You can use nested JSON as long as you create them in your permitted parameters such as:
def parameters
params.respond_to?(:permit) ?
params.require(:picture).permit(:identifier => [ :name ]) :
params[:picture].slice(:identifier => [ :name ]) rescue nil
end
This works on Rails 4 using Strong Parameters