Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Access Control System Based Cloudlet and Abe on Mobile Cloud

Towards Efficient and Secure Access Control System for Mobile Cloud Computing

Attribute-based Encryption for Cloud Computing Access Control

An Effective and Secure Access Control System Scheme in the Cloud

A Modified Hierarchical Attribute-Based Encryption Access Control Method for Mobile Cloud Computing

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Attribute Based Encryption with Privacy Protection and Accountability for CloudIoT

Cloud-aided Online/offline Ciphertext-Policy Attribute-Based Encryption in the Standard Model

EACS: an Efficient Access Control Scheme for Electronic Publishing in Cloud Computing

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Survey on Access Control Technologies for Cloud Computing

Efficient and Secure Access Control Scheme in the Standard Model for Vehicular Cloud Computing

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

How to use attribute-based encryption to implement role-based access control in the cloud.

LABAC: A Location-Aware Attribute-Based Access Control Scheme for Cloud Storage.

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Towards Efficient Sharing of Encrypted Data in Cloud-Based Mobile Social Network

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing