Abstract:Privacy-preserving data aggregation is becoming a demanding necessity for many promising scenarios, e.g., health care analysis. Sensitive data are collected and aggregated in a privacy-preserving approach using current Internet of Things (IoT) technology, leading to immense challenge and consequent interest in developing secure computing algorithms for individual and organizational data. However, most existing solutions focus on specific evaluations (e.g., SUM), and they use heavy cryptographic techniques, which are far from practice for constrained IoT devices. The Trusted Execution Environment (TEE, implemented with Intel SGX) can assist in computing arbitrary functions and avoiding resource-consuming operations. Nevertheless, TEE is subject to several challenges because TEE is vulnerable to limited resource and even function violations, e.g., the attacker may bypass the boundary of TEE. In this paper, we propose a lightweight non-interactive privacy-preserving data aggregation scheme for resource-constrained devices, named PANDA, where TEE is introduced to bypass the trusted entities requirement and heavy overhead. Additionally, PANDA explores the certificate-aided function authorization to prevent leakage from unauthorized functions, and designs the public verifiable certificate management to detect the abnormal behaviors of the host to mitigate the external host compromise. We formalize PANDA with rigorous security analysis to indicate privacy protection against the compromised aggregator and analyst. The evaluation results show that PANDA has constant online communication cost and lightweight computation overhead for constrained devices, which is suitable for IoT applications.

Privacy-Preserving and Fault-Tolerant Aggregation of Time-Series Data with a Semi-Trusted Authority

PPPA: A practical privacy-preserving aggregation scheme for smart grid communications

PANDA: Lightweight Non-Interactive Privacy-Preserving Data Aggregation for Constrained Devices

Privacy Preserving Time Series Data Aggregation for Internet of Things

Aggregate in My Way: Privacy-preserving Data Aggregation Without Trusted Authority in ICN

An Accountable Anonymous Data Aggregation Scheme for Internet of Things

Privacy-Enhanced And Multifunctional Health Data Aggregation Under Differential Privacy Guarantees

Non-Interactive and Secure Data Aggregation Scheme for Internet of Things

Practical Fault-Tolerant Data Aggregation

An Efficient and Robust Data Aggregation Scheme Without a Trusted Authority for Smart Grid

RASE: Efficient Privacy-preserving Data Aggregation against Disclosure Attacks for IoTs

EFTA: An Efficient and Fault-Tolerant Data Aggregation Scheme without TTP in Smart Grid

Ensuring Semantic Validity in Privacy-Preserving Aggregate Statistics

Fault-Tolerant Multisubset Aggregation Scheme for Smart Grid

Privacy-Preserving Data Aggregation in Mobile Phone Sensing.

PDA: Semantically Secure Time-Series Data Analytics with Dynamic User Groups

Security enhanced privacy-preserving data aggregation scheme for intelligent transportation system

Reliable And Privacy-Preserving Selective Data Aggregation For Fog-Based Iot

Privacy-preserving Data Aggregation Without Secure Channel: Multivariate Polynomial Evaluation

Secure Data Aggregation of Lightweight E-Healthcare IoT Devices with Fair Incentives.

Protecting Privacy in Federated Time Series Analysis: A Pragmatic Technology Review for Application Developers