Design And Implementation Of IoT Open Platform Authentication And Authorization Mechanism

Currently, the Internet of Things technology is playing a significant role in various fieldssuch as energy, health care, smart home. Meanwhile, the appearance of Open Platform of IoTis offering an easy to meet the new requirement of traditional IoT. A more freedom and opencircumstance is shared to customers. People can easily join in the construction of IoT, andmake their own APPs to meet different needs. But, as IoT is opened to public, theauthentication and authorization mechanism is becoming more and more important to judgewhether the client should be authorized or what the client could visit. Based on this fact, amore secure Authentication and Authorization mechanism is required, which should meet theunique characteristics of IoT, controllable and flexible.In the beginning, this thesis presents the overview of research in the field of IoT,including the current status, also the mainstream mechanism of Authentication andAuthorization in Open Platform, and then give the unique requirements of IoT Open Platform.In the following part, this thesis proposes a new mechanism named unique authorized which is designed base on OAuth2.0protocol and can realize customized authorizationrevocation.Moreover, in order to reform the existing data service to an Open Platform, this thesisdesign and realize a Pluggable Authentication Service, which is independent of platform andcan reform an existing data platform with lowest cost, but with robust security.Finally, use the developed Authorization Framework to reform the Energy Data Platformof S.C.U.T. Then, test and verify the security, flexibility, reliability and performance of thisFramework.