Once a device is identified and authenticated, determining what that device can read or write to other devices and services is required. In some cases, being a member of a particular Community Of Interest (COI) is sufficient; however, in many instances there are restrictions that must be put in place, even upon members of a COI.
Authorization and access control
Get Practical Internet of Things Security - Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
