Offline/Online Outsourced Attribute-Based Encryption with Partial Policy Hidden for the Internet of Things

Abstract

In the Internet of Things (IoT) environment, the intelligent devices collect and share large-scale sensitive personal data for a wide range of application. However, the power of storage and computing of IoT devices is limited, so the mass perceived data will be encrypted and transmitted to a cloud platform-interconnected IoT devices. Therefore, the concern how to save the encryption/decryption cost and preserve the privacy of the sensitive data in IoT environment is an issue that deserves research. To mitigate these issues, an offline/online attribute-based encryption scheme that supports partial policy hidden and outsourcing decryption will be proposed. This scheme adopts offline/online attribute-based encryption algorithms; then, the key generation algorithm and encryption algorithm are divided into two stages: offline stage and online stage. Meanwhile, in order to solve the problem of policy disclosure under the cloud platform, the policy hidden is supported, that is, the attribute is divided into the attribute value and the attribute name. For the pairing operation involved in decryption process, a verifiable outsourced decryption is implemented. Our scheme is constructed based on composite bilinear groups, which meets full security under the standard model. Finally, by comparing with other schemes in terms of functionality and computational overhead, it is shown that the proposed scheme is more efficient and applicable to the mobile devices with limited computing and storage functions in the Internet of Things environment.

A New Attribute Encryption Anonymity Algorithm in Cloud Computing Environment

“…Its essence is to replace the original attribute value with a wider range of fuzzy values, so as to realize the fuzzy replacement of data without violating the original semantics. Although the generalization operation will reduce the data accuracy, it fully realizes the role of protecting privacy [1].…”

HUAP: Practical Attribute-based Access Control Supporting Hidden Updatable Access Policies for Resource-Constrained Devices

“…This paper is an extended version of a conference paper published in [1]. We extend our previous work by expanding system architecture, improving the related cryptographic structures, evaluating performance based on the LSSS [19] AND-gates Fully [20] LSSS [21] AND-gates [25] LSSS - [26] LSSS - [31] LSSS Partially [32] LSSS Partially - [38] LSSS [39] LSSS [40] LSSS Partially - [41] LSSS Partially - [42] AND-gates Fully -HUAP AND-gates Fully actual execution time, and providing security proof in detail.…”

“…On the other hand, some other schemes have been proposed to simultaneously support anonymity and online/offline encryption. Yan et al [40] proposed an attribute-based encryption scheme with partially hidden policies for the Internet of Things. In this scheme, data users can outsource the decryption process to the cloud and then verify returned results.…”

A trusted medical data sharing framework for edge computing leveraging blockchain and outsourced computation

“…However, the probability of correct verification in their approach is only 1/2. Yan et al [ 44 ] improved the modular exponentiation outsourcing algorithm based on the work of Li et al [ 43 ] and applied it to the encryption and decryption phases of ciphertext-policy attribute-based encryption, increasing the verifiability probability to 1.…”

“…Additionally, while offloading some computational tasks to more powerful devices or cloud servers, as explored in Refs. [ [40] , [41] , [42] , [43] , [44] ], can alleviate the computational burden on resource-constrained devices, achieving efficient CP-ABE computations in edge environment while ensuring computational correctness remains an urgent challenge.…”