A secure and efficient access control scheme with attribute revocation and merging capabilities for fog-enabled IoT. (December 2022)

• Record Type: Journal Article
• Authors: Sarma, Richa; Barbhuiya, Ferdous Ahmed
• Is Part Of: Computers & electrical engineering. Volume 104:Part B(2022)
• Publication Date: 2022-12
• Subjects: Fog -- IoT -- Cloud -- Attribute merging -- Attribute revocation -- Access control; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2022.108449
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: The current era's technological innovation has accelerated the expansion of the Internet of things (IoT), leading to an exponential growth of the number of connected devices and the produced data. This inspired the emergence of fog computing paradigm that enables data processing and analysis near end-users. The cloud co-exists with fog to offer services like processing resources, huge storage, etc. But sending the data through multiple levels for analysis and storage poses a severe threat to data security in cloud-fog-IoT framework. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a well-known cryptographic mechanism for providing fine-grained access control. However, the existing CP-ABE schemes are not suitable as they fail to address the issues of attribute merging, attribute revocation, outsourcing operations, and facilitating privileged access altogether. Hence, this paper proposes a CP-ABE scheme addressing all the aforementioned issues. Further, security and performance analyses show that the proposed scheme is secure and suitable for IoT devices. Graphical abstract: Highlights: Addresses issues: attribute merging, revocation, outsourcing, and facilitates privileged access. The resource-constrained data user needs to store only a constant size secret key. The security proof shows that it is secure against CPA Attack under DBDH assumption.