Research on Zero-Trust Dynamic Access Control Model Based on User Behavior in Internet of Things Environment

In the IoT environment, traditional access control mechanisms suffer from overuse of user privileges and coarse access granularity, while failing to verify user requests in real time. To address these challenges, this paper introduces the User Behavior-Based Zero Trust Dynamic Access Control Model (UB-ZTDAC). The model combines the concept of zero trust by not presetting trust for each user but verifying each request. The model combines user behavioral trust values with Ciphertext-Policy Attribute-Based Encryption (CP-ABE) to achieve dynamic and fine-grained access control based on zero trust. The model dynamically calculates the user's trust value by monitoring and evaluating the user's behavior in real time using Fuzzy Analytic Hierarchy Process (FAHP), and applies CP-ABE encryption policy based on the trust value to ensure that only users who meet the attribute requirements are allowed to access the data or resources. To cope with the fluctuation of user trust values, the model designs an attribute revocation mechanism to ensure the security and flexibility of the system. The experimental findings indicate that the model proposed in this paper surpasses conventional access control schemes regarding security, flexibility, and performance. It effectively tackles the various security challenges present in the Internet of Things (IoT) ecosystem.