Authorization schemes for internet of things: Requirements, weaknesses, future challenges and trends

Abid Khan, Awais Ahmad, Mansoor Ahmed, Jadran Sessa*, Marco Anisetti

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

8 Citations (SciVal)
55 Downloads (Pure)


Scalable and secure authorization of smart things is of the crucial essence for the successful deployment of the Internet of Things (IoT). Unauthorized access to smart things could exacerbate the security and privacy concern, which could, in turn, lead to the reduced adoption of the IoT, and ultimately to the emergence of severe threats. Even though there are a variety of IoT solutions for secure authorization, authorization schemes in highly dynamic distributed environments remain a daunting challenge. Access rights can dynamically change due to the heterogeneous nature of shared IoT devices and, thus, the identity and access control management are challenging. This survey provides a comprehensive comparative analysis of the current state-of-the-art IoT authorization schemes to highlight their strengths and weaknesses. Then, it defines the most important requirements and highlights the authorization threats and weaknesses impacting authorization in the IoT. Finally, the survey presents the ongoing open authorization challenges and provides recommendations for future research.
Original languageEnglish
Pages (from-to)3919-3941
Number of pages23
JournalComplex & Intelligent Systems
Issue number5
Early online date19 May 2022
Publication statusPublished - 01 Oct 2022


  • Access control
  • Security attacks
  • Security threat


Dive into the research topics of 'Authorization schemes for internet of things: Requirements, weaknesses, future challenges and trends'. Together they form a unique fingerprint.

Cite this