An efficient authorization framework for securing industrial Internet of Things

Many of the industries such as manufacturing, F&B, transportation have recently shown a growing interest in Industry Internet of things (IIoT) to gain competitive advantage. The IIoT is technology stack of combining internet of things, machines, computers and people enabling intelligent business transformational through advanced big data analytics. With the growing complexity of IIoT in a large-scale interconnectivity deployment, access control and authorization of IIoT objects such as smart devices, human or computers becomes the pressing requirements. In this paper, we propose SecIIoT, a practical authorization framework on annotated metadata for securing IIoT objects. It supports multi-dimension and large data processing with flexible and efficient authorization model to meet new security needs of IIoT. In order to demonstrate the validity of the proposed framework, a prototype is implemented with test results. The experimental results showed that the authorization model works efficiently in a large-scale deployment to meet new IIoT security requirements.