_2","article-title":"Privacy and security in internet of things and wearable devices","author":"Arias Orlando","year":"2015","unstructured":"Orlando Arias, Jacob Wurm, Khoa Hoang, and Yier Jin. 2015. Privacy and security in internet of things and wearable devices. TMSCS (2015).","journal-title":"TMSCS"},{"issue":"15","key":"e_1_3_2_15_2","doi-asserted-by":"crossref","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","article-title":"The Internet of Things: A survey","volume":"54","author":"Atzori Luigi","year":"2010","unstructured":"Luigi Atzori, Antonio Iera, and Giacomo Morabito. 2010. The Internet of Things: A survey. Computer Networks 54, 15 (2010), 2787\u20132805.","journal-title":"Computer Networks"},{"key":"e_1_3_2_16_2","volume-title":"APCC","author":"Bandara Syafril","year":"2016","unstructured":"Syafril Bandara, Takeshi Yashiro, Noboru Koshizuka, and Ken Sakamura. 2016. Access control framework for api-enabled devices in smart buildings. In APCC. IEEE."},{"key":"e_1_3_2_17_2","volume-title":"C2SI","author":"Barka Ezedine","year":"2015","unstructured":"Ezedine Barka, Sujith Samuel Mathew, and Yacine Atif. 2015. Securing the web of things with role-based access control. In C2SI. Springer."},{"key":"e_1_3_2_18_2","volume-title":"ABAC\u201918","author":"Bezawada Bruhadeshwar","year":"2018","unstructured":"Bruhadeshwar Bezawada, Kyle Haefner, and Indrakshi Ray. 2018. Securing home IoT environments with attribute-based access control. In ABAC\u201918. ACM."},{"key":"e_1_3_2_19_2","first-page":"328","volume-title":"2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC\u201917)","author":"Bhatt Smriti","year":"2017","unstructured":"Smriti Bhatt, Farhan Patwa, and Ravi Sandhu. 2017. An access control framework for cloud-enabled wearable internet of things. In 2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC\u201917). IEEE, 328\u2013338."},{"key":"e_1_3_2_20_2","volume-title":"International Conference on Network and System Security","author":"Bhatt Smriti","year":"2017","unstructured":"Smriti Bhatt, Farhan Patwa, and Ravi Sandhu. 2017. Access control model for AWS Internet of Things. In International Conference on Network and System Security."},{"key":"e_1_3_2_21_2","volume-title":"Proceedings of the 25th ACM Symposium on Access Control Models and Technologies","author":"Bhatt Smriti","year":"2020","unstructured":"Smriti Bhatt and Ravi Sandhu. 2020. ABAC-CC: Attribute-based access control and communication control for Internet of Things. In Proceedings of the 25th ACM Symposium on Access Control Models and Technologies."},{"key":"e_1_3_2_22_2","volume-title":"TPS-ISA","author":"Bhatt Smriti","year":"2020","unstructured":"Smriti Bhatt and Ravi Sandhu. 2020. Convergent access control to enable secure smart communities. In TPS-ISA. IEEE."},{"key":"e_1_3_2_23_2","doi-asserted-by":"crossref","first-page":"684","DOI":"10.1016\/j.future.2015.09.021","article-title":"Integration of cloud computing and Internet of Things: A survey","volume":"56","author":"Botta Alessio","year":"2016","unstructured":"Alessio Botta, Walter De Donato, Valerio Persico, and Antonio Pescap\u00e9. 2016. Integration of cloud computing and Internet of Things: A survey. Future Generation Computer Systems 56 (2016), 684\u2013700.","journal-title":"Future Generation Computer Systems"},{"key":"e_1_3_2_24_2","volume-title":"NDSS","author":"Celik Z. Berkay","year":"2019","unstructured":"Z. Berkay Celik, Gang Tan, and Patrick D. McDaniel. 2019. IoTGuard: Dynamic enforcement of security and safety policy in commodity IoT. In NDSS."