Abstract
In the IoT (Internet of Things), data are exchanged among subjects and objects in devices through manipulating objects. Even if subjects manipulate objects in accordance with the CBAC (Capability-Based Access Control) model, the subjects can get data which are not allowed to be gotten by the subjects, i.e. illegal information flow and late information flow occur. Hence, the OI (Operation Interruption) and TBOI (Time-Based OI) protocols where operations occurring illegal and late types of information flows are interrupted are implemented. Moreover, capability token selection algorithms are proposed and applied to the protocols. The protocols are implemented and evaluated in terms of the request processing time, communication traffic, and electric energy consumption. However, the more number of operations are interrupted to prevent both types of illegal and late information flows because the amount of data kept by entities monotonically increases through manipulating objects in the protocols. Therefore, reduction of the number of operations interrupted is important. For this aim, an FC (Fog Computing) model of the IoT where data from devices are processed in a fog layer and the processed data are sent to subjects is considered in this paper. In the evaluation, it is shown that the number of operations interrupted is reduced in the FC-based protocols compared with the conventional protocols.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Raspberry Pi 3 Model B+. https://www.raspberrypi.org/products/raspberry-pi-3-model-b-plus/
Raspbian, version 10.3 (2020). https://www.raspbian.org/
Denning, D.E.R.: Cryptography and Data Security. Addison Wesley, Boston (1982)
Hanes, D., Salgueiro, G., Grossetete, P., Barton, R., Henry, J.: IoT Fundamentals: Networking Technologies, Protocols, and Use Cases for the Internet of Things. Cisco Press, Indianapolis (2018)
Hernández-Ramos, J.L., Jara, A.J., Marín, L., Skarmeta, A.F.: Distributed capability-based access control for the internet of things. J. Internet Serv. Inf. Secur. 3(3/4), 1–16 (2013)
Johnson, D., Menezes, A., Vanstone, S.: The elliptic curve digital signature algorithm (ECDSA). Int. J. Inf. Secur. 1(1), 36–63 (2001)
Kataoka, H., Nakamura, S., Duolikun, D., Enokido, T., Takizawa, M.: Multi-level power consumption model and energy-aware server selection algorithm. Int. J. Grid Util. Comput. 8(3), 201–210 (2017)
Nakamura, S., Duolikun, D., Aikebaier, A., Enokido, T., Takizawa, M.: Read-write abortion (RWA) based synchronization protocols to prevent illegal information flow. In: Proceedings of the 17th International Conference on Network-Based Information Systems, pp. 120–127 (2014)
Nakamura, S., Duolikun, D., Enokido, T., Takizawa, M.: A read-write abortion protocol to prevent illegal information flow in role-based access control systems. Int. J. Space-Based Situated Comput. 6(1), 43–53 (2016)
Nakamura, S., Enokido, T., Takizawa, M.: Information flow control in object-based peer-to-peer publish/subscribe systems. Concurr. Comput. Pract. Experience 32(8), e5118 (2020)
Nakamura, S., Enokido, T., Takizawa, M.: Implementation and evaluation of the information flow control for the internet of things. Concurr. Comput. Pract. Experience 33(19), e6311 (2021)
Nakamura, S., Enokido, T., Takizawa, M.: Information flow control based on capability token validity for secure IoT: implementation and evaluation. Internet of Things 15, 100,423 (2021)
Nakamura, S., Enokido, T., Takizawa, M.: Traffic reduction for information flow control in the IoT. In: Barolli, L. (ed.) BWCCA 2021. LNNS, vol. 346, pp. 67–77. Springer, Cham (2022). https://doi.org/10.1007/978-3-030-90072-4_7
Nakamura, S., Enokido, T., Takizawa, M.: Capability token selection algorithms to implement lightweight protocols. Internet of Things 19, 100,542 (2022)
Nakamura, S., Enokido, T., Takizawa, M.: Energy consumption model of a device supporting information flow control in the IoT. In: Barolli, L., Kulla, E., Ikeda, M. (eds.) EIDWT 2022. LNDECT, vol. 118, pp. 142–152. Springer, Cham (2022). https://doi.org/10.1007/978-3-030-95903-6_16
Nakamura, S., Enokido, T., Takizawa, M.: Energy consumption of the information flow control in the IoT: simulation evaluation. In: Barolli, L., Hussain, F., Enokido, T. (eds.) AINA 2022. LNNS, vol. 449, pp. 285–296. Springer, Cham (2022). https://doi.org/10.1007/978-3-030-99584-3_25
Oma, R., Nakamura, S., Duolikun, D., Enokido, T., Takizawa, M.: An energy-efficient model for fog computing in the internet of things (IoT). Internet of Things 1–2, 14–26 (2018)
Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Comput. 29(2), 38–47 (1996)
Shelby, Z., Hartke, K., Bormann, C.: Constrained application protocol (CoAP). IFTF Internet-draft (2013). http://tools.ietf.org/html/draft-ietf-core-coap-18
Tanganelli, G., Vallati, C., Mingozzi, E.: CoAPthon3 version 1.0.1 (2018). https://github.com/Tanganelli/CoAPthon3. Accessed 28 June 2020
Tanganelli, G., Vallati, C., Mingozzi, E.: CoAPthon: easy development of CoAP-based IoT applications with Python. In: IEEE 2nd World Forum on Internet of Things (WF-IoT 2015), pp. 63–68 (2015)
Yuan, E., Tong, J.: Attributed based access control (ABAC) for web services. In: Proceedings of the IEEE International Conference on Web Services (ICWS 2005), p. 569 (2005)
Acknowledgements
This work was supported by Japan Society for the Promotion of Science (JSPS) KAKENHI Grant Number JP22K12018.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Nakamura, S., Enokido, T., Takizawa, M. (2023). Evaluation of the Information Flow Control in the Fog Computing Model. In: Barolli, L. (eds) Advances on Broad-Band Wireless Computing, Communication and Applications. BWCCA 2022. Lecture Notes in Networks and Systems, vol 570. Springer, Cham. https://doi.org/10.1007/978-3-031-20029-8_8
Download citation
DOI: https://doi.org/10.1007/978-3-031-20029-8_8
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-20028-1
Online ISBN: 978-3-031-20029-8
eBook Packages: EngineeringEngineering (R0)