Enabling efficient traceable and revocable time-based data sharing in smart city

Abstract

With the assistance of emerging techniques, such as cloud computing, fog computing and Internet of Things (IoT), smart city is developing rapidly into a novel and well-accepted service pattern these days. The trend also facilitates numerous relevant applications, e.g., smart health care, smart office, smart campus, etc., and drives the urgent demand for data sharing. However, this brings many concerns on data security as there is more private and sensitive information contained in the data of smart city applications. It may incur disastrous consequences if the shared data are illegally accessed, which necessitates an efficient data access control scheme for data sharing in smart city applications with resource-poor user terminals. To this end, we proposes an efficient traceable and revocable time-based CP-ABE (TR-TABE) scheme which can achieve time-based and fine-grained data access control over large attribute universe for data sharing in large-scale smart city applications. To trace and punish the malicious users that intentionally leak their keys to pursue illicit profits, we design an efficient user tracing and revocation mechanism with forward and backward security. For efficiency improvement, we integrate outsourced decryption and verify the correctness of its result. The proposed scheme is proved secure with formal security proof and is demonstrated to be practical for data sharing in smart city applications with extensive performance evaluation.

Overall framework of IoT platform in urban agglomeration-cross-city, cross-domain, cross-level, and one-network unified management architecture

“…Zhang [21] proposed a data privacy security method that supported monotonous and partially hidden access policies and large-scale attribute spaces by hiding the attribute values of access policies. Used hierarchical identity-based encryption technology to set the user key validity period, so as to achieve time-based fine-grained access control and user privacy protection of access policies.…”

EDI-C: Reputation-Model-Based Collaborative Audit Scheme for Edge Data Integrity

“…Nevertheless, this scheme is only suitable for static scenarios where each data replica is checked one by one, so it incurs much additional computation. Besides, there are many research schemes [13][14][15][16][17] based on authentication data structures such as Merkle Hash Tree (MHT) and Index-Hash Table (IHT), and they utilize homomorphic signatures for simultaneous verification of multi-copy outsourced data and dynamic update verification. To further enhance the efficiency and reduce the burden of certificate management, researchers have also proposed an identity-based scheme for multi-copy data integrity verification by adopting identity signature technology [18,19].…”

A revocable attribute-based encryption EHR sharing scheme with multiple authorities in blockchain

“…To resist the collusion attack between the revoked users and the malicious users, Zhang et al [ 34 ] set a group manager to assign a certificate for each user and embed the certificate into the user’s secret key. While implementing revocable user management, the scheme TR-TABE [ 35 ] can achieve white-box traceability without maintaining a user list.…”