Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Privacy-Preservation Enhanced and Efficient Attribute-Based Access Control for Smart Health in Cloud-Assisted Internet of Things

Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Securing Communications Between External Users and Wireless Body Area Networks

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

Cognitive impairment associated with intraoperative and postoperative hypoperfusion without neurologic deficits in a patient undergoing carotid endarterectomy.

A Privacy-Preserving Attribute-Based Access Control Scheme.

Attribute Based Encryption with Privacy Protection and Accountability for CloudIoT

Achieving privacy-preserving sensitive attributes for large universe based on private set intersection

Secure Data Sharing with Flexible User Access Privilege Update in Cloud-Assisted IoMT

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

HUAP: Practical Attribute-based Access Control Supporting Hidden Updatable Access Policies for Resource-Constrained Devices

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Blockchain-assisted searchable attribute-based encryption for e-health systems

Attribute-based Encryption for Cloud Computing Access Control

Flexible and secure access control for EHR sharing based on blockchain

Patient-centric medical service matching with fine-grained access control and dynamic user management

A Lightweight Access Control Scheme Supporting Policy Hidden Based on Path Bloom Filter.

LBAC: A Lightweight Blockchain-Based Access Control Scheme for the Internet of Things.

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things