SIUV: A Smart Car Identity Management and Usage Control System Based on Verifiable Credentials - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

SIUV: A Smart Car Identity Management and Usage Control System Based on Verifiable Credentials

Ali Hariri
  • Fonction : Auteur
Subhajit Bandopadhyay
  • Fonction : Auteur
Athanasios Rizos
  • Fonction : Auteur
  • PersonId : 1154391
Theo Dimitrakos
  • Fonction : Auteur
  • PersonId : 1154392
Bruno Crispo
  • Fonction : Auteur
  • PersonId : 1154393
Muttukrishnan Rajarajan
  • Fonction : Auteur
  • PersonId : 990589

Résumé

The automotive industry is witnessing an accelerated growth in digital innovations that turn modern vehicles into digital systems. This makes the security of modern vehicles a crucial concern as they have evolved into cyber-physical and safety-critical systems. Therefore, stateful identity management and continuous access control have become a paramount requirement in smart vehicles. Indeed, several Identity and Access Management (IAM) frameworks have been proposed in the automotive field, but context awareness and continuity of control remain overlooked. To address these challenges, we present SIUV: a stateful smart-car IAM that is based on Usage Control (UCON) and Verifiable Credentials (VCs). SIUV uses Attribute Based Access Control (ABAC) policies to issue privileges to subjects (i.e. drivers or applications) according to their credentials and claims. The issued privileges are then used to decide whether to grant or deny access to in-car resources. Furthermore, the system continuously monitors subject claims, resource attributes and environmental conditions (e.g. location or time). Hence, if a change occurs, the system re-evaluates policies and updates or revokes issued privileges and usage decisions accordingly. We describe the architecture of SIUV, discuss the evaluation results, and define future directions.
Fichier principal
Vignette du fichier
512098_1_En_3_Chapter.pdf (568.31 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03746034 , version 1 (04-08-2022)

Licence

Paternité

Identifiants

Citer

Ali Hariri, Subhajit Bandopadhyay, Athanasios Rizos, Theo Dimitrakos, Bruno Crispo, et al.. SIUV: A Smart Car Identity Management and Usage Control System Based on Verifiable Credentials. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.36-50, ⟨10.1007/978-3-030-78120-0_3⟩. ⟨hal-03746034⟩
20 Consultations
12 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More