On the Feasibility of Attribute-Based Encryption on Constrained IoT Devices for Smart Systems

Girgenti, Benedetto; Perazzo, Pericle; Vallati, Carlo; Righetti, Francesca; Dini, Gianluca; Anastasi, Giuseppe

doi:10.1109/smartcomp.2019.00057

Cited by 24 publications

(14 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since then, many researchers have proposed their own schemes, and they evaluated such schemes over various platforms. Moreover, many works have been written that discuss the feasibility of many ABE schemes (both KP-ABE and CP-ABE) on limited-resource devices, like smartphones [ 11 ] and IoT devices [ 10 , 12 ]. However, to the authors’ knowledge, the literature has yet to test the impact of ABE schemes on a real hardware automotive embedded platform.…”

Section: Related Workmentioning

confidence: 99%

“…Despite that many high-quality works have been published during the years [ 10 , 11 , 12 ] presenting the feasibility of ABE on a wide range of devices, to the authors’ knowledge the literature has not tested the impact of the ABE on a real hardware automotive embedded platform. In this paper, our task is to demonstrate that ABE schemes, in general, are well supported by a platform that is very close to a real ECU mounted on a vehicle.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Performance Evaluation of Attribute-Based Encryption in Automotive Embedded Platform for Secure Software Over-The-Air Update

Manna

Treccozzi

Perazzo

et al. 2021

Sensors

Self Cite

View full text Add to dashboard Cite

This paper aims to show that it is possible to improve security for over the air update functionalities in an automotive scenario through the use of a cryptographic scheme, called “Attribute-Based-Encryption” (ABE), which grants confidentiality to the software/firmware update done Over The Air (OTA). We demonstrate that ABE is seamlessly integrable into the state of the art solutions regarding the OTA update by showing that the overhead of the ABE integration in terms of computation time and its storage is negligible w.r.t. the other overheads that are introduced by the OTA process, also proving that security can be enhanced with a minimum cost. In order to support our claim, we report the experimental results of an implementation of the proposed ABE OTA technique on a Xilinx ZCU102 evaluation board, which is an automotive-oriented HW/SW platform that is equipped with a Zynq UltraScale+ MPSoC chip that is representative of the computing capability of real automotive Electronic Control Units (ECUs).

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Performance Evaluation of Attribute-Based Encryption in Automotive Embedded Platform for Secure Software Over-The-Air Update

Manna

Treccozzi

Perazzo

et al. 2021

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…Overall, previous work in [1]- [3], [11], and [19]- [24] have widely discussed different variations of ABE schemes; however, they have not addressed both mesh network communications and ABE schemes for lightweight implementation on resource-constrained IoT devices. Similarly, other works that deployed ABE schemes for lightweight security in IoT environments are Touati et al [7], Oualha and Nguyen [26], Girgenti et al [8], and Ali et al [27]. However, none of these schemes or the aforementioned works have addressed the topology and architecture of adhoc mesh communication, in which ABE schemes are applied for IoT environments.…”

Section: Related Workmentioning

confidence: 99%

“…The literature has defined resource-constrained devices as of devices limited capabilities in terms of computational power and memory, or unable to perform costly operations, such as encryption operations [7], [8]. Similarly, Kirilline et al [9] have defined resource-constrained devices as devices of restricted memory, processing power, and/or graphical capabilities.…”

Section: Introductionmentioning

confidence: 99%

Lightweight KPABE Architecture Enabled in Mesh Networked Resource-Constrained IoT Devices

et al. 2021

View full text Add to dashboard Cite

Internet of Things (IoT) environments are widely employed in industrial applications including intelligent transportation systems, healthcare systems, and building energy management systems. For such environments of highly sensitive data, adapting scalable and flexible communication with efficient security is vital. Research investigated wireless Ad-hoc/mesh networking, while Attribute Based Encryption (ABE) schemes have been highly recommended for IoT. However, a combined implementation of both mesh networking and Key-Policy Attribute Based Encryption (KPABE) on resource-constrained devices has been rarely addressed. Hence, in this work, an integrated system that deploys a lightweight KPABE security built on wireless mesh networking is proposed. Implementation results show that the proposed system ensures flexibility and scalability of self-forming and cooperative mesh networking in addition to a fine-grained security access structure for IoT nodes. Moreover, the work introduces a case study of an enabled scenario at a school building for optimizing energy efficiency, in which the proposed integrated system architecture is deployed on IoT sensing and actuating devices. Therefore, the encryption attributes and access policy are well-defined, and can be adopted in relevant IoT applications.INDEX TERMS attribute based encryption, constrained-resources, cybersecurity, elliptic curves cryptography, internet of things, mesh networking This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.

show abstract

“…The Encrypt primitive can be executed by any component of the IoT network, because it does not require the knowledge of any secret. It is worth to note that this primitive is computationally demanding, so making its execution challenging for a resource-constrained IoT device [14,15]. This is a reason for adopting an architecture like the NOS one, as detailed in Sect.…”

Section: Cipher-text-policy Attribute-based Encryptionmentioning

confidence: 99%

Attribute-based encryption and sticky policies for data access control in a smart home scenario: a comparison on networked smart object middleware

Sicari

Dini

Perazzo

et al. 2020

Int. J. Inf. Secur.

Self Cite

View full text Add to dashboard Cite

Regulating the access to the Internet of Things (IoT) network’s resources is a complex-prone task, which requires to pay a great attention on how policies are defined, shared, and enforced. The present paper considers the specific context of a smart home, which represents one of the main IoT application domains, and it focuses on two solutions proposed in the literature to cope with the aforementioned issues. On the one side, approaches based on attribute-based encryption (ABE) allow one to encrypt data for multiple recipients, in such a way that only those recipients whose attributes satisfy a given access policy can decrypt afterward. ABE guarantees a high level of customization due to the variety of attributes which can be defined, and it is also flexible enough to be adapted to different kinds of scenarios. On the other side, approaches based on sticky policies allow to attach an access policy directly to the data itself, and to employ a trusted authority to evaluate and enforce the policy itself. Sticky policies also guarantee a highly distributed and customizable enforcement of access control rules. In this paper, we compare the advantages and the drawbacks in terms of performance and robustness of such two techniques by means of their integration within the prototype of an IoT middleware, named networked smart object. Hence, the effectiveness of the presented solutions is validated by means of a real test-bed in the smart home scenario, in terms of storage occupancy, CPU load, and data retrieval delay. The final goal is to reveal the best approach to be used depending on the application’s requirements.

show abstract

On the Feasibility of Attribute-Based Encryption on Constrained IoT Devices for Smart Systems

Cited by 24 publications

References 20 publications

Performance Evaluation of Attribute-Based Encryption in Automotive Embedded Platform for Secure Software Over-The-Air Update

Performance Evaluation of Attribute-Based Encryption in Automotive Embedded Platform for Secure Software Over-The-Air Update

Lightweight KPABE Architecture Enabled in Mesh Networked Resource-Constrained IoT Devices

Attribute-based encryption and sticky policies for data access control in a smart home scenario: a comparison on networked smart object middleware

Contact Info

Product

Resources

About