RELATIONSHIP-BASED ACCESS CONTROL FOR IOT NETWORKS

摘要

Techniques are described for managing data access within a first computing environment. Embodiments include receiving a request, from a first requesting entity, to access a first resource. A query is generated and submitted to a graph-based database to determine one or more relationships between the first requesting entity and other entities covered by a security policy. The graph-based database models identities, resources and security relationships covered by the security policy. Embodiments determine, based on the determined one or more relationships and the security policy, whether the first entity is allowed to access the first resource according to the security policy.