| With the emergence of sharing mode and the development of IoT technology,shared parking has gradually become popular.Shared parking can effectively alleviate parking difficulties and traffic congestion in cities,but in the actual authorization process,there are the following problems:1)Insufficient security:unable to ensure the legitimacy of user identity and the validity of user credentials;2)Lack of flexibility:dynamic authorization cannot be carried out according to equipment and environmental conditions,and the usage rights of resources cannot be allocated according to time.These problems limit the application of shared parking in real life.Based on this,this paper combines the capability-based access control(CapBAC)model and JSON-based certificate(JSON Web Token,JWT)authentication technology,studies the authorization model under the shared parking scenario,and designs the dynamic authorization model under the shared parking scenario.The model can ensure the security of authorization process,and can also carry out dynamic authorization according to actual conditions.On this basis,a set of time-sharing authorization stategy is added to enable the model to have the ability of time-sharing authorization.The research work of this paper is as follows:1)Design dynamic authorization model:This authorization model is based on CapBAC authorization model and JWT authentication technology,which not only ensures the security of the authorization process,but also dynamically executes authorization decisions according to actual conditions,making the authorization process more flexible.Compared with the traditional authorization model,this model can better meet the actual needs of sharing parking scenes in the IoT environment.2)Propose a time-sharing authorization strategy based on time-slice:according to the characteristics of shared scenes,the time-sharing authorization strategy can efficiently complete the time-sharing reservation function by means of bitmap algorithm and bit operation.Applying time-sharing authorization to authorization model enables the model to have the capability of time-sharing authorization.3)Test the authorization model and the time-sharing authorization strategy:First,functional testing is carried out on the authorization model,and the test results show that the authorization model is safe and flexible;After that,the efficiency of the time-sharing authorization function in the system was tested by comparing experiments-after applying the time-sharing authorization strategy,the utilization rate of parking spaces was increased from 50%to about 85%. |