Design and development of a dynamic role management API for data protection in smart city applications
The Internet of things (IoT) refers to the connection of physical objects allowing them to communicate and exchange data over the Internet. IoT solutions gather information from many different sources in order to build an accurate representation of the real world. This data is then analyzed and used...
Main Author: | |
---|---|
Other Authors: | |
Language: | English |
Published: |
2022
|
Subjects: | |
Online Access: | http://hdl.handle.net/10889/16086 |
id |
nemertes-10889-16086 |
---|---|
record_format |
dspace |
institution |
UPatras |
collection |
Nemertes |
language |
English |
topic |
Internet of Things (IoT) Smart cities Data masking Role-based access control Διαδίκτυο των Αντικειμένων Έξυπνες πόλεις |
spellingShingle |
Internet of Things (IoT) Smart cities Data masking Role-based access control Διαδίκτυο των Αντικειμένων Έξυπνες πόλεις Παναγιωτίδης, Αθανάσιος Design and development of a dynamic role management API for data protection in smart city applications |
description |
The Internet of things (IoT) refers to the connection of physical objects allowing them to communicate and exchange data over the Internet. IoT solutions gather information from many different sources in order to build an accurate representation of the real world. This data is then analyzed and used to either actuate physical devices or provide useful information about the state of a system. Technological advancements in fields such as embedded systems, machine learning and big data analysis have led to an increasing number of smart devices being used in many aspects of people's everyday lives. In the smart city domain, smart solutions span across a wide range of applications. The usage of heterogeneous technologies, platforms and data models often leads to information silos and vendor lock-ins. Data sharing facilitates interoperability of smart city applications. Since data collected, stored and processed in smart city applications often contain sensitive information, it is important that all necessary measures regarding security and privacy are taken. The main goal of this thesis is the development of a dynamic role management API (application programming interface) that can be used for data protection in smart city applications. In order to restrict access to sensitive information, data masking techniques as well as role-based access control (RBAC) are utilized. SafeAmea, which is a digital platform designed to facilitate accessibility to emergency services for people with disabilities, was used to demonstrate the functionality of the developed API. The SafeAmea platform was developed by the Network Architectures and Management Group (NAM) of the Electrical and Computer Engineering Department, University of Patras. |
author2 |
Panagiotidis, Athanasios |
author_facet |
Panagiotidis, Athanasios Παναγιωτίδης, Αθανάσιος |
author |
Παναγιωτίδης, Αθανάσιος |
author_sort |
Παναγιωτίδης, Αθανάσιος |
title |
Design and development of a dynamic role management API for data protection in smart city applications |
title_short |
Design and development of a dynamic role management API for data protection in smart city applications |
title_full |
Design and development of a dynamic role management API for data protection in smart city applications |
title_fullStr |
Design and development of a dynamic role management API for data protection in smart city applications |
title_full_unstemmed |
Design and development of a dynamic role management API for data protection in smart city applications |
title_sort |
design and development of a dynamic role management api for data protection in smart city applications |
publishDate |
2022 |
url |
http://hdl.handle.net/10889/16086 |
work_keys_str_mv |
AT panagiōtidēsathanasios designanddevelopmentofadynamicrolemanagementapifordataprotectioninsmartcityapplications AT panagiōtidēsathanasios schediasmoskaianaptyxēapidynamikēsdiacheirisēsrolōngiatēnprostasiadedomenōnepharmogōnexypnēspolēs |
_version_ |
1771297202531991552 |
spelling |
