Attribute Based Access Control Framework for IoT
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Tuesday, 2017-02-21· at 10:30· Galleria North·
summary
An open-source Access Control Service (ACS) decouples authorization from apps to handle dynamic, location-specific IoT policies that OAuth scopes and XACML struggled with; it exposes a REST API, evaluates JSON policy sets, caches attributes with Redis, and evaluates Groovy-based conditions per request. Implementation is Spring Boot on Cloud Foundry, backed by Titan DB + Cassandra + Gremlin, integrates with UAA for identity, and ships under Apache 2 license. Production adoption across GE businesses exists but per-request evaluation requires careful caching and token-size tradeoffs.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:31rhetorical questions
- 3:53Authentication authorization
- 8:21Cloud Foundry
- 12:52Concept
- 20:37Usage
- 23:05API
- 27:01Groovy
- 28:12Source Code
- 33:04Committers
- 33:52Questions
related talks
01h 04mTrue Serverless Applications Implementing Cloud Native Access Control Service
27mAccess management in 4D
21mTrust-based Adaptive Access Control Architecture
14mAPI access control strategies beyond JWT bearer tokens
01h 26mSecuring Rest-ful Web Services with OAuth2
25mModernizing Authorization: From Basic Roles to Decoupled ABAC
23mZero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations
28mIdentity: From Legacy to Microservices