},{"issue":"13","key":"e_1_3_2_25_2","doi-asserted-by":"crossref","first-page":"10248","DOI":"10.1109\/JIOT.2020.3041042","article-title":"A security awareness and protection system for 5G smart healthcare based on zero-trust architecture","volume":"8","author":"Chen Baozhan","year":"2020","unstructured":"Baozhan Chen, Siyuan Qiao, Jie Zhao, Dongqing Liu, Xiaobing Shi, Minzhao Lyu, Haotian Chen, Huimin Lu, and Yunkai Zhai. 2020. A security awareness and protection system for 5G smart healthcare based on zero-trust architecture. IEEE Internet of Things Journal 8, 13 (2020), 10248\u201310263.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_2_26_2","first-page":"012039","volume-title":"Journal of Physics: Conference Series","volume":"1769","author":"Chen Zhiyu","year":"2021","unstructured":"Zhiyu Chen, Longchuan Yan, Zitong L\u00fc, Yanling Zhang, Yonghe Guo, Wenjing Liu, and Jiaxing Xuan. 2021. Research on zero-trust security protection technology of power IoT based on blockchain. In Journal of Physics: Conference Series, Vol. 1769. IOP Publishing, 012039."},{"key":"e_1_3_2_27_2","first-page":"159","volume-title":"2021 3rd IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA\u201921)","author":"Colombo Pietro","year":"2021","unstructured":"Pietro Colombo, Elena Ferrari, and Engin Deniz T\u00fcmer. 2021. Access control enforcement in IoT: State of the art and open challenges in the Zero Trust era. In 2021 3rd IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA\u201921). IEEE, 159\u2013166."},{"key":"e_1_3_2_28_2","volume-title":"Generalized Role-based Access Control for Securing Future Applications","author":"Covington Michael J.","year":"2000","unstructured":"Michael J. Covington, Matthew James Moyer, and Mustaque Ahamad. 2000. Generalized Role-based Access Control for Securing Future Applications. Technical Report. Georgia Tech."},{"issue":"5","key":"e_1_3_2_29_2","doi-asserted-by":"crossref","first-page":"236","DOI":"10.1145\/360051.360056","article-title":"A lattice model of secure information flow","volume":"19","author":"Denning Dorothy E.","year":"1976","unstructured":"Dorothy E. Denning. 1976. A lattice model of secure information flow. Commun. ACM 19, 5 (1976), 236\u2013243.","journal-title":"Commun. ACM"},{"key":"e_1_3_2_30_2","doi-asserted-by":"crossref","DOI":"10.1145\/2398356.2398377","article-title":"Computer security and the modern home","author":"Denning Tamara","year":"2013","unstructured":"Tamara Denning, Tadayoshi Kohno, and Henry M. Levy. 2013. Computer security and the modern home. Commun. ACM (2013).","journal-title":"Commun. ACM"},{"issue":"1","key":"e_1_3_2_31_2","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1080\/10919392.2020.1831870","article-title":"Securing IoT devices using zero trust and blockchain","volume":"31","author":"Dhar Suparna","year":"2021","unstructured":"Suparna Dhar and Indranil Bose. 2021. Securing IoT devices using zero trust and blockchain. Journal of Organizational Computing and Electronic Commerce 31, 1 (2021), 18\u201334.","journal-title":"Journal of Organizational Computing and Electronic Commerce"},{"key":"e_1_3_2_32_2","volume-title":"TrustCom","author":"Dimitrakos Theo","year":"2020","unstructured":"Theo Dimitrakos, Tezcan Dilshener, Alexander Kravtsov, Antonio La Marra, Fabio Martinelli, Athanasios Rizos, Alessandro Rosett, and Andrea Saracino. 2020. Trust aware continuous authorization for zero trust in consumer Internet of Things. In TrustCom. IEEE."},{"key":"e_1_3_2_33_2","volume-title":"SP","author":"Fernandes Earlence","year":"2016","unstructured":"Earlence Fernandes, Jaeyeon Jung, and Atul Prakash. 2016. Security analysis of emerging smart home applications. In SP. IEEE."},{"key":"e_1_3_2_34_2","volume-title":"25th USENIX Security Symposium","author":"Fernandes Earlence","year":"2016","unstructured":"Earlence Fernandes, Justin Paupore, Amir Rahmati, Daniel Simionato, Mauro Conti, and Atul Prakash. 2016. Flowfence: Practical data protection for emerging IoT application frameworks. In 25th USENIX Security Symposium."