{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T18:20:41Z","timestamp":1783966841431,"version":"3.55.0"},"reference-count":45,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2019,6,25]],"date-time":"2019-06-25T00:00:00Z","timestamp":1561420800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100007406","name":"Fundaci\u00f3n BBVA","doi-asserted-by":"publisher","award":["Leonardo Grant 2017"],"award-info":[{"award-number":["Leonardo Grant 2017"]}],"id":[{"id":"10.13039\/100007406","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013410","name":"INCIBE","doi-asserted-by":"publisher","award":["INCIBEI-2015-27353"],"award-info":[{"award-number":["INCIBEI-2015-27353"]}],"id":[{"id":"10.13039\/501100013410","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013410","name":"INCIBE","doi-asserted-by":"publisher","award":["INCIBEI-2015-27352"],"award-info":[{"award-number":["INCIBEI-2015-27352"]}],"id":[{"id":"10.13039\/501100013410","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100007801","name":"Fundaci\u00f3n S\u00e9neca","doi-asserted-by":"publisher","award":["Human Resources Researching Postdoctoral Program 2018"],"award-info":[{"award-number":["Human Resources Researching Postdoctoral Program 2018"]}],"id":[{"id":"10.13039\/100007801","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003329","name":"Ministerio de Econom\u00eda y Competitividad","doi-asserted-by":"publisher","award":["RYC-2015-18210"],"award-info":[{"award-number":["RYC-2015-18210"]}],"id":[{"id":"10.13039\/501100003329","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Government of Ireland","award":["Postdoctoral Fellowship 2018"],"award-info":[{"award-number":["Postdoctoral Fellowship 2018"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Continuous authentication was introduced to propose novel mechanisms to validate users\u2019 identity and address the problems and limitations exposed by traditional techniques. However, this methodology poses several challenges that remain unsolved. In this paper, we present a novel framework, PALOT, that leverages IoT to provide context-aware, continuous and non-intrusive authentication and authorization services. To this end, we propose a formal information system model based on ontologies, representing the main source of knowledge of our framework. Furthermore, to recognize users\u2019 behavioral patterns within the IoT ecosystem, we introduced a new module called \u201cconfidence manager\u201d. The module is then integrated into an extended version of our early framework architecture, IoTCAF, which is consequently adapted to include the above-mentioned component. Exhaustive experiments demonstrated the efficacy, feasibility and scalability of the proposed solution.<\/jats:p>","DOI":"10.3390\/s19122832","type":"journal-article","created":{"date-parts":[[2019,6,25]],"date-time":"2019-06-25T10:52:31Z","timestamp":1561459951000},"page":"2832","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":16,"title":["PALOT: Profiling and Authenticating Users Leveraging Internet of Things"],"prefix":"10.3390","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4041-1205","authenticated-orcid":false,"given":"Pantaleone","family":"Nespoli","sequence":"first","affiliation":[{"name":"Department of Information and Communications Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5267-2392","authenticated-orcid":false,"given":"Mattia","family":"Zago","sequence":"additional","affiliation":[{"name":"Department of Information and Communications Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7125-1710","authenticated-orcid":false,"given":"Alberto","family":"Huertas Celdr\u00e1n","sequence":"additional","affiliation":[{"name":"Telecommunication Software &amp; Systems Group, Waterford Institute of Technology, X91 K0EK Waterford, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7768-9665","authenticated-orcid":false,"given":"Manuel","family":"Gil P\u00e9rez","sequence":"additional","affiliation":[{"name":"Department of Information and Communications Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6424-3322","authenticated-orcid":false,"given":"F\u00e9lix","family":"G\u00f3mez M\u00e1rmol","sequence":"additional","affiliation":[{"name":"Department of Information and Communications Engineering, University of Murcia, 30100 Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"F\u00e9lix J.","family":"Garc\u00eda Clemente","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering and Technology, University of Murcia, 30100 Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2019,6,25]]},"reference":[{"key":"ref_1","unstructured":"G\u00f3mez M\u00e1rmol, F., Gil P\u00e9rez, M., and Mart\u00ednez P\u00e9rez, G. (2016, January 18\u201322). I don\u2019t Trust ICT: Research challenges in Cyber Security. Proceedings of the 10th IFIP WG 11.11 International Conference on Trust Management (IFIPTM 2016), Darmstadt, Germany."