Abstract:Privacy-preserving data aggregation is becoming a demanding necessity for many promising scenarios, e.g., health care analysis. Sensitive data are collected and aggregated in a privacy-preserving approach using current Internet of Things (IoT) technology, leading to immense challenge and consequent interest in developing secure computing algorithms for individual and organizational data. However, most existing solutions focus on specific evaluations (e.g., SUM), and they use heavy cryptographic techniques, which are far from practice for constrained IoT devices. The Trusted Execution Environment (TEE, implemented with Intel SGX) can assist in computing arbitrary functions and avoiding resource-consuming operations. Nevertheless, TEE is subject to several challenges because TEE is vulnerable to limited resource and even function violations, e.g., the attacker may bypass the boundary of TEE. In this paper, we propose a lightweight non-interactive privacy-preserving data aggregation scheme for resource-constrained devices, named PANDA, where TEE is introduced to bypass the trusted entities requirement and heavy overhead. Additionally, PANDA explores the certificate-aided function authorization to prevent leakage from unauthorized functions, and designs the public verifiable certificate management to detect the abnormal behaviors of the host to mitigate the external host compromise. We formalize PANDA with rigorous security analysis to indicate privacy protection against the compromised aggregator and analyst. The evaluation results show that PANDA has constant online communication cost and lightweight computation overhead for constrained devices, which is suitable for IoT applications.

A secure and efficient privacy-preserving data aggregation algorithm

Group Effect-Based Privacy-Preserving Data Aggregation for Mobile Crowdsensing

PPPA: A practical privacy-preserving aggregation scheme for smart grid communications

APED: An efficient aggregation protocol with error detection for smart grid communications.

Content-Aware Data Dissemination for Enhancing Privacy and Availability in Wireless Sensor Networks

Privacy-Preserving Data Aggregation Techniques for Enhanced Efficiency and Security in Wireless Sensor Networks: A Comprehensive Analysis and Evaluation

RASE: Efficient Privacy-preserving Data Aggregation against Disclosure Attacks for IoTs

Privacy-Enhanced And Multifunctional Health Data Aggregation Under Differential Privacy Guarantees

Preserving Privacy Against External and Internal Threats in WSN Data Aggregation

RCDA: Recoverable Concealed Data Aggregation for Data Integrity in Wireless Sensor Networks

Security enhanced privacy-preserving data aggregation scheme for intelligent transportation system

PANDA: Lightweight Non-Interactive Privacy-Preserving Data Aggregation for Constrained Devices

Data Aggregation with End-To-End Security for Wireless Sensor Networks

Privacy-preserving Data Aggregation against Malicious Data Mining Attack for IoT-enabled Smart Grid

A Secure and Lightweight Privacy-Preserving Data Aggregation Scheme for Internet of Vehicles.

IPSadas: Identity‐privacy‐aware secure and anonymous data aggregation scheme

Privacy-Preserving Data Aggregation in Mobile Phone Sensing.

Private and Accurate Data Aggregation against Dishonest Nodes.

Lightweight privacy-preserving data aggregation protocol against internal attacks in smart grid

Aggregate in My Way: Privacy-preserving Data Aggregation Without Trusted Authority in ICN

Distributed Privacy-Preserving Data Aggregation Against Dishonest Nodes in Network Systems.