金雅拓

Identity-theft, fraud and other related cyber-crimes are continually evolving, causing important damages and problems for European citizens in both virtual and physical places. To meet this challenge, ARIES has devised and implemented a reliable identity management framework endowed with new processes, biometric features, services and security modules that strengthen the usage of secure identity credentials, thereby ensuring a privacy-respecting identity management solution for both physical and online processes. The framework is intended to reduce levels of identity-related crimes by tackling emerging patterns in identity-fraud, from a legal, ethical, socio-economic, technological and organization perspective. This chapter summarizes the main goals, approach taken, achievements and main research challenges in H2020 ARIES project.

Internet of Things (IoT) indicates the concept that increasingly pervasive connected devices will support various applications to enhance the awareness and the capabilities of users. The European Research Cluster on the IoT has created a number of activity chains to favor close cooperation between the projects addressing IoT topics and to form an arena for exchange of ideas and open dialog on important research challenges. This chapter provides an overview of some contributions which European Commission funded projects associated with Activity Chain 05 have made to IoT privacy, security, and governance. It presents a description of the capability-based access control system developed within the EU FP7 IoT@Work project. The GAMBAS project develops an innovative and adaptive middleware to enable the privacy-preserving and automated utilization of behavior-driven services that adapt autonomously to the context of users. The goal of the BUTLER project is the creation of an experimental technical platform to support the development of the IoT.

The Internet of Things is taking hold in our everyday life. Regrettably, the security of IoT devices is often being overlooked. Among the vast array of security issues plaguing the emerging IoT, we decide to focus on access control, as privacy, trust, and other security properties cannot be achieved without controlled access. This article classifies IoT access control solutions from the literature according to their architecture (e.g., centralized, hierarchical, federated, distributed) and examines the suitability of each one for access control purposes. Our analysis concludes that important properties such as auditability and revocation are missing from many proposals while hierarchical and federated architectures are neglected by the community. Finally, we provide an architecture-based taxonomy and future research directions: a focus on hybrid architectures, usability, flexibility, privacy, and revocation schemes in serverless authorization.

Despite several efforts in the last years to make Identity Management Systems (IdMs) reliable, secured and privacy-respectful, identity-related cybercrimes are still continuously expanding. Current IdMs lack of proper security and privacy mechanisms that can holistically manage user’s privacy, strong authentication and ID-proofing mechanisms based on biometrics, usage of breeder documents, while maintaining usability for mobile, online or face-to-face scenarios. To fill this gap, the ARIES EU project aims to set up a reliable identity ecosystem, combining mature technologies for meet highest level of assurance, such as biometrics or use of secure elements, with innovative credential derivation mechanisms. ARIES has devised and implemented a privacy-preserving and user-centric Identity Management framework as well as associated management practices that ensure usability and flexibility for identity management processes. This paper presents ARIES results obtained after the successful development and validation of the ARIES IdM System in the associated use cases.

The ever-growing world of the Internet of Things (IoT) is yet to agree on an effective and practical access control solution. To overcome challenges such as limited resources, or unreliable connectivity, a number of schemes offload heavy computations onto a central entity, thus creating a single point of failure. Our contribution consists in the construction of a distributed attribute-based access control mechanism, relying on the blockchain technology to dynamically manage multi-endorsed attributes and trust anchors. The originality of our proposal is multifold. First, it enables the integration of multiple security domains into a single resilient access control system. Second, its focus on attributes offers flexibility, expressiveness, and user-centricity, accommodating the dynamic addition of subjects. Third, our attribute endorsement is open, scalable, and flexible, enabling multiple administrators without sacrificing ease of management. Finally, the final access control decision is taken by the device and only requires local connection to its gateway.