},{"key":"e_1_3_2_35_2","volume-title":"SACMAT\u201920","author":"Fern\u00e1ndez Maribel","year":"2020","unstructured":"Maribel Fern\u00e1ndez, Alex Franch Tapia, Jenjira Jaimunk, Manuel Martinez Chamorro, and Bhavani Thuraisingham. 2020. A data access model for privacy-preserving cloud-IoT architectures. In SACMAT\u201920."},{"key":"e_1_3_2_36_2","article-title":"Proposed NIST standard for role-based access control","author":"Ferraiolo David F.","year":"2001","unstructured":"David F. Ferraiolo, Ravi Sandhu, Serban Gavrila, D. Richard Kuhn, and Ramaswamy Chandramouli. 2001. Proposed NIST standard for role-based access control. TISSEC (2001).","journal-title":"TISSEC"},{"key":"e_1_3_2_37_2","doi-asserted-by":"crossref","DOI":"10.1109\/COMST.2015.2388550","article-title":"Security for the Internet of Things: A survey of existing protocols and open research issues","author":"Granjal Jorge","year":"2015","unstructured":"Jorge Granjal, Edmundo Monteiro, and Jorge S. Silva. 2015. Security for the Internet of Things: A survey of existing protocols and open research issues. IEEE Comm. Surv. Tuts (2015).","journal-title":"IEEE Comm. Surv. Tuts"},{"key":"e_1_3_2_38_2","volume-title":"ACM SACMAT","author":"Gupta Maanak","year":"2018","unstructured":"Maanak Gupta and Ravi Sandhu. 2018. Authorization framework for secure cloud assisted connected cars and vehicular internet of things. In ACM SACMAT."},{"key":"e_1_3_2_39_2","first-page":"155","volume-title":"26th ACM Symposium on Access Control Models and Technologies","author":"Gupta Maanak","year":"2021","unstructured":"Maanak Gupta and Ravi Sandhu. 2021. Towards activity-centric access control for smart collaborative ecosystems. In 26th ACM Symposium on Access Control Models and Technologies. 155\u2013164."},{"key":"e_1_3_2_40_2","volume-title":"ASIA CCS\u201916","author":"Ho Grant","year":"2016","unstructured":"Grant Ho, Derek Leung, Pratyush Mishra, Ashkan Hosseini, Dawn Song, and David Wagner. 2016. Smart locks: Lessons for securing commodity internet of things devices. In ASIA CCS\u201916. ACM."},{"key":"e_1_3_2_41_2","article-title":"Attribute-based access control","author":"Hu Vincent C.","year":"2015","unstructured":"Vincent C. Hu, D. Richard Kuhn, David F. Ferraiolo, and Jeffrey Voas. 2015. Attribute-based access control. Comp. (2015).","journal-title":"Comp."},{"key":"e_1_3_2_42_2","volume-title":"IFIP Annual Conf. on Data and App. Sec.","author":"Jin X.","year":"2012","unstructured":"X. Jin, R. Krishnan, and R. Sandhu. 2012. A unified attribute-based access control model covering DAC, MAC and RBAC. In IFIP Annual Conf. on Data and App. Sec."},{"issue":"8","key":"e_1_3_2_43_2","doi-asserted-by":"crossref","first-page":"2481","DOI":"10.1007\/s11276-014-0761-7","article-title":"Security of the Internet of Things: Perspectives and challenges","volume":"20","author":"Jing Qi","year":"2014","unstructured":"Qi Jing, Athanasios V. Vasilakos, Jiafu Wan, Jingwei Lu, and Dechao Qiu. 2014. Security of the Internet of Things: Perspectives and challenges. Wireless Networks 20, 8 (2014), 2481\u20132501.","journal-title":"Wireless Networks"},{"key":"e_1_3_2_44_2","article-title":"Adding attributes to role-based access control","author":"Kuhn D. Richard","year":"2010","unstructured":"D. Richard Kuhn, Edward J. Coyne, and Timothy R. Weil. 2010. Adding attributes to role-based access control. Computer (2010).","journal-title":"Computer"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/1067629.806531"},{"issue":"3","key":"e_1_3_2_46_2","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1007\/s00354-021-00130-6","article-title":"Cloud-based zero trust access control policy: An approach to support work-from-home driven by COVID-19 pandemic","volume":"39","author":"Mandal Sudakshina","year":"2021","unstructured":"Sudakshina Mandal, Danish Ali Khan, and Sarika Jain. 2021. Cloud-based zero trust access control policy: An approach to