Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

An Efficient and Outsourcing-Supported Attribute-Based Access Control Scheme for Edge-Enabled Smart Healthcare.

Cognitive impairment associated with intraoperative and postoperative hypoperfusion without neurologic deficits in a patient undergoing carotid endarterectomy.

Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

Attribute-Based Searchable Encryption in Edge Computing for Lightweight Devices

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Secure Data Sharing with Flexible User Access Privilege Update in Cloud-Assisted IoMT

Attribute-based searchable encryption with decentralized key management for healthcare data sharing

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

A Trusted Medical Data Sharing Framework for Edge Computing Leveraging Blockchain and Outsourced Computation

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Adaptive Authorization Access Method for Medical Cloud Data Based on Attribute Encryption.

Flexible and secure access control for EHR sharing based on blockchain

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Blockchain-assisted searchable attribute-based encryption for e-health systems

EVOAC-HP: An Efficient and Verifiable Outsourced Access Control Scheme with Hidden Policy

Blockchain-enabled Fine-Grained Searchable Encryption With Cloud-edge Computing for Electronic Health Records Sharing

Secure Access Control for Ehealth Data in Emergency Rescue Case Based on Traceable Attribute-Based Encryption

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

Mh-abe: multi-authority and hierarchical attribute based encryption scheme for secure electronic health record sharing

Comparison of attribute-based encryption schemes in securing healthcare systems

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection