{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T15:01:41Z","timestamp":1772809301760,"version":"3.50.1"},"reference-count":35,"publisher":"MDPI AG","issue":"16","license":[{"start":{"date-parts":[[2021,8,4]],"date-time":"2021-08-04T00:00:00Z","timestamp":1628035200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Smart cities use the Internet of Things (IoT) devices such as connected sensors, lights, and meters to collect and analyze data to improve infrastructure, public utilities, and services. However, the true potential of smart cities cannot be leveraged without addressing many security concerns. In particular, there is a significant challenge for provisioning a reliable access control solution to share IoT data among various users across organizations. We present a novel entitlement-based blockchain-enabled access control architecture that can be used for smart cities (and for any ap-plication domains that require large-scale IoT deployments). Our proposed entitlement-based access control model is flexible as it facilitates a resource owner to safely delegate access rights to any entities beyond the trust boundary of an organization. The detailed design and implementation on Ethereum blockchain along with a qualitative evaluation of the security and access control aspects of the proposed scheme are presented in the paper. The experimental results from private Ethereum test networks demonstrate that our proposal can be easily implemented with low latency. This validates that our proposal is applicable to use in the real world IoT environments.<\/jats:p>","DOI":"10.3390\/s21165264","type":"journal-article","created":{"date-parts":[[2021,8,4]],"date-time":"2021-08-04T08:47:52Z","timestamp":1628066872000},"page":"5264","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":14,"title":["Entitlement-Based Access Control for Smart Cities Using Blockchain"],"prefix":"10.3390","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8455-2499","authenticated-orcid":false,"given":"Fariza","family":"Sabrina","sequence":"first","affiliation":[{"name":"School of Engineering and Technology, Central Queensland University, Sydney, NSW 2000, Australia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1002-057X","authenticated-orcid":false,"given":"Julian","family":"Jang-Jaccard","sequence":"additional","affiliation":[{"name":"Cyber Security Lab, School of Natural and Computational Sciences, Massey University, Auckland 0632, New Zealand"}]}],"member":"1968","published-online":{"date-parts":[[2021,8,4]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"199","DOI":"10.1016\/j.comnet.2018.03.012","article-title":"Internet of things security: A top-down survey","volume":"141","author":"Kouicem","year":"2018","journal-title":"Comput. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1016\/j.jnca.2017.04.002","article-title":"Internet of Things security: A survey","volume":"88","author":"Alaba","year":"2017","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"163","DOI":"10.1016\/j.comnet.2018.08.001","article-title":"Sensing, communication and security planes: A new challenge for a smart city system design","volume":"144","author":"Habibzadeh","year":"2018","journal-title":"Comput. Netw."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"122","DOI":"10.1109\/MCOM.2017.1600267CM","article-title":"Security and Privacy in Smart City Applications: Challenges and Solutions","volume":"55","author":"Zhang","year":"2017","journal-title":"IEEE Commun. Mag."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Xu, R., Chen, Y., Blasch, E., and Chen, G. (2018). BlendCAC: A BLockchain-ENabled Decentralized Capability-based Access Control for IoTs. arXiv.","DOI":"10.20944\/preprints201805.0079.v1"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1594","DOI":"10.1109\/JIOT.2018.2847705","article-title":"Smart Contract-Based Access Control for the Internet of Things","volume":"6","author":"Zhang","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Sabrina, F. (2019, January 27\u201329). A Novel Entitlement-based Blockchain-enabled Security Architecture for IoT. Proceedings of the 2019 29th International Telecommunication Networks and Applications Conference (ITNAC), Auckland, New Zealand.","DOI":"10.1109\/ITNAC46935.2019.9077971"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"38431","DOI":"10.1109\/ACCESS.2019.2905846","article-title":"A Novel Attribute-Based Access Control Scheme Using Blockchain for IoT","volume":"7","author":"Ding","year":"2019","journal-title":"IEEE Access"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Sabrina, F. (2019, January 14\u201317). Blockchain and Structural Relationship Based Access Control for IoT: A Smart City Use Case. Proceedings of the 2019 IEEE 44th Conference on Local Computer Networks (LCN), Osnabrueck, Germany.","DOI":"10.1109\/LCN44214.2019.8990757"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Wang, P., Yue, Y., Sun, W., and Liu, J. (2019, January 21\u201323). An Attribute-Based Distributed Access Control for Blockchain-enabled IoT. Proceedings of the 2019 International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), Barcelona, Spain.","DOI":"10.1109\/WiMOB.2019.8923232"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Islam, M.A., and Madria, S. (2019, January 14\u201317). A Permissioned Blockchain Based Access Control System for IOT. Proceedings of the 2019 IEEE International Conference on Blockchain (Blockchain), Atlanta, GA, USA.","DOI":"10.1109\/Blockchain.2019.00071"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Sultana, T., Almogren, A., Akbar, M., Zuair, M., Ullah, I., and Javaid, N. (2020). Data Sharing System Integrating Access Control Mechanism using Blockchain-Based Smart Contracts for IoT Devices. Appl. Sci., 10.","DOI":"10.3390\/app10020488"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"5943","DOI":"10.1002\/sec.1748","article-title":"Fairaccess: A new blockchain-based access control framework for the internet of things","volume":"9","author":"Ouaddah","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Alphandy, O., Amoretti, M., Claeys, T., Dall\u2019Asta, S., Duday, A., Ferrari, G., Rousseauy, F., Tourancheauy, B., Veltri, L., and Zanichelli, F. (2018, January 15\u201318). IoTChain: