Authorization Secured Dynamic Privileged Escalation

To approve of action first identity of the requestor needs to be established which is authentication. A lot of research work done to secure the identity of IoT device focusing either on bootstrapping credentials, securing it to ensure no tamper can happen in the first place, and if forbids it happens ever, detect the compromised device and block it from further grants of access. Focus on authentication further goes deeper in the advancement of research at the protocol level to optimize the number of bytes under transfer as well as processing time needed and latency. Authorization is indeed mentioned but grossly left out as custom needs and implementation specific to the organization. In this paper, we propose solution to address the concern where a non-statically preconfigured IoT device needs to connect and ask permission/authorization to gain access or perform a certain operation. We also attempt to provide a solution to provide escalated permission to perform an action in a controlled order. Here the solution focuses on allowing a low privileged device is eventually authorized to perform operation which under normal circumstances is not allowed to, however allowed by due to association of device having privilege. Implementation done on Raspberry Pi to simulate IoT client and server written in Java as IAM server to demonstrate the feasibility of solution.