Authorization schemes for internet of things: requirements, weaknesses, future challenges and trends

• DOI: 10.1007/s40747-022-00765-y
• Publication Date: 2022-05-19T13:03:41Z
• Authors: Abid Khan; Awais Ahmad; Mansoor Ahmed; Jadran Sessa; Marco Anisetti
• Keywords: FOS: Computer and information sciences; Access control; Security attacks; Security threat; IoT Security; Computer Networks and Communications; Internet of Things; Epistemology; Database; Artificial Intelligence; Computer security; Strengths and weaknesses; Software deployment; Access control; Advanced Cryptographic Schemes and Protocols; Internet of Things and Edge Computing; Blockchain and Internet of Things Integration; Scalability; Computer science; FOS: Philosophy, ethics and religion; Philosophy; Operating system; Authentication (law); Computer Science; Physical Sciences; Authorization; Internet privacy; Information Systems

AbstractScalable and secure authorization of smart things is of the crucial essence for the successful deployment of the Internet of Things (IoT). Unauthorized access to smart things could exacerbate the security and privacy concern, which could, in turn, lead to the reduced adoption of the IoT, and ultimately to the emergence of severe threats. Even though there are a variety of IoT solutions for secure authorization, authorization schemes in highly dynamic distributed environments remain a daunting challenge. Access rights can dynamically change due to the heterogeneous nature of shared IoT devices and, thus, the identity and access control management are challenging. This survey provides a comprehensive comparative analysis of the current state-of-the-art IoT authorization schemes to highlight their strengths and weaknesses. Then, it defines the most important requirements and highlights the authorization threats and weaknesses impacting authorization in the IoT. Finally, the survey presents the ongoing open authorization challenges and provides recommendations for future research.