Identity-Based Access Control in IoT: Enhancing Security through Mutual Cryptographic Authentication and Context Awareness

The proposed methodology strengthens security and privacy in IoT networks through mutual cryptographic authentication, employing Elliptic Curve Cryptography, Diffe Hellman for key exchange, and encryption methods for robust identity verification. Context awareness, considering factors like device type, communication type, successful transfers, and device behaviour, enhances access control decisions dynamically. This approach bolsters network security, defending against unauthorized access and potential threats. Identity-based access control streamlines access rights management, dynamically setting permissions for scalable network expansion. Combining cryptographic authentication and context sensitivity, this methodology emerges as a potent tool for securing IoT networks, ensuring data integrity, and preserving user privacy. Its versatility makes it applicable across diverse loT scenarios, offering a flexible and scalable access control solution. Overall, devices get authenticated with each other through identity based on clusters formed by context parameters and access rights are set to the cluster head. The cluster head is dynamically updated from time to time considering the context parameters.