LLM-Driven Auto Configuration for Transient IoT Device Collaboration

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Shastri, Hetvi, Hanafy, Walid A., Wu, Li, Irwin, David, Srivastava, Mani, Shenoy, Prashant
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866912465084743680
author Shastri, Hetvi
Hanafy, Walid A.
Wu, Li
Irwin, David
Srivastava, Mani
Shenoy, Prashant
author_facet Shastri, Hetvi
Hanafy, Walid A.
Wu, Li
Irwin, David
Srivastava, Mani
Shenoy, Prashant
contents Today's Internet of Things (IoT) has evolved from simple sensing and actuation devices to those with embedded processing and intelligent services, enabling rich collaborations between users and their devices. However, enabling such collaboration becomes challenging when transient devices need to interact with host devices in temporarily visited environments. In such cases, fine-grained access control policies are necessary to ensure secure interactions; however, manually implementing them is often impractical for non-expert users. Moreover, at run-time, the system must automatically configure the devices and enforce such fine-grained access control rules. Additionally, the system must address the heterogeneity of devices. In this paper, we present CollabIoT, a system that enables secure and seamless device collaboration in transient IoT environments. CollabIoT employs a Large language Model (LLM)-driven approach to convert users' high-level intents to fine-grained access control policies. To support secure and seamless device collaboration, CollabIoT adopts capability-based access control for authorization and uses lightweight proxies for policy enforcement, providing hardware-independent abstractions. We implement a prototype of CollabIoT's policy generation and auto configuration pipelines and evaluate its efficacy on an IoT testbed and in large-scale emulated environments. We show that our LLM-based policy generation pipeline is able to generate functional and correct policies with 100% accuracy. At runtime, our evaluation shows that our system configures new devices in ~150 ms, and our proxy-based data plane incurs network overheads of up to 2 ms and access control overheads up to 0.3 ms.
format Preprint
id arxiv_https___arxiv_org_abs_2507_03064
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle LLM-Driven Auto Configuration for Transient IoT Device Collaboration
Shastri, Hetvi
Hanafy, Walid A.
Wu, Li
Irwin, David
Srivastava, Mani
Shenoy, Prashant
Cryptography and Security
Artificial Intelligence
Today's Internet of Things (IoT) has evolved from simple sensing and actuation devices to those with embedded processing and intelligent services, enabling rich collaborations between users and their devices. However, enabling such collaboration becomes challenging when transient devices need to interact with host devices in temporarily visited environments. In such cases, fine-grained access control policies are necessary to ensure secure interactions; however, manually implementing them is often impractical for non-expert users. Moreover, at run-time, the system must automatically configure the devices and enforce such fine-grained access control rules. Additionally, the system must address the heterogeneity of devices. In this paper, we present CollabIoT, a system that enables secure and seamless device collaboration in transient IoT environments. CollabIoT employs a Large language Model (LLM)-driven approach to convert users' high-level intents to fine-grained access control policies. To support secure and seamless device collaboration, CollabIoT adopts capability-based access control for authorization and uses lightweight proxies for policy enforcement, providing hardware-independent abstractions. We implement a prototype of CollabIoT's policy generation and auto configuration pipelines and evaluate its efficacy on an IoT testbed and in large-scale emulated environments. We show that our LLM-based policy generation pipeline is able to generate functional and correct policies with 100% accuracy. At runtime, our evaluation shows that our system configures new devices in ~150 ms, and our proxy-based data plane incurs network overheads of up to 2 ms and access control overheads up to 0.3 ms.
title LLM-Driven Auto Configuration for Transient IoT Device Collaboration
topic Cryptography and Security
Artificial Intelligence
url https://arxiv.org/abs/2507.03064