{"id":"https://openalex.org/W7117902370","doi":"https://doi.org/10.1109/tnse.2025.3650377","title":"Dynamic Authentication and Granularized Authorization With a Cross-Domain Zero Trust Architecture in Large-Scale IoT Networks","display_name":"Dynamic Authentication and Granularized Authorization With a Cross-Domain Zero Trust Architecture in Large-Scale IoT Networks","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7117902370","doi":"https://doi.org/10.1109/tnse.2025.3650377"},"language":null,"primary_location":{"id":"doi:10.1109/tnse.2025.3650377","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3650377","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xiaoyu Ma","orcid":"https://orcid.org/0009-0002-6751-7162"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Xiaoyu Ma","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Western University, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Western University, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121736463","display_name":"Fang Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Fang Fang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Western University, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Western University, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121730646","display_name":"Tianlong Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Tianlong Liu","raw_affiliation_strings":["Department of Chemical and Biochemical Engineering, Western University, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"Department of Chemical and Biochemical Engineering, Western University, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107634126","display_name":"Xianbin Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Xianbin Wang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Western University, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Western University, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I125749732"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01055732,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"5888","last_page":"5904"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.2020999938249588,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.2020999938249588,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.10790000110864639,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.10639999806880951,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.7056999802589417},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5551000237464905},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5389000177383423},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.4537000060081482},{"id":"https://openalex.org/keywords/trust-management","display_name":"Trust management (information system)","score":0.4219000041484833},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.39570000767707825},{"id":"https://openalex.org/keywords/lightweight-extensible-authentication-protocol","display_name":"Lightweight Extensible Authentication Protocol","score":0.37700000405311584},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.34850001335144043}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8216000199317932},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.7056999802589417},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5551000237464905},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5449000000953674},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5389000177383423},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5056999921798706},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4537000060081482},{"id":"https://openalex.org/C2776384856","wikidata":"https://www.wikidata.org/wiki/Q17145767","display_name":"Trust management (information system)","level":2,"score":0.4219000041484833},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.39570000767707825},{"id":"https://openalex.org/C167169670","wikidata":"https://www.wikidata.org/wiki/Q1824705","display_name":"Lightweight Extensible Authentication Protocol","level":4,"score":0.37700000405311584},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.3206999897956848},{"id":"https://openalex.org/C168970074","wikidata":"https://www.wikidata.org/wiki/Q5227146","display_name":"Data Authentication Algorithm","level":4,"score":0.303600013256073},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.298799991607666},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.29670000076293945},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2892000079154968},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.2574999928474426},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.25380000472068787}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2025.3650377","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2025.3650377","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G219192972","display_name":null,"funder_award_id":"RGPIN-2025-06368","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"},{"id":"https://openalex.org/G2638361354","display_name":null,"funder_award_id":"RGPIN-2024-05720","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"},{"id":"https://openalex.org/G96409953","display_name":null,"funder_award_id":"RGPIN-2023-04082","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":73,"referenced_works":["https://openalex.org/W2243