Smart-car identity and access management (IAM) system developed

A postgraduate pupil successful City's Institute for Cyber Security (ICS) is attempting to plug the vulnerability gaps of astute cars to hacking and information breaches.

Subhajit Bandopadhyay, studying for a Ph.D. nether the supervision of Professor Muttukrishnan Rajarajan, manager of the ICS, has been progressive successful collaborative research to make the SIUV—a stateful astute car individuality and entree absorption (IAM) system, based connected usage power (UCON) and verifiable credentials (VCs).

SIUV comes retired of Subhajit's probe paper, co-authored by Professor Rajarajan, Ali Hariri (Huawei Munich Research Center and the University of Trento), Dr. Athanasios Rizos (Huawei Munich Research Center), Dr. Theo Dimitrakos (Huawei Munich Research Center and the University of Kent) and Professor Bruno Crispo (University of Trento), which was successfully submitted to the 36th International Conference connected ICT Systems Security and Privacy Protection (IFIP SEC 2021) successful June 2021.

Over caller decades, respective successive innovations person transformed the motor vehicle into a integer strategy connected wheels. Otherwise known arsenic intelligent cars, astute cars person evolved into safety-critical and cyber-physical systems which are progressively exposed to cyber vulnerabilities.

SIUV uses usage power policies successful bid to contented privileges to drivers oregon applications (such arsenic the deployment of aerial bags oregon velocity bounds control) according to their credentials oregon claims. The issued privileges are past utilized to determine whether to assistance oregon contradict entree to in-car resources.

SIUV besides continuously monitors taxable claims, assets attributes and biology conditions specified arsenic clip oregon determination truthful that if a alteration is made, the strategy tin re-evaluate policies, supply updates oregon revoke issued privileges and usage decisions accordingly.

To recognize the enactment of Subhajit and his colleagues present is simply a realistic scenario.

Alice, for example, goes to a car rental institution to rent a conveyance for 48 hours to beryllium driven successful the London metropolitan area. The car rental institution past defines the policies according to their statement with Alice, and makes this accusation disposable for usage via SIUV.

Alice visits Cambridge concisely and thought the car rental institution wouldn't beryllium alert of this. When Alice was astir to permission London's metropolis limits, the car displays geographical regularisation warnings and suggests rerouting to enactment wrong the London metropolitan area.

This occurs due to the fact that of the continuous usage power architecture of SIUV. Verifiable credentials assistance support claims unafraid and verifiable astatine each times, making them a large alternate to carnal cards that are presently issued arsenic driving licenses.

The UK Driver and Vehicle Licensing Agency (DVLA) tin beryllium a imaginable trusted issuer of driving licenses successful the signifier of verifiable credentials that are cryptographically verifiable. The claims wrong the credential tin beryllium continuously validated and entree to the in-car components tin beryllium allowed oregon denied based connected the usage power argumentation evaluations by SIUV.

The automotive marketplace is increasing rapidly successful transforming mechanical car components into integer systems.

From a bundle perspective, this makes probe enactment connected the SIUV captious successful comprehensively taking attraction of the information and information of the astute cars of the future.

---

---

More information: Ali Hariri et al, SIUV: A Smart Car Identity Management and Usage Control System Based connected Verifiable Credentials, ICT Systems Security and Privacy Protection (2021). DOI: 10.1007/978-3-030-78120-0_3