Design and Development of a Lightweight Access Control Framework for Iot Device Security

There are a lot of Internet of Things (IoT) gadgets in important areas that need strong security systems to protect against possible risks. Based on the idea of least privilege, this paper describes a lightweight access control system that was made for IoT settings. For safe communication between machines, the suggested system uses a Capability-Based Access Control (CapBAC) model that has been improved with Advanced Encryption Standard (AES) and Reed-Solomon error correction. Our method includes making JSON-encoded capability tokens that describe device rights and have an expiration date. By hashing these tokens, symmetric AES keys are made, which protects the security and privacy of the data while it is being sent. Simulations of communication mistakes are used to test the system and see how well Reed-Solomon decoding and AES decryption work. Our method not only protects the privacy and security of data, but it also has a small operating size that makes it ideal for IoT devices with limited space. CapBAC's focus on both mistake repair and encryption shows that the framework has the ability to provide strong security in IoT networks that are always changing, where other security methods might not work.