support work-from-home driven by COVID-19 pandemic. New Generation Computing 39, 3 (2021), 599\u2013622.","journal-title":"New Generation Computing"},{"key":"e_1_3_2_47_2","article-title":"Blockchain meets IoT: An architecture for scalable access management in IoT","author":"Novo Oscar","year":"2018","unstructured":"Oscar Novo. 2018. Blockchain meets IoT: An architecture for scalable access management in IoT. IEEE IoT Journal (2018).","journal-title":"IEEE IoT Journal"},{"key":"e_1_3_2_48_2","article-title":"Access control in the Internet of Things: Big challenges and new opportunities","volume":"112","author":"Ouaddah Aafaf","year":"2017","unstructured":"Aafaf Ouaddah, Hajar Mousannif, Anas Abou Elkalam, and Abdellah Ait Ouahman. 2017. Access control in the Internet of Things: Big challenges and new opportunities. Comp. NW 112 (2017).","journal-title":"Comp. NW"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/984334.984339"},{"key":"e_1_3_2_50_2","volume-title":"ARES","author":"Park Jaehong","year":"2011","unstructured":"Jaehong Park, Ravi Sandhu, and Yuan Cheng. 2011. ACON: Activity-centric access control for social computing. In ARES. IEEE."},{"key":"e_1_3_2_51_2","unstructured":"Keyur K. Patel and Sunil M. Patel. 2016. Internet of things-IOT: Definition characteristics architecture enabling technologies application & future challenges. International Journal of Engineering Science and Computing 6 5 (2016)."},{"key":"e_1_3_2_52_2","doi-asserted-by":"crossref","DOI":"10.1109\/MCC.2016.28","article-title":"The quest for privacy in the Internet of Things","author":"Porambage Pawani","year":"2016","unstructured":"Pawani Porambage, Mika Ylianttila, Corinna Schmitt, Pardeep Kumar, Andrei Gurtov, and Athanasios V. Vasilakos. 2016. The quest for privacy in the Internet of Things. IEEE Cloud Computing (2016).","journal-title":"IEEE Cloud Computing"},{"key":"e_1_3_2_53_2","article-title":"A survey on access control in the age of Internet of Things","author":"Qiu Jing","year":"2020","unstructured":"Jing Qiu, Zhihong Tian, Chunlai Du, Qi Zuo, Shen Su, and Binxing Fang. 2020. A survey on access control in the age of Internet of Things. IEEE Internet of Things Journal (2020).","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_2_54_2","first-page":"374","volume-title":"2012 6th International Conference on Sensing Technology (ICST\u201912)","author":"Rao B. B. Prahlada","year":"2012","unstructured":"B. B. Prahlada Rao, Paval Saluia, Neetu Sharma, Ankit Mittal, and Shivay Veer Sharma. 2012. Cloud computing for Internet of Things & sensing based applications. In 2012 6th International Conference on Sensing Technology (ICST\u201912). IEEE, 374\u2013380."},{"key":"e_1_3_2_55_2","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1016\/j.jnca.2019.06.017","article-title":"Access control in Internet-of-Things: A survey","volume":"144","author":"Ravidas Sowmya","year":"2019","unstructured":"Sowmya Ravidas, Alexios Lekidis, Federica Paci, and Nicola Zannone. 2019. Access control in Internet-of-Things: A survey. Journal of Network and Computer Applications 144 (2019), 79\u2013101.","journal-title":"Journal of Network and Computer Applications"},{"key":"e_1_3_2_56_2","article-title":"On the features and challenges of security and privacy in distributed Internet of Things","author":"Roman Rodrigo","year":"2013","unstructured":"Rodrigo Roman, Jianying Zhou, and Javier Lopez. 2013. On the features and challenges of security and privacy in distributed Internet of Things. Computer Networks (2013).","journal-title":"Computer Networks"},{"key":"e_1_3_2_57_2","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-207","volume-title":"Zero Trust Architecture","author":"Rose Scott","year":"2020","unstructured":"Scott Rose, Oliver Borchert, Stu Mitchell, and Sean Connelly. 