Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Fine-Grained Data Sharing with Enhanced Privacy Protection and Dynamic Users Group Service for the IoV

A Novel Anonymous Authentication Scheme Based on Edge Computing in Internet of Vehicles

Enabling Efficient Data Sharing With Auditable User Revocation for IoV Systems

QBPP: Quality of Services–based Location Privacy Protection Method for Location-Based Services in Cloud-Enabled Internet of Vehicles

Adaptive Multimedia Data Forwarding for Privacy Preservation in Vehicular Ad-Hoc Networks.

A lightweight CP‐ABE scheme in the IEEEP1363 standard with key tracing and verification and its application on the Internet of Vehicles

An Identity-Based and Revocable Data-Sharing Scheme in VANETs

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Efficient Data Access Control With Fine-Grained Data Protection in Cloud-Assisted IIoT

Edge-Aided Searchable Data Sharing Scheme for IoV in the 5G Environment

A Secure and Lightweight Privacy-Preserving Data Aggregation Scheme for Internet of Vehicles.

A Joint Framework to Privacy-Preserving Edge Intelligence in Vehicular Networks

An Intelligent Privacy Protection Scheme for Efficient Edge Computation Offloading in IoV

An Anonymous and Efficient Authentication Scheme with Conditional Privacy Preservation in Internet of Vehicles Networks

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

SDSS: Secure Data Sharing Scheme for Edge Enabled IoV Networks

Publicly Accountable Data-sharing Scheme Supporting Privacy Protection for Fog-enabled VANETs

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

Characterizing Differentially-Private Techniques in the Era of Internet-of-Vehicles

A Conditional Privacy-Preserving Identity-Authentication Scheme for Federated Learning in the Internet of Vehicles

SDAC-BBPP: A Secure Dynamic Access Control Scheme With Blockchain-Based Privacy Protection Privacy for IIoT