System, apparatus and method for access control list processing in a constrained environment

At least one computer readable storage medium comprising instructions that when executed enable a system to:

• receive a first request from a first device to access a first resource of the system and determine whether to grant access to the first resource based on a first access control list stored in the system, the first access control list associated with the first device, the first device having a first relevance value, and based on the determination, grant the access to the first resource;
• and
• receive a second request from a second device to access a second resource of the system and forward the second request to an access manager service coupled to the system to determine whether to grant access to the second resource based on a second access control list stored in the access manager service, the second access control list associated with the second device, the second device having a second relevance value, receive an access grant from the access manager service and based thereon, grant the access to the second resource.

A system comprising:

• at least one sensor device including a processor and a storage to store a first access control list associated with a first device, wherein the processor is to determine whether to grant an access request received from the first device to access a first resource of the at least one sensor device based on the first access control list, the at least one sensor device and the first device coupled in a distributed network having a distributed access control policy in which the at least one sensor device is to locally host access control policy for a first subset of devices and at least one access manager service is to remotely host access control policy for a second subset of devices, the at least one sensor device to be located in a first portion of a network;
• and
• a first controller coupled to the at least one sensor device, the first controller to control the at least one sensor device, the first controller including a second storage to store a second access control list and to determine whether to allow a second device to access the at least one sensor device based on the second access control list, the first controller located in a second portion of the network.