Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Policy-adaptive Capability Inheritance Algorithm Consistent with POSIX Standard

A Framework for Implementing Dynamically Modified Least Privilege Security Policy

A Dynamically Modified Privilege Control Policy

Security Policy for Information Erasing and Leaking in Multithreaded Codes

Design of Secure Operating System

A Policy Flexible Architecture for Secure Operating System.

Operating System Security Policy Hardening Via Capability Dependency Graphs

Design and Implementation on a Policy-Flexible System

A Hierarchical Access Control Technology for Cloud Storage

An Improved Genetic Algorithm for Safety and Availability Checking in Cyber-Physical Systems

Kcpa: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels

Hierarchical and Non-Monotonic Key-Policy Attribute-Based Encryption and Its Application

An Efficient Access Control Scheme Based on CP-ABE with Supporting Attribute Change in Cloud Storage Systems.

Access Control of Secure Operating System for Electronic Government Application

A Scalable Permission Management System With Support of Conditional and Customized Attributes

Secure and Efficient Blockchain-Based Access Control Scheme with Attribute Update

Study on Design Technology of the Adptive Safety Policy

Inheritance of conditional temporal role based auess control model

Policy Integrity Security Mechanism for Network System

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage