@inproceedings{083ff017893c4e8083af8440c75d9cd7,
title = "External Token-Based Authorization of Data-Driven Integrations and Service Compositions in MQTT 5",
abstract = "Modern connected cyber-physical systems and their integrations to traditional information systems are increasingly dependant on data and data sharing management in their integrations. Many such systems are constantly changing and evolving their composition, often including integrations to third party (data-driven) services. This paper presents a model where a service framework, used to manage microservice configurations, is also utilized to manage access to MQTT Version 5 message topics. A proof of concept is provided demonstrating how Eclipse Arrowhead as the service management layer is capable of taking care of authentication and authorization of publish and subscribe actions to MQTT topics as individually managed data services. The study shows that JSON Web Tokens (JWT) from this service framework can be used in the MQTT Version 5 headers without violating the MQTT specification as demonstrated with HiveMQ as the message broker in the proof of concept implementation.",
keywords = "Arrowhead framework, authentication, authorization, data integration, energy data services, JWT, MQTT, third-party services",
author = "David H{\"a}stbacka and Minh Tran and Petri Kannisto and Mikael Filppula and Pal Varga",
note = "Publisher Copyright: {\textcopyright} 2023 IEEE.; Annual Conference of the IEEE Industrial Electronics Society (IECON) ; Conference date: 16-10-2023 Through 19-10-2023",
year = "2023",
doi = "10.1109/IECON51785.2023.10311779",
language = "English",
series = " Proceedings of the Annual Conference of the IEEE Industrial Electronics Society",
publisher = "IEEE",
pages = "1--6",
booktitle = "IECON 2023 - 49th Annual Conference of the IEEE Industrial Electronics Society",
}