Enhancing IoT Security and Privacy with Claims-based Identity Management

Abstract

The Internet of Things (IoT) has ushered in a new era of ubiquitous connectivity among devices, necessitating robust identity management (IdM) solutions to address privacy, security, and efficiency challenges. In this study, it delve into various IdM approaches in the context of IoT, examining their implications for privacy preservation, user experience, integration, and efficiency. In this paper a methodology is an innovative holistic IdM system that leverages emerging cryptographic technologies and a claims-based approach. This system empowers both users and smart objects to manage data disclosure via partial identities and efficient proof mechanisms, ensuring privacy while facilitating seamless interactions which integrate the proposed IdM system with Distributed Capability-Based Access Control (DCapBAC) and Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to cater to diverse IoT scenarios. Through a comparative evaluation, it is highlighted that the limitations of conventional IdM methods and OAuth-based approaches, underscored by the superior efficiency exhibited by our proposed system. Notably efficient, the IdM system stands as a paramount solution for ensuring secure, private, and resource-effective interactions within the ever-expanding IoT landscape. As the IoT domain continues to evolve, embracing advanced identity management systems like our proposal becomes indispensable for fostering trust, bolstering security, and optimizing interactions across interconnected devices and services.