Identity Management approach in Internet of Things

Zdravkova, Vanya Hristova

4. term

Innovative Communication Technologies and Entrepreneurship, Master

2015

2015-06-03

I dag forventer mennesker at være forbundet til internettet overalt og hele tiden. Fremskridt inden for informations- og kommunikationsteknologi (IKT) har gjort tjenester som smarte hjem, telemedicin og e-sundhed muligt gennem heterogene netværk i tingenes internet (IoT), drevet af maskine-til-maskine (M2M) kommunikation. Selv om kommunikationen primært foregår mellem enheder, er det mennesker, der skaber og bruger information. Derfor bør brugeren betragtes som et smart IoT-objekt, der skal identificeres, autentificeres og autoriseres. Brugeridentifikation er dog følsom, fordi mange er tilbageholdende med at dele private oplysninger, og de enheder, som en bruger anvender, bør tages i betragtning. Der er derfor behov for brugervenlige mekanismer til identifikation og identitetshåndtering (IdM), som involverer alle objekter i IoT. Samtidig er det vigtigt, at brugeren spiller en aktiv rolle i at skabe reglerne for identifikation, og at tjenesterne reagerer hurtigt – en udvikling mod Internet of People. Dette speciale adresserer problemerne med brugeridentifikation og foreslår designet af et nyt IdM-system, Single Thing Sign On (STSO), hvor slutbrugeren står i centrum af et brugercentreret økosystem. Den foreslåede løsning gør det muligt at genkende brugeren og give adgang til tildelte tjenester ved at identificere én af de ting, der er knyttet til brugeren (for eksempel personlige computerenheder eller sensorer). Derudover foreslås en metode til brugeridentifikation drevet af en Computing Device Recognition (CDR) algoritme, som genkender brugerens enheder. STSO og CDR blev vurderet med både tekniske og forretningsmæssige analysemetoder for at understøtte konceptet. Diskussionen bekræfter emnets betydning og præciserer målsætningerne.

People today expect to be connected to the internet anywhere and anytime. Advances in information and communication technologies (ICT) have enabled services like smart homes, telemedicine, and e‑health through heterogeneous Internet of Things (IoT) networks driven by machine‑to‑machine (M2M) communication. Although devices carry out most of the communication, humans generate and consume the information. This means users should be treated as smart IoT objects that need to be identified, authenticated, and authorized. User identification is delicate because people are cautious about sharing private data, and the devices a person uses must be considered. There is a need for user‑friendly identification and identity management (IdM) mechanisms that involve all IoT objects. It is also important that users play an active role in defining identification rules and that services remain responsive, moving toward the idea of an Internet of People. This thesis addresses user identification and proposes a new IdM system called Single Thing Sign On (STSO), which places the end user at the center of a user‑focused services ecosystem. The proposed scheme recognizes the user and grants access to assigned services by identifying one of the things associated with the user (for example, personal computing devices or sensors). In addition, it introduces a user identification method based on a Computing Device Recognition (CDR) algorithm that recognizes the user’s devices. The STSO scheme and CDR algorithm were evaluated using technical and business analysis methods to support the concept. The discussion confirms the importance of the topic and clarifies the objectives.

[This abstract was generated with the help of AI]

IoT ; M2M ; user identification ; IdM ; authentication ; user-centered

Download
View record in AAU Student Projects