Authorization Verification Service for Context-Aware IoT Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT/M2M service layers lack dynamic context-aware authorization mechanisms, leading to restrictive or permissive authorization policies that are unreliable, complex, and potentially insecure, and fail to manage malfunctioning devices effectively.
Innovation Solution
An Authorization Verification Service (AVS) is introduced to provide dynamic context-aware authorization, allowing IoT/M2M service layers to set and manage authorization limits, propagate policies, and revoke access when conditions are met, considering additional system context and expected device behavior.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dynamic context-aware authorization mechanisms are implemented, then authorization reliability and security are improved, but service layer complexity increases
Solution Approach 1:
An Authorization Verification Service (AVS) is introduced as an intermediary component within the service layer. The AVS maintains authorization context information and verifies authorization requests, separating the complex authorization logic from application entities. This mediator approach improves authorization reliability while managing complexity by centralizing authorization management in a dedicated service.
Solution Approach 2:
The authorization system is segmented into distinct components: application entities that generate authorization requests, the AVS that maintains context and makes decisions, and the service layer infrastructure that enforces decisions. This segmentation allows each component to be optimized independently, improving overall reliability while distributing complexity across manageable modules.
2Object-affected harmful factors
If dynamic authorization limits are maintained and enforced, then access security is improved, but processing overhead increases
Solution Approach 1:
Authorization context information and dynamic limits are established in advance before actual access requests occur. The AVS pre-processes authorization policies and maintains ready-to-use context information, so when access requests arrive, verification can proceed quickly without extensive real-time computation, reducing processing overhead while maintaining security.
Solution Approach 2:
The AVS maintains copies of authorization context information in an optimized format for rapid verification. Rather than re-evaluating full authorization policies for each request, the system uses pre-computed context copies that enable fast comparison and decision-making, balancing security enforcement with processing efficiency.
Data Source
AI summary
An Authorization Verification Service (AVS) is disclosed that may be provided by an IoT/M2M service layer to registrants of the service layer for Dynamic Context Aware Authorization. The AVS may allow the IoT/M2M service layer entities to define dynamic limits for authorizing access to services or data. The limits may be set, for example, in terms of the number of allowed accesses. When an IoT/M2M registrant makes a request for data or services for which it has dynamic context aware authorization, the AVS may maintain records of the remaining accesses available.