Sergio Gusmeroli

A capability-based security approach to manage access control in the Internet of Things

Abstract Resource and information protection plays a relevant role in distributed systems like the ones present in the Internet of Things (IoT). Authorization frameworks like RBAC and ABAC do not provide scalable, manageable, effective, and efficient mechanisms to support distributed systems with many interacting services and are not able to effectively support the dynamicity and scaling needs of IoT contexts that envisage a potentially unbound number of sensors, actuators and related resources, services and subjects, as well as a more relevance of short-lived, unplanned and dynamic interaction patterns. Furthermore, as more end-users start using smart devices (e.g. smart phones, smart home appliances, etc.) the need to have more scalable, manageable, understandable and easy to use access control mechanisms increases. This paper describes a capability based access control system that enterprises, or even individuals, can use to manage their own access control processes to services and information. The proposed mechanism supports rights delegation and a more sophisticated access control customization. The proposed approach is being developed within the European FP7 IoT@Work project to manage access control to some of the project’s services deployed in the shop floor.

The Ecolead ICT Infrastructure For Collaborative Networked Organizations

This paper presents a distributed and open ICT infrastructure that is being developed in the ECOLEAD IST IP project to help members of Collaborative Networks in doing businesses and collaborations more efficiently. ICT-I design relies on the service oriented architecture paradigm, and it is implemented with web-services. ICT-I services are to be used on demand and pay-per-use models. It is flexible to support an easy entrance of new services and the withdrawn of others. So far the type of organizations envisaged by the proposed ICT-I are the ones members of virtual breeding environments, virtual organizations and professional virtual communities. This paper details the 1CT- I requirements, its architecture and services. A small description of a first ICT-I prototype is given in the end.

THE ECOLEAD COLLABORATIVE BUSINESS INFRASTRUCTURE FOR NETWORKED ORGANIZATIONS

This paper points out the need of advanced collaborative business ICT infrastructures (CBI) for CNOs, the requirements for the development of CBIs, and the technologies and trends considering CNO issues. The CBI devised in the ECOLEAD Project is also presented, showing how most of these requirements and emergent ICTs have been incorporated in it. This CBI – called ICT-I – is a distributed, open and security-embedded infrastructure, and it relies on the service oriented architecture paradigm. Its services are to be used under the on demand and pay-per-use models. The assessment of ICT-I, some conclusions and challenges are presented in the end.

IoT Access Control Issues: A Capability Based Approach

Resource and information protection plays a relevant role in distributed systems. Most of the currently proposed authorization frameworks do not provide scalable, manageable, effective, and efficient mechanisms to support distributed systems with many interacting services. The advent of IoT will further increase the need for scalable and manageable solutions able to face the potentially unbound number of sensors, actuators and related resources, services and subjects. This is even more relevant if we take into account that IoT environments can envisage not only a greater number of resources to manage, but also a substantial increase of the interaction dynamics. This paper presents a capability based access control system that enterprises, or even individuals, can use to manage their own access control processes to services and information. The proposed mechanism supports rights delegation and a more sophisticated access control customization. The proposed approach is being developed within the European FP7 IoT@Work project to manage access control for some of the projects services deployed in the shop floor.

IoT@Work automation middleware system design and architecture

The industrial sector is being impacted by the Internet of Things due to the increasing availability of computing and communication capabilities in a wide range of devices and equipment deployed in the shop floor. This requires substantial architectural and functional improvements in order to actually manage and exploit the potential of such smart components. The EU FP7 IoT@Work project aims at addressing the issues of Plug&Work configuration and self-management features in automation systems. This paper focuses on presenting the architecture and the main features of the IoT@Work Event Notification Service (ENS) middleware that is used to support an event-driven communication paradigm among devices and services, both inside and outside the factory plant.

Model-driven service engineering towards the manufacturing liquid-sensing enterprise

Information and communication technology (ICT) has facilitated the introduction of mass customisation capabilities into the traditional Enterprise, especially in the domain of manufacturing. Currently individual end-customers are allowed to design and order a product that is uniquely tailored to their preferences. Servitization and product-based services have been gaining momentum to support the integration of products and services with customers. This has enabled companies to maintain a competitive advantage in contemporary markets. However, such capabilities demand more efficient processes, information systems to enable resources optimization, maximized collaborations along the value chains, and interoperable information flows. The FInES Research Roadmap 2025 identifies both Sensing Enterprise and Liquid Enterprise as two Qualities of Being that are strategic for any future enterprise. In fact, the enterprise needs to become self-aware not only in terms of their networked ecosystem but also in face of their inner subsystems and devices. This paper develops the concept of the liquid-sensing enterprise, exploring how modelling and model-driven development can support the transition and services implementation.

A service-oriented platform for collaborative networked organizations

Abstract The paper presents a distributed, service-oriented and open ICT infrastructure (ICT-I) being developed in a European research project which aims at helping members of Collaborative Networks in doing businesses together. ICT-I services are used on-demand, based on the ASP and pay-per-use models. The proposed ICT-I are so far being implemented to support members of virtual breeding environments, virtual organizations and professional virtual communities. Some information about its requirements, architecture, services, implementation and future work are also presented.

An evolving plug-and-play business infrastructure for networked organisations

This paper introduces a distributed and open ICT infrastructure that has been developed in a research project to help members of Collaborative Networks in doing businesses and collaborations together more efficiently. ICT-I design relies on the service oriented architecture paradigm and its services are to be used under the on demand and pay-per-use models. It is flexible to support an easy entrance of new services, offering supporting services for Virtual Breeding Environments, Virtual Organisations and Professional Virtual Communities. This paper details the ICT-I requirements, its architecture and services, and implementation issues. Conclusions and challenges are presented in the end.

Interactive User-Centered Business Process Managementservices

For supporting process interconnection, on top of an existing open-source Business Process Management (BPM) environment oriented to Web Services (modeling module and execution engine, BPEL - Business Process Execution Language - compatible), this paper will propose a support to task-oriented, interactive decisional activities to be performed by CNO (Collaborative Networked Organizations) Actors. At the current status of achievements no standards neither existing solutions are able to provide such feature. These services aim at providing an innovative modeling and execution environments able to manage complex and compound services made of automatic and manual activities.

Requirements for Servitization in Manufacturing Service Ecosystems

As tangible products can be easily copied and customers ask for individual solutions, the European manufacturing industry increasingly bundles their products with associated services to so called “Extended Products” (EP). Missing competencies for this servitization have to be acquired by involving partners from the companies’ environment, the “Manufacturing Service Ecosystem” (MSE). However, traditional manufacturers lack the appropriate models, methods and tools for collaborative innovation, development and provision of EP. This paper presents the results of a requirements analysis of four manufacturing use cases that indicates the need for support in the area of servitization and collaboration in MSE.