Blockchain-Based IoT-Cloud Authorization and Delegation

In a Smart City scenario, the authors envisioned an IoT-Cloud framework for the management of boards and resources scattered over a geographic area. It can also become a tool to let device owners contribute freely to the infrastructure. In comparison to datacenter-oriented Cloud middleware, the administrator and the owner of the infrastructure are not one and the same. This translates into the requirement to support delegation-enabled authorization. In this paper, the authors investigate an authorization and delegation model for the IoT-Cloud based on blockchain technology. In particular, the scheme is implemented in the form of smart contracts over the Ethereum platform. Indeed, this approach represents an enhancement, over a function previously designed in a centralized fashion, by enabling the user to audit authorization operations and inspect how access control is actually performed, without blindly trusting the Cloud as a proxy for access to resources.