“Say What You Mean”: Natural Language Access Control With Large Language Models for Internet of Things

Summary

The authors present LACE, a hybrid framework that uses large language models to turn natural-language access control requirements into structured, formally validated rules for IoT platforms. In smart home experiments, LACE reached up to 88% decision accuracy with a 0.79 F1-score using DeepSeek-V3, outperforming GPT-3.5 and Gemini baselines. Ablation and adversarial robustness evaluations indicate that the architecture bounds LLM reasoning errors while keeping authorization behavior stable.