## 2 Related Works  
In the field of information security, the main concern for organizations and industry sectors is to keep the secrecy of their information and prevent illegal access to their logical and physical resources, especially in the presence of cyber-criminals and cyber-attacks [30; 31]. Currently, resources are no longer located within local areas, they are distributed on different sites and need to be accessed via various private and public networks. The emergence of evolving technologies and digital transformation urges organizations to protect their private and public networks, especially with the evolution of Industry 4.0 and the IoT concept [32; 33; 34]. In this context, various AC models and metamodels are implemented in different computing environments to protect resources and information from unauthorized access. Unfortunately, they have limited features and are insufficient to meet the current AC requirements and follow the needed technology upgrades [17; 20]. In this section, we review some of the proposed AC methods in this domain. We summarize the existing AC metamodels [17; 18; 20] proposed to instantiate different AC models. To prevent insider threats in organizations a function-based AC method inspired by functional encryption is proposed in [35]. It stores access authorizations as a three-dimensional tensor where users can invoke authorized commands at different levels such as data segments. They are authorized to use a command on an object and forbidden to use it on another object. In [36], [PERSON] et al. propose a scalable industry data AC system for the RFID-enabled supply chain to provide an item-level data AC mechanism that defines and enforces AC policies based on both the participants' role attributes and the products' RFID tag attributes. For industrial automation and control systems (IACS) and similar automation systems of the smart energy grid, an eXtended Access Control Markup Language (XACML)-based AC system is described by [PERSON] et al. [37] to protect connected devices and associated safety-relevant settings from unauthorized access. Their proposed AC method is composed of a two-stage AC schema. They first evaluate policies based on XACML, then use information about the system's behavior to prevent malicious or accidental operations from having a negative impact on system stability. The system design and implementation consider safety requirements (e.g., timing requirements, the availability...) to enable integration in safety-critical environments. For secure information sharing in an IIoT, in [13], [PERSON] et al. investigate how to secure information sharing with external vendors, and they identify the necessary security requirements in this domain. Also, they propose a roadmap to improve security in IIoT which investigates short-term and long-term solutions for IIoT devices. The former is mainly based on integrating existing appropriate practices such as firewalls, intrusion detection systems, etc. The latter outlines a long-term solution with fine-grained AC for sharing data between external entities that supports cloud-based data storage. [PERSON] et al. [29] show how AC can be specified using an ABAC model for remote healthcare monitoring (RHM). They present healthcare AC requirements using an example, then explain how NGAC can be used for specifying AC policies. [PERSON] et al. [38] propose a context-sensitive RBAC (CRABC) scheme for securing the environment of the healthcare IoT industry which is composed of large-scale connectivity of medical devices, patients, physicians, etc., with the vastness of information collection and sharing. CRABC combines roles, attributes, and context to formulate context constraints to enforce access and flow controls. Another AC model for the IoT in healthcare, named Enhanced Context-aware Capability based AC (ECCAPAC), is proposed by [PERSON] et al. [39] to make the medical network resilient against crypto attacks by taking into account the trust value of the object based on relevance and node importance.