Energy-efficient and decentralized access control: a framework for embedded systems and mobility
File(s)
Author(s)
Lundbæk, Leif-Nissen
Type
Thesis
Abstract
Based on the immanent challenges of access control in modern distributed and resource- constrained IoT networks, this thesis aims at researching and designing an energy-efficient and trustworthy framework for access control in embedded systems in a distributed setting.
As such, the thesis fulfils its objectives by, first of all, developing and analysing Proof of Kernel Work (PoKW) – a novel, energy-efficient, and scalable consensus algorithm for blockchains in resource-constrained settings. It solves the issue of the rising energy consumption in the mining process of blockchains, yet, with the persistent requirement of operating in an environment with permissioned rather than permissionless/open digital identities. Thus, we also propose the expansion of PoKW towards further proof algorithms, such as PoET for finding a secure and energy-efficient consensus in open/permissionless networks. Secondly, the thesis develops FROST as a lightweight and highly flexible access-control framework and language tailored for resource-constrained settings, such as embedded devices and the infrastructure in which they are used. The FROST framework is also expanded with relevant concepts, such as obligations and the delegation of access-control policies, to particularly address the needs of reliable and secure human-machine interactions in commercial settings of the IoT and mobility space. In order to research the security and soundness of these approaches, the thesis also introduces verification mechanisms and applies them in a programmatic way using SMT solvers. Finally, the thesis also tests its theoretic contributions in two different practical settings together with Porsche or Infineon, respectively, as industry partners. This opportunity of evaluation with commercial players seems particularly important in order to identify the shortcomings as well as the vast commercial potential of the mentioned developments and concepts in the fields of IoT and especially mobility. Hereby, the thesis proves the implementability of PoKW and FROST and identifies further, potential implementation requirements, e.g., for features pertaining to obligations and delegations.
As such, the thesis fulfils its objectives by, first of all, developing and analysing Proof of Kernel Work (PoKW) – a novel, energy-efficient, and scalable consensus algorithm for blockchains in resource-constrained settings. It solves the issue of the rising energy consumption in the mining process of blockchains, yet, with the persistent requirement of operating in an environment with permissioned rather than permissionless/open digital identities. Thus, we also propose the expansion of PoKW towards further proof algorithms, such as PoET for finding a secure and energy-efficient consensus in open/permissionless networks. Secondly, the thesis develops FROST as a lightweight and highly flexible access-control framework and language tailored for resource-constrained settings, such as embedded devices and the infrastructure in which they are used. The FROST framework is also expanded with relevant concepts, such as obligations and the delegation of access-control policies, to particularly address the needs of reliable and secure human-machine interactions in commercial settings of the IoT and mobility space. In order to research the security and soundness of these approaches, the thesis also introduces verification mechanisms and applies them in a programmatic way using SMT solvers. Finally, the thesis also tests its theoretic contributions in two different practical settings together with Porsche or Infineon, respectively, as industry partners. This opportunity of evaluation with commercial players seems particularly important in order to identify the shortcomings as well as the vast commercial potential of the mentioned developments and concepts in the fields of IoT and especially mobility. Hereby, the thesis proves the implementability of PoKW and FROST and identifies further, potential implementation requirements, e.g., for features pertaining to obligations and delegations.
Version
Open Access
Date Issued
2019-09
Date Awarded
2020-03
Copyright Statement
Creative Commons Attribution NonCommercial Licence
Advisor
Huth, Michael
Publisher Department
Computing
Publisher Institution
Imperial College London
Qualification Level
Doctoral
Qualification Name
Doctor of Philosophy (PhD)