nemertes-10889-160862022-09-05T11:17:14Z Design and development of a dynamic role management API for data protection in smart city applications Σχεδιασμός και ανάπτυξη API δυναμικής διαχείρισης ρόλων για την προστασία δεδομένων εφαρμογών έξυπνης πόλης Παναγιωτίδης, Αθανάσιος Panagiotidis, Athanasios Internet of Things (IoT) Smart cities Data masking Role-based access control Διαδίκτυο των Αντικειμένων Έξυπνες πόλεις The Internet of things (IoT) refers to the connection of physical objects allowing them to communicate and exchange data over the Internet. IoT solutions gather information from many different sources in order to build an accurate representation of the real world. This data is then analyzed and used to either actuate physical devices or provide useful information about the state of a system. Technological advancements in fields such as embedded systems, machine learning and big data analysis have led to an increasing number of smart devices being used in many aspects of people's everyday lives. In the smart city domain, smart solutions span across a wide range of applications. The usage of heterogeneous technologies, platforms and data models often leads to information silos and vendor lock-ins. Data sharing facilitates interoperability of smart city applications. Since data collected, stored and processed in smart city applications often contain sensitive information, it is important that all necessary measures regarding security and privacy are taken. The main goal of this thesis is the development of a dynamic role management API (application programming interface) that can be used for data protection in smart city applications. In order to restrict access to sensitive information, data masking techniques as well as role-based access control (RBAC) are utilized. SafeAmea, which is a digital platform designed to facilitate accessibility to emergency services for people with disabilities, was used to demonstrate the functionality of the developed API. The SafeAmea platform was developed by the Network Architectures and Management Group (NAM) of the Electrical and Computer Engineering Department, University of Patras. Το Διαδίκτυο των αντικειμένων (Internet of things – IoT) αποτελεί πλέον μέρος της καθημερινότητας για πολλούς ανθρώπους. Οι εφαρμογές IoT συλλέγουν δεδομένα από πολλές διαφορετικές πηγές με σκοπό τη δημιουργία μιας ψηφιακής αναπαράστασης του φυσικού κόσμου. Τα δεδομένα αυτά, αφού υποστούν την απαραίτητη επεξεργασία, μπορούν να αξιοποιηθούν για απεικόνιση και ανανέωση της κατάστασης του συστήματος. Η ανάπτυξη των τεχνολογιών IoT, σε συνδυασμό με τη ραγδαία εξέλιξη σε τομείς όπως τα ενσωματωμένα συστήματα και η μηχανική μάθηση, έχουν οδηγήσει στην αύξηση των έξυπνων συσκευών και εφαρμογών, από το οικιακό μέχρι το πιο σύνθετο βιομηχανικό περιβάλλον. Στο πλαίσιο της έξυπνης πόλης, η χρήση διαφορετικών τεχνολογιών, πλατφορμών και μοντέλων δεδομένων συχνά οδηγούν στη δημιουργία σιλό πληροφοριών και κατακερματισμένη παροχή υπηρεσιών. Η ανταλλαγή δεδομένων μεταξύ των εφαρμογών αποτελεί σημαντικό στάδιο για την επίτευξη διαλειτουργικότητας. Ωστόσο, η προστασία των δεδομένων που παράγονται, αποθηκεύονται και επεξεργάζονται στα πλαίσια των εφαρμογών έξυπνης πόλης, είναι κρίσιμη για τη διασφάλιση της ομαλής λειτουργίας των υπηρεσιών και της ιδιωτικότητας των πολιτών. Στα πλαίσια αυτής της διπλωματικής εργασίας σχεδιάστηκε και αναπτύχθηκε ένα API (application programming interface) δυναμικής διαχείρισης ρόλων για την προστασία δεδομένων εφαρμογών έξυπνης πόλης. Για την προστασία των ευαίσθητων πληροφοριών, αξιοποιήθηκαν τεχνικές απόκρυψης δεδομένων (data masking) και ελέγχου πρόσβασης βάσει ρόλων (role-based access control). Η πλατφόρμα SafeAmea, η οποία αναπτύχθηκε από την Ομάδα Αρχιτεκτονικής και Διαχείρισης Δικτύων του τμήματος Ηλεκτρολόγων Μηχανικών και Τεχνολογίας Υπολογιστών του Πανεπιστημίου Πατρών, με σκοπό τη συλλογή δεδομένων ΑμεΑ για τη χρήση τους σε συνθήκες άμεσης επέμβασης, αξιοποιήθηκε για την επίδειξη της λειτουργικότητας του API. 2022-03-17T06:17:48Z 2022-03-17T06:17:48Z 2022-03-10 http://hdl.handle.net/10889/16086 en application/pdf |