Abstract:Privacy-preserving data aggregation is becoming a demanding necessity for many promising scenarios, e.g., health care analysis. Sensitive data are collected and aggregated in a privacy-preserving approach using current Internet of Things (IoT) technology, leading to immense challenge and consequent interest in developing secure computing algorithms for individual and organizational data. However, most existing solutions focus on specific evaluations (e.g., SUM), and they use heavy cryptographic techniques, which are far from practice for constrained IoT devices. The Trusted Execution Environment (TEE, implemented with Intel SGX) can assist in computing arbitrary functions and avoiding resource-consuming operations. Nevertheless, TEE is subject to several challenges because TEE is vulnerable to limited resource and even function violations, e.g., the attacker may bypass the boundary of TEE. In this paper, we propose a lightweight non-interactive privacy-preserving data aggregation scheme for resource-constrained devices, named PANDA, where TEE is introduced to bypass the trusted entities requirement and heavy overhead. Additionally, PANDA explores the certificate-aided function authorization to prevent leakage from unauthorized functions, and designs the public verifiable certificate management to detect the abnormal behaviors of the host to mitigate the external host compromise. We formalize PANDA with rigorous security analysis to indicate privacy protection against the compromised aggregator and analyst. The evaluation results show that PANDA has constant online communication cost and lightweight computation overhead for constrained devices, which is suitable for IoT applications.

Private Data Aggregation with Integrity Assurance and Fault Tolerance for Mobile Crowd-Sensing

Group Effect-Based Privacy-Preserving Data Aggregation for Mobile Crowdsensing

Efficient Privacy-Preserving Aggregation for Mobile Crowdsensing

Privacy-Preserving Data Aggregation for Mobile Crowdsensing with Externality: an Auction Approach

Crowd-Empowered Privacy-Preserving Data Aggregation for Mobile Crowdsensing.

Privacy-Preserving and Customization-Supported Data Aggregation in Mobile Crowdsensing.

A Verifiable and Privacy‐preserving Multidimensional Data Aggregation Scheme in Mobile Crowdsensing

Privacy-Preserving Data Aggregation in Mobile Phone Sensing.

Verifiable, Reliable, and Privacy-Preserving Data Aggregation in Fog-Assisted Mobile Crowdsensing

A Privacy-Preserving Data Aggregation of Mobile Crowdsensing Based on Local Differential Privacy

Privacy-Enhanced And Multifunctional Health Data Aggregation Under Differential Privacy Guarantees

Privacy Preserving Fog-Enabled Dynamic Data Aggregation in Mobile Phone Sensing.

A Novel Fault-Tolerant Privacy-Preserving Cloud-Based Data Aggregation Scheme for Lightweight Health Data.

A Collusion-Resistant and Privacy-Preserving Data Aggregation Protocol in Crowdsensing System

PANDA: Lightweight Non-Interactive Privacy-Preserving Data Aggregation for Constrained Devices

PDA: A Novel Privacy-Preserving Robust Data Aggregation Scheme in People-Centric Sensing System.

Privacy-Friendly Decentralized Data Aggregation for Mobile Crowdsensing

PEMM: A Privacy-Aware Data Aggregation Solution for Mobile Sensing Networks

Fog-Enabled Privacy-Preserving Multi-Task Data Aggregation for Mobile Crowdsensing

Ensuring Semantic Validity in Privacy-Preserving Aggregate Statistics

Privacy-Preserving and Fault-Tolerant Aggregation of Time-Series Data with a Semi-Trusted Authority