A Blockchain Security Architecture for the Internet of Things. Proceedings of the IEEE Wireless Communications and Networking Conference (WCNC), Barcelona, Spain.","DOI":"10.1109\/WCNC.2018.8377385"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1184","DOI":"10.1109\/JIOT.2018.2812239","article-title":"Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT","volume":"5","author":"Novo","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"4000","DOI":"10.1109\/JIOT.2019.2960526","article-title":"Blockchain-Enabled Decentralized Trust Management and Secure Usage Control of IoT Big Data","volume":"7","author":"Zhaofeng","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Al-Megren, S., Alsalamah, S., Altoaimy, L., Alsalamah, H., Soltanisehat, L., Almutairi, E., and Pentland, A.S. (August, January 30). Blockchain Use Cases in Digital Sectors: A Review of the Literature. Proceedings of the IEEE Conference on Blockchain (Blockchain 2018), Halifax, NS, Canada.","DOI":"10.1109\/Cybermatics_2018.2018.00242"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"8","DOI":"10.1109\/MNET.001.1900178","article-title":"Securing Smart Cities through Blockchain Technology: Architecture, Requirements, and Challenges","volume":"34","author":"Hakak","year":"2020","journal-title":"IEEE Netw."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"429","DOI":"10.3390\/smartcities4020024","article-title":"IoT in smart cities: A survey of technologies, practices and challenges","volume":"4","author":"Abbas","year":"2021","journal-title":"Smart Cities"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"103007","DOI":"10.1016\/j.jnca.2021.103007","article-title":"Blockchain for IoT-based smart cities: Recent advances, requirements, and future challenges","volume":"181","author":"Majeed","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"102360","DOI":"10.1016\/j.scs.2020.102360","article-title":"Blockchain for Smart Cities: A review of Architectures, Integration Trends and Future Research Directions","volume":"61","author":"Bhushan","year":"2020","journal-title":"Sustain. Cities Soc."},{"key":"ref_22","first-page":"1","article-title":"Decentralized Video Input Authentication as an Edge Service for Smart Cities","volume":"PP","author":"Xu","year":"2021","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Xu, R., Chen, Y., and Blasch, E. (2020). Decentralized Access Control for IoT Based on Blockchain and Smart Contract. Modeling and Design of Secure Internet of Things, John Wiley & Sons.","DOI":"10.1002\/9781119593386.ch22"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Yavari, A., Panah, A.S., Georgakopoulos, D., Jayaraman, P.P., and Van Schyndel, R. (2017, January 5\u20138). Scalable Role-Based Data Disclosure Control for the Internet of Things. Proceedings of the 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS), Atlanta, GA, USA.","DOI":"10.1109\/ICDCS.2017.307"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"7001","DOI":"10.1109\/ACCESS.2017.2693380","article-title":"An Access Control Model for Resource Sharing Based on the Role-Based Access Control Intended for Multi-Domain Manufacturing Internet of Things","volume":"5","author":"Liu","year":"2017","journal-title":"IEEE Access"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1617","DOI":"10.12785\/amis\/080416","article-title":"An efficient authentication and access control scheme for perception layer of internet of things","volume":"8","author":"Ye","year":"2014","journal-title":"Appl. Math. Inf. Sci."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Bhatt, S., Patwa, F., and Sandhu, R. (2017). Access control model for aws internet of things. International Conference on Network and System Security, Springer.","DOI":"10.1007\/978-3-319-64701-2_57"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1109\/MC.2015.33","article-title":"Attribute-Based Access Control","volume":"48","author":"Hu","year":"2015","journal-title":"Computer"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1189","DOI":"10.1016\/j.mcm.2013.02.006","article-title":"A capability-based security approach to manage access control in the internet of things","volume":"58","author":"Gusmeroli","year":"2013","journal-title":"Math. Comput. Model."},{"key":"ref_30","first-page":"309","article-title":"Identity authentication and capability based access control (iacac) for the internet of things","volume":"1","author":"Mahalle","year":"2013","journal-title":"J. Cyber Secur. Mobil."},{"key":"ref_31","first-page":"1","article-title":"Blockchain-based Data Sharing System for Sensing-as-a-Service in Smart Cities","volume":"21","author":"Lin","year":"2021","journal-title":"ACM Trans. Internet Technol."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Saha, S., Sutrala, A.K., Das, A.K., Kumar, N., and Rodrigues, J.J.P.C. (2020, January 7\u201311). On the Design of Blockchain-Based Access Control Protocol for IoT-Enabled Healthcare Applications. Proceedings of the 2020 IEEE International Conference on Communications (ICC), Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9148915"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"324","DOI":"10.1016\/j.future.2020.04.020","article-title":"Experimenting with smart contracts for access control and delegation in IoT","volume":"111","author":"Tapas","year":"2020","journal-title":"Futur. Gener. Comput. Syst."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"6372","DOI":"10.1109\/JIOT.2020.3033434","article-title":"Attribute-Based Access Control for Smart Cities: A Smart-Contract-Driven Framework","volume":"8","author":"Zhang","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_35","unstructured":"(2021, January 10). Go-Ethereum. Available online: https:\/\/github.com\/ethereum\/go-ethereum."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/16\/5264\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T06:40:23Z","timestamp":1760164823000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/16\/5264"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,4]]},"references-count":35,"journal-issue":{"issue":"16","published-online":{"date-parts":[[2021,8]]}},"alternative-id":["s21165264"],"URL":"https:\/\/doi.org\/10.3390\/s21165264","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,8,4]]}}}