Research And Implementation Of Dynamic Access Control For Data Services Under Epcglobal Framework

The Internet of Things technologies have been widely used currently in transportation, logistics, and smart city, etc. Also, IoT plays an important role in daily life and industrial production. The main purpose of EPCglobal architecture framework is to establish and maintain the EPC network worldwide, and to ensure that information in supply chain can be identified in real-time and managed efficiently with uniform standards. In order to open data in EPC network to business partners, we can provide data services in accordance with users’needs. To open services and data safely, we need to design an access control mechanism to grant different visiting permissions for visitors as so to provide data services to visitors accordingly.In this paper, we firstly introduced the background and framework of EPCglobal, compared the advantages and disadvantages of traditional access control mechanisms, and analyzed the requirements of services and access control under EPCglobal. Then, we introduced the EPCglobal based emergency logistics system, analyzed the characteristics of the supply chain in EPC network, and proposed a solution for supply chain management. Consequently, we put forward an attribute based dynamic access control mechanism for data service in which attribute set of visitor, supply chain information and security level of data fields would be taken into account. As well, with the certainty and uncertainty theory and calculation of safety level of visitor, we could implement dynamic, fine-grained access of services and data in EPCglobal securely and effectively. What’s more, this access control mechanism suites EPCglobal very well. Finally, we implemented the discovery service system under EPCglobal to provide data service outwardly, and validated our proposed mechanism.In this paper, we studied the data relationship, dynamic service access control mechanism, and implemented a discovery service system to open data under the EPCglobal. This study enriches the EPCglobal architecture framework. And it can ensure safe, fine-grained data providing. Therefore, this study is a fine trial and implementation for the discovery service system in EPCglobal.