Survey on Delegated and Self-Contained Authorization Techniques in CPS and IoT

Authentication, authorization, and digital identity management are core features required by secure systems. In this, authorization is a key component for regulating the detailed access credentials with respect to service resources. Authorization, therefore, plays significant role in trust of autonomous devices services. Due heterogeneous nature cyber-physical systems Internet Things, several techniques using different control models, accounts, groups, tokens, delegations have both strengths weaknesses. Many studies exist literature that focus on other main security requirements, such as authentication, management, confidentiality. However, there need comprehensive review Things. A specific target this paper system Things networks non-constrained an industrial context mobility, subcontractors, machines able carry out advanced tasks behalf others. We study our three-dimensional classification, including subgranting governance. state art subgranting, delegation control/authorization server self-contained new concept power attorney. Comparisons performed parameters, type communication, method expiration, use public certificate, encryption techniques, tokens. The results show differences similarities server-based attorney-based subgranting. most common standards also analyzed light those classifications.