This page is being moved to a new, faster, and mobile-friendly application! Access the enhanced and centralized experience now on MyWorkspace!
ITU's 160 anniversary

Connecting the world and beyond

  •  
GSR 2025

ITU-T Recommendations

Search by number:
Others:
Skip Navigation Links
Content search
Advanced search
Provisional name
Equivalent number
Formal description
Study Groups tree viewExpand Study Groups tree view

ITU-T Y.4814 (09/2025)

عربي | 中文 | English | Español | Français | Русский
Functional requirements and architecture of access control service of Internet of things (IoT) platform enabled by zero trust in decentralized environments
There are many substantial challenges for Internet of things (IoT) platforms in decentralized environments to making trust among IoT entities (such as IoT devices, IoT services, IoT gateways) when they interact with each other. The traditional access control solutions of IoT platforms (such as perimeter control, password authentication, virtual private network) cannot fully cope with those challenges, especially when IoT entities are deployed in decentralized environments.
Zero trust (ZT) is a type of cybersecurity principle that provides a collection of concepts and ideas designed to minimize uncertainty in enforcing accurate, least privilege per-request access decisions in information systems and services in the face of a network viewed as compromised (bNIST SP 800207). In ZT-based access control solutions, it is no longer required to determine access rights by location and security domain for IoT entities to discover and access other IoT entities in the same or different IoT platforms. It is required to be determined for any requests to discover and access any IoT entities in IoT platforms. Therefore, ZT-based access control solutions are suitable for IoT platforms in decentralized environments.
Recommendation ITU-T Y.4814 introduces an access control service of an IoT platform in decentralized environments as enabled by ZT, and specifies its technical characteristics, functional requirements and architecture.
Citation: https://handle.itu.int/11.1002/1000/16208
Series title: Y series: Global information infrastructure, Internet protocol aspects, next-generation networks, Internet of Things and smart cities
  Y.4000-Y.4999: Internet of things and smart cities and communities
  Y.4800-Y.4899: Identification and security
Approval date: 2025-09-23
Provisional name:Y.IoT-acs-fra
Approval process:TAP
Status: In force
Maintenance responsibility: ITU-T Study Group 20
Further details: Patent statement(s)
Development history
[17 related work items in progress]