Provable secure lightweight attribute‐based keyword search for cloud‐based Internet of Things networks

Ali, Mohammad; Sadeghi, Mohammad‐Reza

doi:10.1002/ett.3905

Cited by 4 publications

(3 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The security aspects of the proposed SC-ABSE scheme are established on the basis of the following theorems. The security proofs of theorems 1 and 2 are comparable to the scheme in [ 61 ].…”

Section: Security Analysismentioning

confidence: 97%

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

Hussien

Yasin

Udzir

et al. 2021

Sensors

View full text Add to dashboard Cite

Blockchain technology provides a tremendous opportunity to transform current personal health record (PHR) systems into a decentralised network infrastructure. However, such technology possesses some drawbacks, such as issues in privacy and storage capacity. Given its transparency and decentralised features, medical data are visible to everyone on the network and are inappropriate for certain medical applications. By contrast, storing vast medical data, such as patient medical history, laboratory tests, X-rays, and MRIs, significantly affect the repository storage of blockchain. This study bridges the gap between PHRs and blockchain technology by offloading the vast medical data into the InterPlanetary File System (IPFS) storage and establishing an enforced cryptographic authorisation and access control scheme for outsourced encrypted medical data. The access control scheme is constructed on the basis of the new lightweight cryptographic concept named smart contract-based attribute-based searchable encryption (SC-ABSE). This newly cryptographic primitive is developed by extending ciphertext-policy attribute-based encryption (CP-ABE) and searchable symmetric encryption (SSE) and by leveraging the technology of smart contracts to achieve the following: (1) efficient and secure fine-grained access control of outsourced encrypted data, (2) confidentiality of data by eliminating trusted private key generators, and (3) multikeyword searchable mechanism. Based on decisional bilinear Diffie–Hellman hardness assumptions (DBDH) and discrete logarithm (DL) problems, the rigorous security indistinguishability analysis indicates that SC-ABSE is secure against the chosen-keyword attack (CKA) and keyword secrecy (KS) in the standard model. In addition, user collusion attacks are prevented, and the tamper-proof resistance of data is ensured. Furthermore, security validation is verified by simulating a formal verification scenario using Automated Validation of Internet Security Protocols and Applications (AVISPA), thereby unveiling that SC-ABSE is resistant to man-in-the-middle (MIM) and replay attacks. The experimental analysis utilised real-world datasets to demonstrate the efficiency and utility of SC-ABSE in terms of computation overhead, storage cost and communication overhead. The proposed scheme is also designed and developed to evaluate throughput and latency transactions using a standard benchmark tool known as Caliper. Lastly, simulation results show that SC-ABSE has high throughput and low latency, with an ultimate increase in network life compared with traditional healthcare systems.

show abstract

“…The security aspects of the proposed SC-ABSE scheme are established on the basis of the following theorems. The security proofs of theorems 1 and 2 are comparable to the scheme in [ 61 ].…”

Section: Security Analysismentioning

confidence: 97%

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

Hussien

Yasin

Udzir

et al. 2021

Sensors

View full text Add to dashboard Cite

show abstract

“…As a remedy for this problem, Green et al [17] proposed the frst content-based outsourcing decryption scheme, and the decryption process is safely transferred to the cloud server. From then on, large numbers of outsourcing schemes have been proposed to achieve lightweight, Ali and Sadeghi [18] proposed an attribute-based keyword search scheme in cloud computing and outsourced some encryption and decryption work to cloud servers. In 2021, Meng et al [19] proposed an attribute-based dynamic keyword search encryption in fog computing and outsourced part of the encryption and decryption work to fog nodes.…”

Section: Related Workmentioning

confidence: 99%

Lightweight Fine-Grained Multiowner Search over Encrypted Data in Cloud-Edge Computing

Liu

Huan

Sun

et al. 2023

Security and Communication Networks

View full text Add to dashboard Cite

Edge computing, as an extension of cloud computing, outsources encrypted sensitive data to edge nodes to decrease latency and improve broadband efficiency. Although attribute-based keyword search (ABKS) can ensure the security of outsourced data and promote fine-grained access control of data, deficiencies still exist under the general ABKS scheme in the cloud, as follows: shared files owned by a single data owner, inflexible access control, key escrow problem, and high computational overhead. We propose an attribute-based multidata owner searchable encryption scheme in cloud-edge computing with effective policy update to address these problems. The two-level access control is used to realize the common management and fine-grained sharing of data by the multidata owner. All user keys are jointly generated by the central authority and attribute authority, and a key escrow is no longer required. Moreover, partial encryption and decryption calculations are shifted from resource-constrained data owners and users to edge nodes. Furthermore, our scheme not only supports policy update but also realizes the dynamic updating of the index. The security proof and performance analysis show that the scheme has strong security and practicality in the edge computing environment.

show abstract

“…Nowadays, IoT is used to solve many different challenges in human life, such as automotive, healthcare, retail, logistics smart cities, manufacturing, advanced environment monitoring, media, and entertainment industry by providing many applications and services. Moreover, the number of IoT devices is increasing significantly, so that by 2025 the number of these devices is expected to be more than 4 trillion 1 . As the number of IoT devices increases, a large amount of data is generated by IoT nodes needing process and storage 2 .…”

Section: Introductionmentioning

confidence: 99%

BADEP: Bandwidth and delay efficient application placement in fog‐based IoT systems

Gavaber

Rajabzadeh

2020

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Nowadays, fog computing is considered as a new computing method that provides the resources required to provide various services and applications to Internet of Things (IoT) devices near them. Nonetheless, in recent years, the increasing growth of IoT devices with heavily dependent on resources has made it impossible for fog computing to provide these resources efficiently in many cases, which will lead to delay in the delivery of various services. Thus, the placement of application/service in fog computing‐based environments will turn into a challenging issue. This was the motivation for this paper to present a method for placement of various IoT applications in fog computing‐based environments to reduce the delay in these systems. In the proposed method, it is tried to reduce the resulting delay by reducing the network usage in the fog computing layer. In doing so, the proposed method tried to place the applications so that the interdependent modules in these applications, with a high data interaction rate, are placed on a node as much as possible to reduce the need for data transfer. IFogSim simulator was used to evaluate the proposed method, where the results of the simulation show that the proposed method improved the delay by 9% and the network usage by 21% compared to the existing methods.

show abstract

Provable secure lightweight attribute‐based keyword search for cloud‐based Internet of Things networks

Cited by 4 publications

References 38 publications

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

Blockchain-Based Access Control Scheme for Secure Shared Personal Health Records over Decentralised Storage

Lightweight Fine-Grained Multiowner Search over Encrypted Data in Cloud-Edge Computing

BADEP: Bandwidth and delay efficient application placement in fog‐based IoT systems

Contact Info

Product

Resources

About