Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Attribute-Based Data Sharing Scheme with Flexible Search Functionality for Cloud-Assisted Autonomous Transportation System

Secure Attribute-Based Data Sharing for Resource-Limited Users in Cloud Computing

Efficient Attribute-Based Data Sharing in Mobile Clouds

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Online/offline Unbounded Multi-Authority Attribute-Based Encryption for Data Sharing in Mobile Cloud Computing.

Attribute-Based Privacy-Preserving Data Sharing for Dynamic Groups in Cloud Computing

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

Secure, Efficient and Revocable Data Sharing Scheme for Vehicular Fogs

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

Traceable Attribute-Based Encryption with Equality Test for Cloud Enabled E-Health System.

Attribute-Based Data Sharing with Flexible and Direct Revocation in Cloud Computing.

Protecting Data in Cloud Environment with Attribute-Based Encryption

An Identity-Based and Revocable Data-Sharing Scheme in VANETs

Batch Attribute-Based Encryption For Secure Clouds

Fine-Grained Attribute-Based Encryption Scheme Supporting Equality Test.

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Attribute-Based Hierarchical Access Control with Extendable Policy

An ECC-based access control scheme with lightweight decryption and conditional authentication for data sharing in vehicular networks

Conditional Ciphertext-Policy Attribute-Based Encryption Scheme in Vehicular Cloud Computing.

A Blockchain-based Anonymous Attribute-based Searchable Encryption Scheme for Data Sharing