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Nespoli, P., Useche Pel\u00e1ez, D., D\u00edaz L\u00f3pez, D.O., and G\u00f3mez M\u00e1rmol, F. (2019). COSMOS: Collaborative, Seamless and Adaptive Sentinel for the Internet of Things. Sensors, 19.","DOI":"10.3390\/s19071492"},{"key":"ref_3","first-page":"138","article-title":"Hands-Free one-Time and continuous authentication using glass wearable devices","volume":"46","author":"Damopoulos","year":"2019","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Dasgupta, D., Roy, A., and Nag, A. (2017). Continuous authentication. Advances in User Authentication, Springer.","DOI":"10.1007\/978-3-319-58808-7"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Chuang, Y.H., Lo, N.W., Yang, C.Y., and Tang, S.W. (2018). A lightweight continuous authentication protocol for the Internet of Things. Sensors, 18.","DOI":"10.3390\/s18041104"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1016\/j.compeleceng.2013.11.008","article-title":"Live Digital, Remember Digital: State of the Art and Research Challenges","volume":"40","year":"2014","journal-title":"Comput. Electr. Eng."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Khan, H., Atwater, A., and Hengartner, U. (2014, January 17\u201319). A comparative evaluation of implicit authentication schemes. Proceedings of the 17th International Symposium on Research in Attacks, Intrusions and Defenses, Gothenburg, Sweden.","DOI":"10.1007\/978-3-319-11379-1_13"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Balaji, S., Nathani, K., and Santhakumar, R. (2019). IoT Technology, Applications and Challenges: A Contemporary Survey. Wireless Pers. Commun., 1\u201326.","DOI":"10.1007\/s11277-019-06407-w"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"243","DOI":"10.1007\/s10796-014-9492-7","article-title":"The Internet of Things: A survey","volume":"17","author":"Li","year":"2015","journal-title":"Inf. Syst. Front."},{"key":"ref_10","first-page":"1","article-title":"Shielding IoT against cyber-attacks: An event-based approach using SIEM","volume":"2018","author":"Nespoli","year":"2018","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Ehatisham-ul Haq, M., Azam, M.A., Loo, J., Shuang, K., Islam, S., Naeem, U., and Amin, Y. (2017). Authentication of smartphone users based on activity recognition and mobile sensing. Sensors, 17.","DOI":"10.3390\/s17092043"},{"key":"ref_12","unstructured":"Nespoli, P., Zago, M., Huertas Celdr\u00e1n, A., Gil P\u00e9rez, M., G\u00f3mez M\u00e1rmol, F., and Garc\u00eda Clemente, F.J. (2018, January 15\u201318). A dynamic continuous authentication framework in IoT-enabled environments. Proceedings of the 5th International Conference on Internet of Things: Systems, Management and Security, Valencia, Spain."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"480","DOI":"10.3414\/ME0592","article-title":"Assessing the quality of activities in a smart environment","volume":"48","author":"Cook","year":"2009","journal-title":"Methods Inf. Med."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Neshenko, N., Bou-Harb, E., Crichigno, J., Kaddoum, G., and Ghani, N. (2019). Demystifying IoT Security: An Exhaustive Survey on IoT Vulnerabilities and a First Empirical Look on Internet-scale IoT Exploitations. IEEE Commun. Surv. Tutor., 1.","DOI":"10.1109\/COMST.2019.2910750"},{"key":"ref_15","first-page":"17","article-title":"A review on security challenges and features in wireless sensor networks: IoT perspective","volume":"10","author":"Burhanuddin","year":"2018","journal-title":"J. Telecommun. Electr. Comput. Eng."