How maryam957/iiot_decentralized_identity_management_framework works
This is a single-zone decentralized identity framework for simulated Industrial IoT devices. Its main workflow queues device arrivals, registers authenticated identities, finalizes them into epoch-bound Merkle batches, offers temporary access before finalization, then verifies permanent membership and applies revocation-aware resource policy. The simulation package coordinates that lifecycle using a virtual clock. The graph includes the documented security and access branches; several implementation details are unsampled, so uncertain wiring is omitted.
Main entry points: fog_node.py Fog node · simulator.py Simulation controller · authorization.py Resource authorization · token_service.py Token service
Components 14
Lifecycle simulation
- Simulation controller
simulation/simulator.py - Virtual clock
simulation/clock.py - Epoch manager
simulation/epoch_manager.py - Device agent
simulation/device_agent.py
Registration and anchoring
- Device identity
phase1/device.py - Fog node
phase1/fog_node.py - Identity and epoch store
phase1/fog_node.py - Merkle tree and proofs
phase1/merkle.py
Temporary access
- Token service
phase2/token_service.py - Provisional policy
phase2/provisional_access.py
Permanent access
- Identity verification
phase3/verification.py - Resource authorization
phase3/authorization.py - Permanent access policy
phase3/authorization.py
Other components
- IIoT device
Connections 21
- IIoT device → Simulation controller: arrives
- Simulation controller → Virtual clock: reads time
- Simulation controller → Epoch manager: registers and finalizes
- Epoch manager → Device agent: registers agent
- Device agent → Device identity: registers identity
- Device identity → Fog node: submits registration
- Fog node → Identity and epoch store: writes identity data
- Fog node → Merkle tree and proofs: builds batch tree
- Merkle tree and proofs → Fog node: returns root and proofs
- Fog node → Identity and epoch store: stores roots and proofs
- Epoch manager → Identity and epoch store: checks pending batch
- Simulation controller → Token service: issues and validates tokens
- Token service → Identity and epoch store: reads identity and revocation
- Token service → Provisional policy: checks provisional access
- Simulation controller → Resource authorization: requests permanent access
- Resource authorization → Identity verification: verifies membership
- Identity verification → Fog node: retrieves proof and root
- Fog node → Identity and epoch store: reads epoch records
- Resource authorization → Token service: checks device revocation
- Resource authorization → Identity and epoch store: reads device role
- Resource authorization → Permanent access policy: checks resource operation