2015xli/ACE-IoT

This repo for IoT authentication/authorization just puts together the original CMU SEI TAS projects

Introduction video by the project owner Prof. Grace A. Lewis - downloaded from youtube.

The SEI ACE Implementation for Constrained and Unconstrained Resource Servers consists of five repositories:

• Client
• Authorization Server
• Unconstrained Resource Server
• Constrained Resource Server - token revocation functionality under development
• Supporting Libraries

It is an implementation of the ACE Working Group proposal for Authentication and Authorization in Resource-Constrained Environments with two extensions to support operation in disadvantaged environments:

• RS to AS Pairing
• Periodic introspection for token revocation

The implementation is based on previous work in establishing trusted identities in disconnected edge environments and explicit threat modeling. Supporting documents for this work are:

• Sequence Diagrams
• Threat Model Report for Pairing (produced using Microsoft SDL Threat Modeling Tool)
• Threat Model Report for Resource Access (produced using Microsoft SDL Threat Modeling Tool)