2020. Zero Trust Architecture. Technical Report NIST Special Publication (SP) 800-207. National Institute of Standards and Technology."},{"key":"e_1_3_2_58_2","first-page":"88","volume-title":"2018 IEEE International Congress on Internet of Things (ICIOT\u201918)","author":"Samaniego Mayra","year":"2018","unstructured":"Mayra Samaniego and Ralph Deters. 2018. Zero-trust hierarchical management in IoT. In 2018 IEEE International Congress on Internet of Things (ICIOT\u201918). IEEE, 88\u201395."},{"key":"e_1_3_2_59_2","first-page":"9 pages","volume-title":"1st ACM Workshop on Role-based Access Control","author":"Sandhu Ravi","year":"1996","unstructured":"Ravi Sandhu. 1996. Rationale for the RBAC96 family of access control models. In 1st ACM Workshop on Role-based Access Control. 9 pages."},{"key":"e_1_3_2_60_2","volume-title":"Advances in Computers","author":"Sandhu R.","year":"1998","unstructured":"R. Sandhu. 1998. Role-based access control. In Advances in Computers. Vol. 46."},{"key":"e_1_3_2_61_2","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1145\/344287.344309","volume-title":"5th ACM Workshop on Role-based Access Control","author":"Sandhu Ravi","year":"2000","unstructured":"Ravi Sandhu. 2000. Engineering authority and trust in cyberspace: The OM-AM and RBAC way. In 5th ACM Workshop on Role-based Access Control. 111\u2013119."},{"key":"e_1_3_2_62_2","first-page":"1","volume-title":"2009 5th International Conference on Collaborative Computing: Networking, Applications and Worksharing","author":"Sandhu Ravi","year":"2009","unstructured":"Ravi Sandhu. 2009. The PEI framework for application-centric security. In 2009 5th International Conference on Collaborative Computing: Networking, Applications and Worksharing. IEEE, 1\u20135."},{"key":"e_1_3_2_63_2","first-page":"6 pages","volume-title":"3rd International Conference on Availability, Reliability and Security (ARES\u201908)","author":"Sandhu Ravi","year":"2008","unstructured":"Ravi Sandhu and Venkata Bhamidipati. 2008. The ASCAA principles for next-generation role-based access control. In 3rd International Conference on Availability, Reliability and Security (ARES\u201908). 6 pages."},{"key":"e_1_3_2_64_2","volume-title":"ACM Workshop on Role-based Access Control","year":"2000","unstructured":"Ravi Sandhu, David Ferraiolo, and Richard Kuhn. 2000. The NIST model for role-based access control: Towards a unified standard. In ACM Workshop on Role-based Access Control."},{"key":"e_1_3_2_65_2","first-page":"2","volume-title":"2006 ACM Symposium on Information, Computer and Communications Security","author":"Sandhu Ravi","year":"2006","unstructured":"Ravi Sandhu, Kumar Ranganathan, and Xinwen Zhang. 2006. Secure information sharing enabled by trusted computing and PEI models. In 2006 ACM Symposium on Information, Computer and Communications Security. 2\u201312."},{"issue":"11","key":"e_1_3_2_66_2","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1109\/2.241422","article-title":"Lattice-based access control models","volume":"26","author":"Sandhu Ravi S.","year":"1993","unstructured":"Ravi S. Sandhu. 1993. Lattice-based access control models. Computer 26, 11 (1993), 9\u201319.","journal-title":"Computer"},{"key":"e_1_3_2_67_2","article-title":"Role-based access control models","author":"Sandhu Ravi S.","year":"1996","unstructured":"Ravi S. Sandhu, Edward J. Coyne, Hal L. Feinstein, and Charles E. Youman. 1996. Role-based access control models. Comp. (1996).","journal-title":"Comp."},{"issue":"4","key":"e_1_3_2_68_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3007204","article-title":"Current research and open problems in attribute-based access control","volume":"49","author":"Servos Daniel","year":"2017","unstructured":"Daniel Servos and Sylvia L. Osborn. 