# SoK: Delegated Security in the Internet of Things
## Appendix A Methodology for Selecting Papers Suitable for the Review
### Results of the Selection Procedure
\begin{table}
\begin{tabular}{c c c c c c} \hline \hline \(\lambda\)a & **Title** & **Y** & **T** & **Cn** & **h** \\ \hline \hline \multicolumn{6}{c}{**Access Control and/or Authorisation Delegation**} \\ \hline
1 & Authorisation framework for the Internet-of-Things [110] & 2013 & C & 70 & / \\
2 & A DTLS-based security architecture for the Internet of Things [25] & 2015 & C & 24 & / \\
3 & A delegated authorisation solution for smart-city mobile applications [97] & 2016 & C & 4 & / \\
4 & Access control framework for API-enabled devices in smart buildings [111] & 2016 & C & 18 & / \\
5 & An overview on delegated authorisation for CoAP: Authentication and authorisation & 2016 & C & 8 & / \\  & for... (ACE) [99] & 2016 & C & 23 & / \\  & Building secure healthcare services using OAuth 2.0 and JSON web token in IOT & 2016 & C & 23 & / \\  & IoT Delegate: Smart Home Framework for Heterogeneous IoT Service & 2016 & J & 15 & 34 \\  & Collaboration [112] & 2016 & C & 8 & / \\
8 & IoT-cloud authorisation and delegation mechanisms for ubiquitous sensing and actuation [34] & 2016 & J & 109 & 102 \\
9 & TACIoT: multidimensional trust-aware access control system for the Internet of Things [113] & 2017 & J & 55 & 272 \\
10 & A Community-Driven Access Control Approach in Distributed IoT & 2017 & C & 24 & / \\  & Environments [114] & 2017 & C & 24 & / \\
11 & A model to enable application-scoped access control as a service for IoT using OAuth 2.0 [29] & 2017 & J & 24 & 204 \\
12 & Achievable Multi-Security Levels for Lightweight IoT-Enabled Devices in & 2017 & J & 24 & 204 \\  & Communications [115] & 2017 & C & 95 & / \\  & OAuth-IoT: An access control framework for the Internet of Things based on open standards [28] & 2017 & C & 45 & / \\
15 & User-centric access control for efficient security in smart cities [116] & 2017 & C & 11 & / \\
16 & A Group-Oriented DTLS Handshake for Secure IoT Applications [21] & 2018 & J & 21 & 102 \\
17 & Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT [26] & 2018 & J & 905 & 149 \\  & Decentralised IoT Data Management Using BlockChain and Trusted Execution & 2018 & C & 98 & / \\
19 & Group-Oriented Range-Bound Key Agreement for Internet of Things Scenarios [117] & 2018 & J & 18 & 149 \\  & Herales: Scalable, Fine-Grained Access Control for Internet-of-Things in Enterprise Environments [118] & 2018 & C & 14 & / \\  & Validation of an Adaptive Risk-based Access Control Model for the Internet of Things [103] & 2018 & J & 59 & / \\
22 & 5G-SSAAC: Slice-specific Authentication and Access Control in 5G [119] & 2019 & C & 5 & / \\  & Blockchain and Structural Relationship-Based Access Control for IoT: A Smart City Use Case [27] & 2019 & C & 6 & / \\  & Dynamic Multiparty Authentication using Cryptographic Hardware for the Internet of Things [120] & 2019 & C & 3 & / \\
25 & Enabling Decentralised Identifiers and Verifiable Credentials for Constrained & 2019 & J & 33 & 4 \\  & Devices... [121] & 2019 & J & 24 & 43 \\  & Policy-based access control for constrained healthcare resources in the context of the Internet of Things [35] & 2019 & J & 47 & 129 \\  & Trusted D2D-Based IoT Resource Access Using Smart Contracts [33] & 2019 & C & 7 & / \\
29 & A new scalable authentication and access control mechanism for 5G-based IoT [122] & 2020 & J & 29 & 151 \\
30 & Access control for Internet of Things—enabled assistive technologies:... [37] & 2020 & J & 11 & / \\ \hline \hline \end{tabular}
\end{table} 
Table 1: List of the papers retrieved during the selection procedure.