292228","https://openalex.org/W2811205501","https://openalex.org/W3006403513","https://openalex.org/W3013894142","https://openalex.org/W3015913521","https://openalex.org/W3033473526","https://openalex.org/W3041657239","https://openalex.org/W3119029232","https://openalex.org/W3125079156","https://openalex.org/W3138597937","https://openalex.org/W3162199680","https://openalex.org/W3183608804","https://openalex.org/W3185634836","https://openalex.org/W3186590963","https://openalex.org/W3201410046","https://openalex.org/W3209491426","https://openalex.org/W3209576441","https://openalex.org/W4205311841","https://openalex.org/W4205786215","https://openalex.org/W4205895944","https://openalex.org/W4206159617","https://openalex.org/W4206776660","https://openalex.org/W4211246620","https://openalex.org/W4214564192","https://openalex.org/W4214710720","https://openalex.org/W4225283349","https://openalex.org/W4282945617","https://openalex.org/W4285110155","https://openalex.org/W4285196506","https://openalex.org/W4285205927","https://openalex.org/W4285234583","https://openalex.org/W4285287462","https://openalex.org/W4293057354","https://openalex.org/W4293108682","https://openalex.org/W4308114592","https://openalex.org/W4312584511","https://openalex.org/W4319233998","https://openalex.org/W4319297893","https://openalex.org/W4319863504","https://openalex.org/W4319996447","https://openalex.org/W4321090867","https://openalex.org/W4323065970","https://openalex.org/W4380186494","https://openalex.org/W4380607175","https://openalex.org/W4381195850","https://openalex.org/W4383503989","https://openalex.org/W4385253315","https://openalex.org/W4386280834","https://openalex.org/W4386469546","https://openalex.org/W4386590864","https://openalex.org/W4386766438","https://openalex.org/W4387743877","https://openalex.org/W4387790008","https://openalex.org/W4387831783","https://openalex.org/W4388061054","https://openalex.org/W4388627545","https://openalex.org/W4390604865","https://openalex.org/W4390904884","https://openalex.org/W4392901757","https://openalex.org/W4393079398","https://openalex.org/W4396620995","https://openalex.org/W4396844850","https://openalex.org/W4399400270","https://openalex.org/W4400111429","https://openalex.org/W4401072017","https://openalex.org/W4401326396","https://openalex.org/W4404326175","https://openalex.org/W4405786479","https://openalex.org/W4407304403","https://openalex.org/W4407304762","https://openalex.org/W4409097503","https://openalex.org/W4409560748","https://openalex.org/W4409895106"],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,18,138,155],"increasing":[2],"number":[3],"of":[4,22,25],"connected":[5],"devices":[6],"and":[7,31,52,68,83,86,119,144,157,169,176,200],"complex":[8],"networks":[9],"involved,":[10],"current":[11],"domain-specific":[12],"authentication":[13,30,48,85,97,181],"mechanisms":[14],"become":[15],"inadequate":[16],"for":[17,88,98],"dynamic":[19,124],"access":[20,152],"demands":[21],"large-scale":[23,89],"Internet":[24],"Things":[26],"(IoT)":[27],"systems.":[28,91],"Cross-domain":[29],"authorization":[32,54,87,147],"could":[33],"enhance":[34],"device":[35,109],"interoperability":[36],"across":[37],"different":[38],"security":[39,199],"domains.":[40],"However,":[41],"they":[42],"face":[43],"new":[44],"challenges":[45],"including":[46],"increased":[47],"latency,":[49],"non-transferable":[50],"trust,":[51],"excessive":[53],"computational":[55],"overhead.":[56],"To":[57],"address":[58],"these":[59],"issues,":[60],"in":[61,111,167],"this":[62],"paper,":[63],"we":[64],"propose":[65],"Dynamic":[66],"Authentication":[67],"Granularized":[69],"Authorization":[70],"(DAGA),":[71],"a":[72,103,189],"cross-domain":[73,104,135],"Zero":[74],"Trust":[75],"Architecture":[76],"(ZTA)-based":[77],"framework":[78],"that":[79,107,162],"enables":[80],"efficient,":[81],"adaptive,":[82],"scalable":[84],"IoT":[90],"Rather":[92],"than":[93],"relying":[94],"on":[95],"full":[96],"every":[99],"request,":[100],"DAGA":[101,114,141,163,187],"introduces":[102],"pre-authentication":[105],"phase":[106],"estimates":[108],"trustworthiness":[110],"advance.":[112],"Specifically,":[113],"leverages":[115],"Federated":[116],"Learning":[117],"(FL)":[118],"Long":[120],"Short-Term":[121],"Memory":[122],"(LSTM)-based":[123],"trust":[125,130],"management":[126],"to":[127,148,173],"minimize":[128],"unnecessary":[129],"score":[131],"computations,":[132],"thereby":[133],"accelerating":[134],"pre-authentication.":[136],"At":[137],"same":[139],"time,":[140],"employs":[142],"multi-level":[143],"cached":[145],"fast":[146],"achieve":[149],"adaptive":[150,203],"granularized":[151],"control,":[153],"enhancing":[154],"accuracy":[156],"efficiency.":[158],"Experimental":[159],"results":[160],"demonstrate":[161],"achieves":[164,188],"notable":[165],"reductions":[166],"communication":[168],"computation":[170],"overhead":[171],"compared":[172],"ZTA,":[174],"blockchain-based,":[175],"lightweight":[177],"mechanisms,":[178],"significantly":[179],"reducing":[180],"latency.":[182],"Despite":[183],"its":[184],"efficiency":[185,201],"gains,":[186],"superior":[190],"accuracy\u2013latency":[191],"trade-off":[192],"over":[193],"other":[194],"baseline":[195],"approaches,":[196],"effectively":[197],"balancing":[198],"through":[202],"optimization.":[204]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2026-01-01T00:00:00"}