Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

A Time-bound Data Access Control Scheme based on Attribute-based Encryption.

TAFC: Time and Attribute Factors Combined Access Control on Time-Sensitive Data in Public Cloud

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

PTAC: Privacy-Preserving Time and Attribute Factors Combined Cloud Data Access Control with Computation Outsourcing

Attribute-Based Hierarchical Access Control with Extendable Policy

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

Attribute Based Data Sharing with Attribute Revocation.

A Blockchain-based Access Control Scheme with Multiple Attribute Authorities for Secure Cloud Data Sharing.

Attribute Based Encryption with Privacy Protection and Accountability for CloudIoT

Quantum Resistant Ciphertext-Policy Attribute-Based Encryption Scheme with Flexible Access Structure

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Blockchain-enabled Data Governance for Privacy-Preserved Sharing of Confidential Data

Cloud+: A safe and restrained data access control program for cloud

An Access Control Scheme with Fine-Grained Time Constrained Attributes Based on Smart Contract and Trapdoor

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

FATE: flexible attribute-based traceable encrypted data sharing scheme using smart contracts in wireless medical sensor networks

Efficient CP-ABE Scheme With Shared Decryption in Cloud Storage

Enabling efficient traceable and revocable time-based data sharing in smart city

A Privacy-Preserving Attribute-Based Access Control Scheme.

LABAC: A Location-Aware Attribute-Based Access Control Scheme for Cloud Storage.

Secure and Reliable Data sharing scheme using Attribute-based Encryption with weighted attribute-based Encryption in Cloud Environment