Abstract:Privacy-preserving data aggregation is becoming a demanding necessity for many promising scenarios, e.g., health care analysis. Sensitive data are collected and aggregated in a privacy-preserving approach using current Internet of Things (IoT) technology, leading to immense challenge and consequent interest in developing secure computing algorithms for individual and organizational data. However, most existing solutions focus on specific evaluations (e.g., SUM), and they use heavy cryptographic techniques, which are far from practice for constrained IoT devices. The Trusted Execution Environment (TEE, implemented with Intel SGX) can assist in computing arbitrary functions and avoiding resource-consuming operations. Nevertheless, TEE is subject to several challenges because TEE is vulnerable to limited resource and even function violations, e.g., the attacker may bypass the boundary of TEE. In this paper, we propose a lightweight non-interactive privacy-preserving data aggregation scheme for resource-constrained devices, named PANDA, where TEE is introduced to bypass the trusted entities requirement and heavy overhead. Additionally, PANDA explores the certificate-aided function authorization to prevent leakage from unauthorized functions, and designs the public verifiable certificate management to detect the abnormal behaviors of the host to mitigate the external host compromise. We formalize PANDA with rigorous security analysis to indicate privacy protection against the compromised aggregator and analyst. The evaluation results show that PANDA has constant online communication cost and lightweight computation overhead for constrained devices, which is suitable for IoT applications.

RiPPAS: A Ring-Based Privacy-Preserving Aggregation Scheme in Wireless Sensor Networks.

PPPA: A practical privacy-preserving aggregation scheme for smart grid communications

PLAM: A Privacy-Preserving Framework for Local-Area Mobile Social Networks.

Privacy-Enhanced And Multifunctional Health Data Aggregation Under Differential Privacy Guarantees

IPSadas: Identity‐privacy‐aware secure and anonymous data aggregation scheme

APED: An efficient aggregation protocol with error detection for smart grid communications.

Content-Aware Data Dissemination for Enhancing Privacy and Availability in Wireless Sensor Networks

Privacy-Preserving Data Aggregation Techniques for Enhanced Efficiency and Security in Wireless Sensor Networks: A Comprehensive Analysis and Evaluation

A secure and efficient privacy-preserving data aggregation algorithm

Preserving Privacy Against External and Internal Threats in WSN Data Aggregation

A Novel Privacy-Preserving Set Aggregation Scheme for Smart Grid Communications

A Secure and Lightweight Privacy-Preserving Data Aggregation Scheme for Internet of Vehicles.

RASE: Efficient Privacy-preserving Data Aggregation against Disclosure Attacks for IoTs

RCDA: Recoverable Concealed Data Aggregation for Data Integrity in Wireless Sensor Networks

Secure and Lightweight Data Aggregation Scheme for Anonymous Multi-Receivers in WBAN

A privacy-preserving multidimensional data aggregation scheme with secure query processing for smart grid

A General Purpose Data and Query Privacy Preserving Protocol for Wireless Sensor Networks

Privacy‐preserving data aggregation achieving completeness of data queries in smart grid

Privacy-Preserving Data Aggregation for Mobile Crowdsensing with Externality: an Auction Approach

PANDA: Lightweight Non-Interactive Privacy-Preserving Data Aggregation for Constrained Devices

Security enhanced privacy-preserving data aggregation scheme for intelligent transportation system