Accountable and Revocable Large Universe Decentralized Multi-Authority Attribute-Based Encryption for Cloud-Aided IoT

Abstract

The data collected, stored, shared, and accessed across different platforms in the dynamic IoT is mostly confidential and privacy-sensitive. Data security and access control issues urgently need to be addressed. Multi-authority attribute-based encryption (MA-ABE) is seen as a potential solution for addressing data access control security concerns in the dynamic IoT since it allows for dynamic access control over encrypted data. However, the existing key abuse problem is severely destroying the security access control of MA-ABE. The existing accountable attribute-based encryption schemes only support small attributes (users) universe and single authority. Moreover, they do not support revocation. Some schemes are inefficient since they are constructed in the composite order bilinear group. In this article, the author proposes the first accountable and revocable large universe decentralized multi-authority attribute-based encryption scheme with outsourcing decryption based on prime order bilinear groups. The proposed scheme allows for the dynamic capacity expansion of attributes, users, and authorities. An audit mechanism is given to judge if the suspicious key was leaked by a malicious user or by authorities and to determine the identity of the leaker. The malicious user who divulges key can be punished by user-attribute revocation. The revocation mechanism is resistant to collusion attacks undertaken by revoked users and non-revoked users. Meanwhile, it satisfies the requirements of forward and backward security. The proposed scheme is static security in the random oracle model under the q-DPBDHE2 assumption. To save resources, the outsourced decryption module is optional for users with restricted resources. According to the results of the performance analysis, it is suited for large-scale cross-domain cooperation in the dynamic cloud-aided IoT.

A Proxy-Based and Collusion Resistant Multi-Authority Revocable CPABE Framework with Efficient User and Attribute-Level Revocation (PCMR-CPABE)

“…The study of existing multi-authority CPABE schemes based on bilinear pairing cryptography exhibits that very few schemes have addressed both levels of revocation however, the approaches implemented to restrict the access privileges of the revoked users have not considered the potentiality of the cloud service provider to collude with the revoked users [21][22][23]. Huang [23] too updated users' key and re-encrypted ciphertext to enforce user and attribute-level revocation. All attributes held by the user have been revoked by the involved attribute authorities in the proposed approach to address user revocation.…”

Healthcare Data Security Using IoT Sensors Based on Random Hashing Mechanism

“…Estimate A ij by using equation (11); End if End for S j End for S i End for X k Step 3: Compute exponential matrix Expm ij and the average A ij of relevant vector R ij based on the estimated list index avg idx and update avg list in the list by using equations ( 12) to (14); For y = 1 to S j Compute the related average of overall vector avg R by using equation (15); Compute the distance list dis ls between the average list avg 2 List and the related parameter avg R 2 by using equation ( 16); Update C id with the minimum of dis ls as shown in equation ( 17); End for y; Algorithm 2: Continued.…”

“…The conventional works developed different encryption and classification methodologies [13,14] to ensure secure data storage and retrieval in the IoT-cloud domain. Generally, the encryption techniques [15] like Advanced Encryption Standard (AES) [16], Rivest Shamir Adleman (RSA), SHA-512, and Elliptic Curve Cryptography (ECC) have been widely used in many data security systems [17]. Moreover, it helps decrypt the raw data before storage and retrieval processes with guaranteed security [18].…”

Performance analysis of the proxy-based and collusion-resistant revocable CPABE framework

“…Furthermore, the CTFilter algorithm in the partially hidden access structures (PHAS)-highly efficient key revocation (HEKR)-CPABE scheme increased the computational cost and made it vulnerable to collusion attacks. The approach proposed in [32] updated users' keys and re-encrypted ciphertext to enforce user and attribute-level revocation. All attributes held by the user have been revoked in the proposed approach by the involved attribute authorities to address user revocation.…”