{"id":"https://openalex.org/W7164020060","doi":"https://doi.org/10.1016/j.array.2026.100972","title":"Efficient and dynamic access control with end-to-end message security for MQTT","display_name":"Efficient and dynamic access control with end-to-end message security for MQTT","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164020060","doi":"https://doi.org/10.1016/j.array.2026.100972"},"language":"en","primary_location":{"id":"doi:10.1016/j.array.2026.100972","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100972","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.array.2026.100972","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100745497","display_name":"Liang Chen","orcid":"https://orcid.org/0000-0003-3706-6479"},"institutions":[{"id":"https://openalex.org/I141584323","display_name":"University of Hertfordshire","ror":"https://ror.org/0267vjk41","country_code":"GB","type":"education","lineage":["https://openalex.org/I141584323"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Liang Chen","raw_affiliation_strings":["University of Hertfordshire, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-3706-6479","affiliations":[{"raw_affiliation_string":"University of Hertfordshire, United Kingdom","institution_ids":["https://openalex.org/I141584323"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5138272411","display_name":"James Wilson","orcid":null},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"James Wilson","raw_affiliation_strings":["University of Warwick, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Warwick, United Kingdom","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100745497"],"corresponding_institution_ids":["https://openalex.org/I141584323"],"apc_list":{"value":1420,"currency":"USD","value_usd":1420},"apc_paid":{"value":1420,"currency":"USD","value_usd":1420},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.71760959,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"30","issue":null,"first_page":"100972","last_page":"100972"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.1509000062942505,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.1509000062942505,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.07249999791383743,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.06780000030994415,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5311999917030334},{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.5303999781608582},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3522000014781952},{"id":"https://openalex.org/keywords/physical-access","display_name":"Physical access","score":0.3172000050544739},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2824000120162964},{"id":"https://openalex.org/keywords/control-system","display_name":"Control system","score":0.2799000144004822}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6753000020980835},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5565000176429749},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5311999917030334},{"id":"https://openalex.org/C132868160","wikidata":"https://www.wikidata.org/wiki/Q10322548","display_name":"MQTT","level":3,"score":0.5303999781608582},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3456999957561493},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.3172000050544739},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2777000069618225},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.array.2026.100972","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100972","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.array.2026.100972","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100972","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1964661113","https://openalex.org/W2508317201","https://openalex.org/W2617557114","https://openalex.org/W2955671858","https://openalex.org/W3097309875","https://openalex.org/W4308391869","https://openalex.org/W4313163337","https://openalex.org/W4385549122","https://openalex.org/W4399485385","https://openalex.org/W4399744879","https://openalex.org/W4404521037"],"related_works":[],"abstract_inverted_index":{"The":[0],"Internet":[1],"of":[2,27,101],"Things":[3],"(IoT)":[4],"has":[5,39],"become":[6],"deeply":[7],"integrated":[8],"into":[9],"daily":[10],"life,":[11],"with":[12],"devices":[13],"now":[14],"monitoring":[15],"our":[16,156],"health,":[17],"managing":[18],"homes,":[19],"and":[20,60,86,90,111,137,161,194],"controlling":[21],"critical":[22],"infrastructure.":[23],"Ensuring":[24],"the":[25,42,120],"security":[26,62],"these":[28],"interconnected":[29],"systems":[30],"is":[31],"therefore":[32],"essential.":[33],"Among":[34],"IoT":[35,174],"communication":[36],"protocols,":[37],"MQTT":[38,64,104,148],"emerged":[40],"as":[41,115,146],"most":[43],"widely":[44],"adopted":[45],"lightweight":[46,128],"messaging":[47],"standard,":[48],"enabling":[49],"efficient":[50],"publish\u2013subscribe":[51],"interactions":[52],"between":[53],"devices.":[54,74,175],"However,":[55],"existing":[56,103],"solutions":[57],"for":[58,72,95,172,180],"authorisation":[59],"message-level":[61],"in":[63,119,147],"are":[65,98],"unnecessarily":[66],"computationally":[67],"expensive,":[68],"making":[69,167],"them":[70],"unsuitable":[71],"constrained":[73,173],"In":[75],"this":[76],"paper,":[77],"we":[78],"introduce":[79],"a":[80,186],"novel":[81],"access":[82],"control":[83],"policy":[84,105,195],"model":[85,106],"an":[87,102],"accompanying":[88],"enforcement":[89,125],"message-security":[91],"scheme":[92,126,157],"designed":[93],"specifically":[94],"MQTT.":[96],"We":[97],"not":[99],"aware":[100],"that":[107,155],"can":[108],"automatically":[109],"assign":[110],"maintain":[112],"access-control":[113],"labels":[114],"new":[116],"topics":[117],"appear":[118],"dynamic":[121],"topic":[122],"hierarchy.":[123],"Our":[124,151],"uses":[127],"symmetric":[129],"cryptography":[130],"to":[131,165],"provide":[132],"end-to-end":[133],"payload":[134],"confidentiality":[135,193],"(brokers":[136],"mediators":[138],"cannot":[139,184],"read":[140],"plaintext),":[141],"rather":[142],"than":[143],"hop-by-hop":[144],"protection":[145],"over":[149],"TLS.":[150],"performance":[152],"evaluation":[153],"shows":[154],"significantly":[158],"reduces":[159],"computational":[160],"memory":[162],"overhead":[163],"compared":[164],"TLS,":[166],"it":[168,178],"far":[169],"more":[170],"suitable":[171],"This":[176],"makes":[177],"practical":[179],"deployments":[181],"where":[182],"clients":[183],"afford":[185],"full":[187],"TLS":[188],"stack":[189],"but":[190],"still":[191],"require":[192],"enforcement.":[196]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-06-10T00:00:00"}