Regulating IoT Messages

Alban Gabillon (1) , Emmanuel Bruno (2)

1 GePaSUD - Géopôle du Pacifique Sud
2 DIAMS - Data Integration, Analysis, and Management as Services

The MQTT (Message Queuing Telemetry Transport) protocol is becoming the main protocol for the Internet of Things (IoT). In this paper, we define a highly expressive ABAC (Attribute-Based Access Control) security model for the MQTT protocol. Our model allows us to regulate not only publications and subscriptions but also distribution of messages to subscribers. We can express various types of contextual security rules, (temporal security rules, content-based security rules, rules based on the frequency of events etc.).

Mots clés: Security policy; MQTT; ABAC; IoT; First-order logic

Domaines: Cryptographie et sécurité [cs.CR]

Alban Gabillon, Emmanuel Bruno. Regulating IoT Messages. International Conference on Information Security Practice and Experience (ISPEC 2018), Sep 2018, Tokyo, Japan. pp.468-480, ⟨10.1007/978-3-319-99807-7_29⟩. ⟨hal-01893582⟩