|
Work item:
|
Y.IoT-acs-fra
|
|
Subject/title:
|
Functional requirements and architecture of access control service of IoT platform enabled by zero trust technology in decentralized environments
|
|
Status:
|
Under study
|
|
Approval process:
|
TAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2024-Q4 (Medium priority)
|
|
Liaison:
|
ITU-T SG16, SG17
|
|
Supporting members:
|
China Unicom; ZTE Corporation; MIIT; CICT; BUPT
|
|
Summary:
|
There are many big challenges for Internet of things (IoT) platforms in decentralized environments to make trust among the IoT entities (such as IoT devices, IoT services, IoT gateways, and other IoT resources) when they interact with each other. The traditional access control solutions of IoT platforms (such as perimeter control, password authentication, virtual private network) could not fully cope with those challenges, especially when IoT entities are deployed in decentralized environments.
Zero trust (ZT) is one type of cybersecurity principles, which provides a collection of concepts and ideas designed to minimize uncertainty in enforcing accurate, least privilege per-request access decisions in information systems and services in the face of a network viewed as compromised [b-NIST SP 800-207]. In ZT-based access control solutions, it is no longer to determine access rights, by location and security domain for IoT entities to discover and access other IoT entities in same or different IoT platforms. It is required to be determined for any requests to discover and access to any IoT entities in IoT platforms. Therefore, ZT-based access control solutions are apt to IoT platforms in decentralized environments.
This draft new Recommendation introduces an access control service of IoT platform in decentralized environments as enabled by zero trust technologies, and specifies its characteristics, functional requirements and architecture.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2023-02-15 14:46:56
|
|
Last update:
2023-09-27 17:01:13
|