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Devarakonda, S., Halgamuge, M.N., and Mohammad, A. (2019). Critical issues in the invasion of the Internet of Things (IoT): Security, privacy, and other vulnerabilities. Handbook of Research on Big Data and the IoT, IGI Global.","DOI":"10.4018\/978-1-5225-7432-3.ch010"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"254","DOI":"10.1109\/JSEN.2015.2475298","article-title":"Lightweight and secure session-key establishment scheme in smart home environments","volume":"16","author":"Kumar","year":"2016","journal-title":"IEEE Sens. J."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Khemissa, H., and Tandjaoui, D. (2016, January 18\u201320). A novel lightweight authentication scheme for heterogeneous wireless sensor networks in the context of Internet of Things. Proceedings of the Wireless Telecommunications Symposium, London, UK.","DOI":"10.1109\/WTS.2016.7482039"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"4351603","DOI":"10.1155\/2018\/4351603","article-title":"Survey of authentication and authorization for the Internet of Things","volume":"2018","author":"Trnka","year":"2018","journal-title":"Secur. Commun. Netw."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Qureshi, U.M., Hancke, G.P., Gebremichael, T., Jennehag, U., Forsstr\u00f6m, S., and Gidlund, M. (2018, January 21\u201323). Survey of proximity based authentication mechanisms for the Industrial Internet of Things. Proceedings of the 44th Annual Conference of the IEEE Industrial Electronics Society, Washington, DC, USA.","DOI":"10.1109\/IECON.2018.8591118"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"6562953","DOI":"10.1155\/2017\/6562953","article-title":"Authentication protocols for Internet of Things: A comprehensive survey","volume":"2017","author":"Ferrag","year":"2017","journal-title":"Secur. Commun. Netw."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Bamasag, O.O., and Youcef-Toumi, K. (2015, January 4\u20139). Towards continuous authentication in Internet of Things based on secret sharing scheme. Proceedings of the Workshop on Embedded Systems Security (WESS\u201915), Amsterdam, The Netherlands.","DOI":"10.1145\/2818362.2818363"},{"key":"ref_23","first-page":"156","article-title":"Secure mutual authentication and automated access control for IoT smart home using cumulative keyed-hash chain","volume":"45","author":"Alshahrani","year":"2019","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Fairchild, A. (2019). Twenty-first-century smart facilities management: Ambient networking in intelligent office buildings. Guide to Ambient Intelligence in the IoT Environment, Springer.","DOI":"10.1007\/978-3-030-04173-1_12"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Filippoupolitis, A., Takand, B., and Loukas, G. (2016, January 14\u201316). Activity recognition in a home setting using off the shelf smart watch technology. Proceedings of the 15th International Conference on Ubiquitous Computing and Communications, Granada, Spain.","DOI":"10.1109\/IUCC-CSS.2016.014"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Nguyen, M., Fan, L., and Shahabi, C. (2015, January 14\u201317). Activity recognition using wrist-worn sensors for human performance evaluation. Proceedings of the IEEE 15th International Conference on Data Mining Workshops, Atlantic City, NJ, USA.","DOI":"10.1109\/ICDMW.2015.199"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Jorquera Valero, J.M., S\u00e1nchez S\u00e1nchez, P.M., Fern\u00e1ndez Maim\u00f3, L., Huertas Celdr\u00e1n, A., Arjona Fern\u00e1ndez, M., De Los Santos V\u00edlchez, S., and Mart\u00ednez P\u00e9rez, G. (2018). Improving the security and QoE in mobile devices through an intelligent and adaptive continuous authentication system. Sensors, 18.","DOI":"10.3390\/s18113769"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"404","DOI":"10.1109\/THMS.2016.2623562","article-title":"Continuous authentication with touch behavioral biometrics and voice on wearable glasses","volume":"47","author":"Peng","year":"2017","journal-title":"IEEE Trans. Hum. Mach. Syst."},{"key":"ref_29","unstructured":"Zhou, L., Su, C., Chiu, W., and Yeh, K.H. (2017). You think, therefore you are: Transparent authentication system with brainwave-oriented bio-features for IoT networks. IEEE Trans. Emerg. Top. Comput., 1\u201311."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1109\/MIC.2017.33","article-title":"Continuous authentication and authorization for the Internet of Things","volume":"21","author":"Shahzad","year":"2017","journal-title":"IEEE Internet Comput."