Nesnelerin interneti üzerine giriş kontrol ve kimlik onaylama mekanizmaları üzerine bir çalışma

The Internet of Things (IoT) is a very popular platform that found its way into our lives very rapidly in the last decade. We can define this platform as an architecture consisting of many sensing nodes communicating with each other to collaborate given a certain common goal. These nodes, things, can have a wide range of power and capabilities. The most common sensing nodes are empowered with RFID tags. The main purpose of this platform is to increase productivity at many levels in our modern lives. The Internet of Things is getting improved every day. The power of its improvement comes from the growing quality and features of wireless sensor communications, evolving network standards, increscent of the human interaction with electronic devices, and many other developments which bring more requirements to the Internet of Things. The biggest concerns arising from the shared platforms is the privacy of sensitive information, the confidentiality of service, prevention of repudiation. This brings the necessity of authorization and access control mechanisms. Since the number of users can increase, more sophisticated methods are required. However, IoT architecture is a resource-constrained heterogeneous environment due to limited computational power and storage. Also, specific application contexts can impose more constraints. The focus of this work is authentication and access control mechanisms of the Internet of Things frameworks. These mechanisms encompass different levels of privileges of access to those assigned with different roles for specific application contexts. We provide brief descriptions on the existing solutions such as wireless sensor network authentication mechanisms, access control mechanisms for data stream management systems, physically unclonable functions, lightweight cryptographic schemes, high-level hybrid solutions for IoT, and intrusion detection systems. Later, we provide proper analysis for many of the described mechanisms. We further propose a framework based on our analysis. Finally, we propose implementation details and additional techniques for further improvement.