Access control technologies are fundamental for addressing the security and privacy requirements of the Internet of Things (IoT). This paper proposes an access control solution for Constrained Application Protocol (CoAP)-based IoT services. The proposed solution considers a network of a single provider that interconnects various IoT endpoints. It leverages the Software-Defined Networking (SDN) paradigm and implements application aware policy enforcement at the network level. All operations are transparent to the IoT endpoints and no modifications are required to the IoT communication protocol. Furthermore, our solution is built on standard OpenFlow, hence it is realistic and it can be easily deployed to an existing network. We prove the feasibility of our solution through a proof of concept implementation using network emulation.

访问控制技术是解决物联网（IoT）的安全性和隐私要求的基础。本文提出了一种基于约束应用协议（CoAP）的物联网服务的访问控制解决方案。提出的解决方案考虑了一个互连各种物联网终端的单一提供商的网络。它利用了软件定义网络（SDN）范例，并在网络级别实施了应用程序感知的策略实施。所有操作对IoT端点都是透明的，并且无需修改IoT通信协议。此外，我们的解决方案基于标准的OpenFlow，因此它是现实的，可以轻松地部署到现有网络中。我们通过使用网络仿真的概念证明实施来证明我们解决方案的可行性。