Modelos de Controle de Acesso Sensíveis ao Contexto com uso de Smart Contracts

• Ano de defesa: 2019
• Autor(a) principal: Souza, Marcos Vinicius Menezes Rodrigues de
• Orientador(a): Guardia, Hélio Crestana
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Federal de São Carlos; Câmpus São Carlos
• Programa de Pós-Graduação: Programa de Pós-Graduação em Ciência da Computação - PPGCC
• Palavras-chave em Português: Controle de acesso; Sensibilidade ao contexto; Computação ubíqua
• Palavras-chave em Inglês: Access control; Context awareness; Ubiquitous computing; Blockchain
• Área do conhecimento CNPq: CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO::METODOLOGIA E TECNICAS DA COMPUTACAO
• Link de acesso: https://repositorio.ufscar.br/handle/20.500.14289/11560

The constant advances in ubiquitous computing and in the Internet of things (IoT) bring new challenges to access control systems, such as building a mechanism not dependent on a centralized trusted party, and the need to account for contextual data. Such characteristics may be required to enable IoT services in smart homes, smart cities, medical services, or even in mobile computer based health monitoring systems. In these distributed computing environments, direct device to device interactions are commonly based on service requests among the participants, which reinforce the need for flexible and scalable authenticity and confidentiality mechanisms. This work deals with the development of an access control model to address such challenges using a blockchain infrastructure. In the proposed method, services and contextual data are defined using smart contracts, and blockchain logs are used for distributed and trustful information management. Blockchain assets are associated with permissions, and their transfers are used to directly verify access control rights in service invocation requests. A reference implementation of the the proposed model has been developed using the Hyperledger system and the results show the viability of this methodology.