ABSTRACT
The devices ranging from sensors to RFID tags, identities extended to devices, ubiquitous interaction, and large numbers of heterogeneous devices are the main challenges of IoT to design security solutions. Access control and authorization in IoT with the least privilege is equally important to establish secure communication between multiple devices, and services. The access control is also critical due to its potential impact on the behavior of the system, but also there is an access to sensitive information, or services that are available. The principle of the least privilege is an important feature of access control solution which limits the access to minimum resources which are required, and also referred to as selective access. The capability is as a token, ticket, or a key that gives the possessor permission to access an entity, or object in a computer system. Conceptually, a capability is a token that gives permission to access an object.
