CapaCon: access control mechanism for inter-device communications through TCP connections

  • Authors:

  • Mitsuhiro Mabuchi;Yasushi Shinjo;Koji Hasebe;Akira Sato;Kazuhiko Kato

  • Affiliations:

  • University of Tsukuba, Tsukuba, Ibaraki, Japan;University of Tsukuba, Tsukuba, Ibaraki, Japan;University of Tsukuba, Tsukuba, Ibaraki, Japan;University of Tsukuba, Tsukuba, Ibaraki, Japan;University of Tsukuba, Tsukuba, Ibaraki, Japan

  • Venue:
  • Proceedings of the 2010 ACM Symposium on Applied Computing
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present CapaCon, an access control mechanism for interdevice communications through TCP connections. CapaCon provides capability-based access control for a system composed of devices. Using CapaCon, an administrator does not need to set access control policies for each device and can manage these policies outside the system. A capability consists of an object device identifier and the list of permitted operations for that object device. Subject devices that maintain capabilities can access object devices corresponding with those capabilities. To protect a capability from being fabricated, CapaCon uses a digital signature. CapaCon can be used without modifying existing device programs. We analyzed the safety of capabilities in CapaCon, and measured network throughputs and processing times of CapaCon. These experimental results show the practicality of CapaCon.