Abstract:The Intelligent Transportation System (ITS) provides more possibilities for the realization of smart cities by integrating the Internet of Things (IoT) and cloud computing. However, how to ensure security of IoT data stored in the cloud has become one of the biggest challenges at present. As a promising solution for realizing fine-grained access control, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can be used to ensure data security. However, the traditional CP-ABE schemes may leak privacy of ITS users. Moreover, due to their high computational overheads, the current privacy-preserving techniques are not suitable for IoT lightweight devices. To fill this gap, this article presents ABE-FPP, a lightweight attribute-based access control scheme with full privacy protection (FPP), which can achieve full privacy protection in the three key stages (i.e., key generation, access control, and partial decryption), while reducing consumption overhead on the user side. Specifically, to protect privacy during key generation, a lightweight two-party secure computing protocol between the user and the authority is designed to generate secret keys; to protect privacy during the access control policy setting, we present an efficient policy hidden strategy, which only reveals attribute names and efficiently hides attribute values; to protect privacy during partial decryption, we propose a hybrid authentication method that does not need to submit attribute values to the cloud. Moreover, to achieve lightweight computation for IoT devices, online/offline encryption and outsourced decryption are employed in ABE-FPP. Finally, formal security proofs show that our scheme is secure in the standard model. The asymptotic complexity analyses and experimental results demonstrate that the presented scheme achieves higher computation efficiency than the state-of-the-art ones.

Obfuscating Ciphertext-Policy Attribute-Based Re-Encryption for Sensor Networks with Cloud Storage

Revocable and Fog-Enabled Proxy Re-Encryption Scheme for IoT Environments

Fully Secure Hidden Ciphertext-Policy Attribute-Based Proxy Re-Encryption

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

Attribute Based Encryption with Privacy Protection and Accountability for CloudIoT

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

Towards Efficient Sharing of Encrypted Data in Cloud-Based Mobile Social Network

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

An efficient fine-grained data access control system with a bounded service number

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things

An Effective and Secure Access Control System Scheme in the Cloud

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding

Efficient and accountable anti-leakage attribute-based encryption scheme for cloud storage

A No-Pairing Proxy Re-Encryption Scheme for Data Sharing in Untrusted Cloud.

A Lightening Fine-grained Access Control Scheme Supporting Full Policy Hiding in Cloud Storage

A secure and efficient outsourced computation on data sharing scheme for privacy computing

Pairing-Free Certificate-Based Proxy Re-Encryption Plus Scheme for Secure Cloud Data Sharing