Abstract
There has been a tremendous growth in the use of the Internet of Things (IoT) in recent years. One important application area for the IoT is in the area of assistive technologies. Assistive technology can improve the functional capabilities of persons with disabilities by, for example, improved mobility and accessibility. IoT technologies, by virtue of their ubiquity and edge intelligence, can significantly enhance the provision of such services. IoT systems may deal with large amounts of data. In the assistive technologies context, this data can be particularly sensitive, as it may include health, location, and other highly personal information. Security then becomes a pressing concern in IoT-enabled assistive technology. In the IoT, security and privacy are major challenges due the characteristics of such systems (e.g., resource-constrained nature of the devices and high mobility). Given the large amount of personal data involved, and the potential reliance on IoT devices in the home and in usersā lives, access to data and resources is an important aspect of security in such systems. This chapter provides a discussion of the critical issue of security in IoT-enabled assistive technologies, particularly addressing access control. After identifying the requirements for such a mechanism and detailing a number of use cases, we present a fine-grained access control architecture for use in IoT-enabled assistive technology based on a combination of attributes, roles, and capabilities. We then discuss the issue of access right delegation for such systems. This will allow flexible and dynamic propagation of access rights in a manner suited to the characteristics of these systems. Finally, we outline a set of challenges that are significant when considering issues for security in IoT-enabled assistive technologies and demonstrate how our design satisfies the identified requirements.
1.1 Introduction
The Internet of Things (IoT) enhances the connection between the digital and the physical. This paradigm shift enables us to transform everyday objects into smart objects that are able to sense, process, and act autonomously, fostering the communication between people and things and between the things themselves [1]. We consider things as a set of applications, services, users and their associations. The IoT has a large and growing role to play in many aspects of everyday life.
One of the most important application areas for the IoT is smart health care [2,3]. This seeks to address a myriad of challenges from the rising cost of health-care systems to the development of new applications, infrastructures, technologies, and protocols to assist both patients and caregivers. Personal (portable and mobile) devices have a huge potential to provide better lives for people with disabilities [4ā6]. For instance, āBlindeDroidā is an information tracking system that uses smartphones and wireless sensors for building an indoor navigation system for real-time guidance of blind people [7]. This is just one example of how the development of IoT-enabled assistive technologies can improve life for people with disabilities. Other possible application areas include hearing aids, alternative and augmentative communication devices, and mobility assistance [8]. Assistive technologies consist of both hardware and software and can be defined as āa device or system that provides people with practical solutions to everyday life activitiesā [9]. While there is a growing demand for such systems designing, developing and deploying such assistive technologies at the required scale is challenging, especially when the issues of large systems, for example, heterogeneity and multiple domains of authority, are considered. The IoT has the potential to provide improved services for people with special needs, but the design of such systems will need to take into account contextual requirements, for example, ease of use, privacy, and flexibility [10].
According to the World Bank, 15% of worldās total population is experiencing some form of disability and disability prevalence is higher in developing countries [11]. The World Health Organization (WHO) reports that among these 15% of people, 2%ā4% are experiencing a significant amount of difficulties in functioning [12]. We argue that with the increasing stress on global health-care systems, the IoT has the potential to provide better services to people with a disability by providing an emphasis on proactive health monitoring and self-management. IoT-enabled assistive technologies are seen to be powerful tools to help in achieving a better quality of life by increasing independence and improved participation of disabled people in social and economic life [13]. The development of the IoT should enable the seamless integration of service delivery with the specific needs of users. To achieve this will require addressing the technical challenges of providing improved IoT-enabled assistive technology in the specific context of people with special needs. One of these challenges is to provide proper security measure for those devices and the associated data. People with disabilities are likely to place significant value on their data while at the same time being potentially restricted in how they can interact with technology. The provision of security is complicated by the nature of the resource-constrained nature of the devices (e.g., limited battery power, processing capability or even memory storage) as well as the characteristics of such IoT systems (e.g., high mobility and dynamic interaction).
The security needs of IoT-supported assistive technology are myriad and we do not intend to address them all in a single chapter. Instead, we select one area, access control, and use it to illuminate how security can be provided in such systems. Access control is an important issue for IoT assistive technology due to the need to control access to devices and the integrity and confidentiality of patient-critical sensitive data. More significantly, we consider that security in such systems must be provided in a way that is comprehensible to end usersāthe people requiring the services of assistive technology. Access control includes the specification and enforcement of policies that authorize and authenticate a legitimate user and then ensure that proper access is given to those users for certain resources [14].
In order to address such issues, in this chapter, we first examine the need for access control for IoT-enabled assistive technologies. To demonstrate its practicality, we introduce a policy-based access control architecture that can address access control issues in IoT-enabled assistive technologies. To the best of our knowledge, this is the first research that discusses the access control issues for IoT-enabled assistive technologies. The major contributions of this chapter can be summarized as follows:
- ⢠We examine the potential of IoT-enabled assistive technology and survey some existing proposals.
- ⢠We present a comprehensive discussion of the requirements for IoT-enabled assistive technologies, including the security requirements of such systems.
- ⢠We discuss an access control architecture for IoT-enabled assistive technology. In our architecture, we employ attributes for authenticating a legitimate entity within the system, rather than depending upon a concrete identity of an entity.
- ⢠We outline the need for secure and flexible access right delegation in IoT-enabled assistive technology systems. We illustrate the process of transferring access right information and explore the importance of a secure and flexible delegation within these systems.
- ⢠We provide a list of unique challenges and enumerate some distinctive requirements for IoT-enabled assistive technologies.
The rest of the chapter is organized as follows. In Section 1.2, we discuss the background of our research. This section consists of five major parts. We detail the definition of assistive technology (Section 1.2.1), the emergence of IoT, including its basic architecture and functionality (Section 1.2.2), the importance of IoT-enabled assistive technology (Section 1.2.3), major requirements for IoT-enabled assistive technology (Section 1.2.4), and example use cases (Section 1.2.5). In Section 1.3, we discuss our proposed access control approach in detail. At the beginning, we discuss the importance of IoT access control (Section 1.3.1) and the state-of-the art mechanisms (Section 1.3.2). Next we discuss the access control architectural in detail (Section 1.3.3). We provide a discussion for access right delegation for such IoT-enabled assistive systems in Section 1.3.4. In Section 1.4, we list a set of challenges that need to be addressed to provide a safe, secure, and flexible access control for the IoT-enabled assistive technologies. Finally, we conclude the chapter in Section 1.5 and discuss future works.
1.2 Background
The goal of this section is fivefold. First, we provide a basic introduction to assistive technology. Second, we provide some a primary description of the IoT. Third, we discuss the emergence of IoT-enabled assistive technology. Fourth, we outline major requirements for IoT-enabled assistive technology. Finally, we illustrate some example use cases.
1.2.1 Assistive technology
According to the WHO, assistive technologies and devices can be defined as follows [15]: āassistive devices and technologies are those whose primary purpose is to maintain or improve an individualās functioning and independence to facilitate participation and to enhance overall well-being. They can also help prevent impairments and secondary health conditions.ā According to Ref. [16], assistive technology can be defined as follows: āassistive technology is any item, piece of equipment, software program, or product system that is used to increase, maintain, or improve the functional capabilities of persons with disabilities.ā In Ref. [17], the authors define assistive technology as āany product which has the primary purpose to maintain or improve an individualās functioning and independence, and thereby promote their well-being.ā The authors of Ref. [18] refer to assistive technology as āany item, piece of equipment, or product system, whether acquired commercially off the shelf, modified, or customized, that is used to increase, maintain, or improve functional capabilities of individuals with disabilities.ā
An assist...