2017. Current research and open problems in attribute-based access control. ACM Computing Surveys (CSUR) 49, 4 (2017), 1\u201345.","journal-title":"ACM Computing Surveys (CSUR)"},{"issue":"7","key":"e_1_3_2_69_2","doi-asserted-by":"crossref","first-page":"5794","DOI":"10.1109\/JIOT.2020.3033265","article-title":"Hierarchical security paradigm for IoT multiaccess edge computing","volume":"8","author":"Singh Jaspreet","year":"2020","unstructured":"Jaspreet Singh, Yahuza Bello, Ahmed Refaey Hussein, Aiman Erbad, and Amr Mohamed. 2020. Hierarchical security paradigm for IoT multiaccess edge computing. IEEE Internet of Things Journal 8, 7 (2020), 5794\u20135805.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_2_70_2","volume-title":"SACMAT\u201919","author":"Tang Bo","year":"2019","unstructured":"Bo Tang, Hongjuan Kang, Jingwen Fan, Qi Li, and Ravi Sandhu. 2019. IoT passport: A blockchain-based trust framework for collaborative Internet-of-Things. In SACMAT\u201919."},{"key":"e_1_3_2_71_2","volume-title":"USENIX Security 17","author":"Tian Yuan","year":"2017","unstructured":"Yuan Tian, Nan Zhang, Yueh-Hsun Lin, XiaoFeng Wang, Blase Ur, Xianzheng Guo, and Patrick Tague. 2017. SmartAuth:User-Centered authorization for the Internet of Things. In USENIX Security 17."},{"key":"e_1_3_2_72_2","first-page":"1","volume-title":"2018 29th Irish Signals and Systems Conference (ISSC\u201918)","author":"Vanickis Romans","year":"2018","unstructured":"Romans Vanickis, Paul Jacob, Sohelia Dehghanzadeh, and Brian Lee. 2018. Access control policy enforcement for zero-trust-networking. In 2018 29th Irish Signals and Systems Conference (ISSC\u201918). IEEE, 1\u20136."},{"key":"e_1_3_2_73_2","first-page":"V5\u2013484","volume-title":"2010 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE\u201910)","volume":"5","author":"Wu Miao","year":"2010","unstructured":"Miao Wu, Ting-Jie Lu, Fei-Yang Ling, Jing Sun, and Hui-Ying Du. 2010. Research on the architecture of Internet of Things. In 2010 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE\u201910), Vol. 5. IEEE, V5\u2013484."},{"key":"e_1_3_2_74_2","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1109\/CSP51677.2021.9357607","volume-title":"2021 IEEE 5th International Conference on Cryptography, Security and Privacy (CSP\u201921)","author":"Xiaojian Zhang","year":"2021","unstructured":"Zhang Xiaojian, Chen Liandong, Fan Jie, Wang Xiangqun, and Wang Qi. 2021. Power IoT security protection architecture based on zero trust framework. In 2021 IEEE 5th International Conference on Cryptography, Security and Privacy (CSP\u201921). IEEE, 166\u2013170."},{"key":"e_1_3_2_75_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.03.010"},{"key":"e_1_3_2_76_2","doi-asserted-by":"crossref","DOI":"10.1061\/9780784411391","volume-title":"2010 ICINA","author":"Zhang Guoping","year":"2010","unstructured":"Guoping Zhang and Jiazheng Tian. 2010. An extended role based access control model for the Internet of Things. In 2010 ICINA. IEEE."}],"container-title":["ACM Transactions on Privacy and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3671147","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3671147","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:09:32Z","timestamp":1750295372000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3671147"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,16]]},"references-count":75,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2024,8,31]]}},"alternative-id":["10.1145\/3671147"],"URL":"https:\/\/doi.org\/10.1145\/3671147","relation":{},"ISSN":["2471-2566","2471-2574"],"issn-type":[{"value":"2471-2566","type":"print"},{"value":"2471-2574","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,8,16]]},"assertion":[{"value":"2023-03-28","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-05-03","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-08-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}