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"75","DOI":"10.1016\/j.neucom.2018.08.033","article-title":"Recognizing multi-resident activities in non-intrusive sensor-based smart homes by formal concept analysis","volume":"318","author":"Hao","year":"2018","journal-title":"Neurocomputing"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Gagniuc, P.A. (2017). Markov Chains: FromTheory to Implementation and Experimentation, John Wiley & Sons.","DOI":"10.1002\/9781119387596"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1016\/j.pmcj.2016.07.006","article-title":"Anomaly detection for smartphone data streams","volume":"35","author":"Mirsky","year":"2017","journal-title":"Perv. Mob. Comput."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1210","DOI":"10.1016\/j.energy.2015.09.050","article-title":"Reliable context-aware multi-attribute continuous authentication framework for secure energy utilization management in smart homes","volume":"93","author":"Premarathne","year":"2015","journal-title":"Energy"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Ashibani, Y., Kauling, D., and Mahmoud, Q.H. (2019). Design and implementation of a contextual-based continuous authentication framework for smart homes. Appl. Syst. Innovat., 2.","DOI":"10.3390\/asi2010004"},{"key":"ref_36","unstructured":"Washington State University (2019, June 24). Center for Advanced Studies in Adaptive Systems (CASAS) Datasets. Available online: http:\/\/casas.wsu.edu\/datasets."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Quesada, F.J., Moya, F., Medina, J., Mart\u00ednez, L., Nugent, C., and Espinilla, M. (2015). Generation of a partitioned dataset with daily living activities. Ubiquitous Computing and Ambient Intelligence, Sensing, Processing, and Using Environmental Information, Springer.","DOI":"10.1007\/978-3-319-26401-1_6"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"e1254","DOI":"10.1002\/widm.1254","article-title":"Recent trends in machine learning for human activity recognition\u2014A survey","volume":"8","author":"Ramamurthy","year":"2018","journal-title":"Wiley Interdiscip. Rev. Data Min. Knowl. Discov."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1109\/MCOM.2017.1600117CM","article-title":"Enabling highly dynamic mobile scenarios with Software Defined Networking","volume":"55","year":"2017","journal-title":"IEEE Commun. Mag."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"1361","DOI":"10.1109\/COMST.2017.2781126","article-title":"Optimal Countermeasures Selection Against Cyber Attacks: A Comprehensive Survey on Reaction Frameworks","volume":"20","author":"Nespoli","year":"2018","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_41","unstructured":"Motik, B., Patel-Schneider, P.F., and Parsia, B. (2019, June 24). OWL 2Web Ontology Language: Structural Specification and Functional-Style Syntax (2nd ed.). Available online: https:\/\/www.w3.org\/TR\/owl2-syntax\/."},{"key":"ref_42","unstructured":"Stanford Center for Biomedical Informatics Research (2019, June 24). Prot\u00e9g\u00e9: A Free, Open Source Ontology Editor and Knowledge-Base Framework. Available online: http:\/\/protege.stanford.edu."},{"key":"ref_43","unstructured":"Horrocks, I., Patel Schneider, P.F., Boley, H., Tabet, S., Grosof, B., and Dean, M. (2019, June 24). SWRL: A Semantic Web Rule Language Combining OWL and RuleML. Available online: https:\/\/www.w3.org\/Submission\/SWRL\/."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1016\/j.websem.2007.03.004","article-title":"Pellet: A practical OWL-DL reasoner","volume":"5","author":"Sirin","year":"2007","journal-title":"Web Semant. Sci. Serv. Agents World Wide Web"},{"key":"ref_45","unstructured":"Prud\u2019hommeaux, E., and Seaborne, A. (2019, June 24). SPARQL Query Language for RDF. Available online: https:\/\/www.w3.org\/TR\/rdf-sparql-query\/."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/12\/2832\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T13:01:06Z","timestamp":1760187666000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/19\/12\/2832"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6,25]]},"references-count":45,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2019,6]]}},"alternative-id":["s19122832"],"URL":"https:\/\/doi.org\/10.3390\/s19122832","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,6,25]]}}}