A multi-cloud based privacy-preserving data publishing scheme for the internet of things

Abstract

With the increased popularity of ubiquitous computing and connectivity, the Internet of Things (IoT) also introduces new vulnerabilities and attack vectors. While secure data collection (i.e. the upward link) has been well studied in the literature, secure data dissemination (i.e. the downward link) remains an open problem. Attribute-based encryption (ABE) and outsourced-ABE has been used for secure message distribution in IoT, however, existing mechanisms suffer from extensive computation and/or privacy issues. In this paper, we explore the problem of privacy-preserving targeted broadcast in IoT. We propose two multi-cloud-based outsourced-ABE schemes, namely the parallel-cloud ABE and the chain-cloud ABE, which enable the receivers to partially outsource the computationally expensive decryption operations to the clouds, while preventing user attributes from being disclosed. In particular, the proposed solution protects three types of privacy (i.e., data, attribute and access policy privacy) by enforcing collaborations among multiple clouds. Our schemes also provide delegation verifiability that allows the receivers to verify whether the clouds have faithfully performed the outsourced operations. We extensively analyze the security guarantees of the proposed mechanisms and demonstrate the effectiveness and efficiency of our schemes with simulated resource-constrained IoT devices, which outsource operations to Amazon EC2 and Microsoft Azure.

A Lightweight Privacy-Preserving Communication Protocol for Heterogeneous IoT Environment

“…Yang et al [49] proposed two multi-cloud-based outsourced-ABE schemes, namely the parallel-cloud ABE and the chaincloud ABE, which enable the receivers to partially outsource the computationally expensive decryption operations to the clouds, while preventing user attributes from being disclosed. Shi et al [50] introduced an ultra-lightweight white-box encryption scheme, which requires a relatively small amount of static data, for securing resource-constrained IoT devices.…”

RSPP: A reliable, searchable and privacy-preserving e-healthcare system for cloud-assisted body area networks

“…VIII. RELATED WORK Cloud-assisted IoT system has become a popular design paradigm in many applications [17]- [20], since the powerful Moreover, the previous work in [12] offers forward privacy using a complicated hierarchical data structure, whereas the contribution in [11] only achieves limited forward privacy (i.e., leaks the keywords contained in a new file if they have been searched for in the past). Besides dynamic SSE, verifiable SSE have been studied by [13], [21]- [23], which enables users to verify search results by using some verifiable structure such as the Merkle tree or an accumulator.…”

Dynamic searchable encryption with privacy protection for cloud computing

“…The integration of Cloud and IoT has become a popular paradigm in many applications because the computational and storage limitations of IoT can be overcome by cloud computing.…”

“…The integration of Cloud and IoT has become a popular paradigm in many applications [14][15][16] The major drawback with all these schemes 3,5,8,17 leaks search and update patterns. Most of these schemes did not take into consideration datasets with sequentially added files, which might reveal information during the updating process.…”