Secure ABE Scheme for Access Management in Blockchain-Based IoT

Zhang, Jiansheng; Yang, Xin; Yu-long, Gao; Lei, Xiaohui; Yang, Yixian

doi:10.1109/access.2021.3071031

Cited by 14 publications

(5 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As a result, only medical users encrypt the message to the server and decrypt the message using access control technology. Jiansheng et al [158] propose two privacy-preserving technologies: attribute-based encryption (ABE) and blockchain-based access control data privacy schemes for IoT systems. The proposed scheme is more secure and efficient and solves authentication challenges.…”

Section: Countermeasures For Software and Data Link Layer Attacksmentioning

confidence: 99%

A Survey on the Role of Industrial IoT in Manufacturing for Implementation of Smart Industry

Farooq,

Abdullah,

Riaz

et al. 2023

Sensors

View full text Add to dashboard Cite

The Internet of Things (IoT) is an innovative technology that presents effective and attractive solutions to revolutionize various domains. Numerous solutions based on the IoT have been designed to automate industries, manufacturing units, and production houses to mitigate human involvement in hazardous operations. Owing to the large number of publications in the IoT paradigm, in particular those focusing on industrial IoT (IIoT), a comprehensive survey is significantly important to provide insights into recent developments. This survey presents the workings of the IoT-based smart industry and its major components and proposes the state-of-the-art network infrastructure, including structured layers of IIoT architecture, IIoT network topologies, protocols, and devices. Furthermore, the relationship between IoT-based industries and key technologies is analyzed, including big data storage, cloud computing, and data analytics. A detailed discussion of IIoT-based application domains, smartphone application solutions, and sensor- and device-based IIoT applications developed for the management of the smart industry is also presented. Consequently, IIoT-based security attacks and their relevant countermeasures are highlighted. By analyzing the essential components, their security risks, and available solutions, future research directions regarding the implementation of IIoT are outlined. Finally, a comprehensive discussion of open research challenges and issues related to the smart industry is also presented.

show abstract

Section: Countermeasures For Software and Data Link Layer Attacksmentioning

confidence: 99%

A Survey on the Role of Industrial IoT in Manufacturing for Implementation of Smart Industry

Farooq,

Abdullah,

Riaz

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…In [27], the authors proposed the Key-Policy Attribute-Based Encryption (KP-ABE) scheme using the Decisional Learning with Error (DLWE) problem and combined the KP-ABE with blockchain for secure access management. In KP-ABE, the researchers used Probabilistic Polynomial (PPT) algorithms including setup, keygen, encryption, and decryption.…”

Section: A Access Control Schemesmentioning

confidence: 99%

Dynamic Secure Access Control and Data Sharing Through Trusted Delegation and Revocation in a Blockchain-Enabled Cloud-IoT Environment

Alshehri

Bamasag

Alghazzawi

et al. 2023

IEEE Internet Things J.

View full text Add to dashboard Cite

The Internet of Things (IoT) is vulnerable to leakage of private information during data sharing. To avoid this problem, access control and secure data sharing have been introduced in IoT; however, many challenges are faced because of centralized access control and single delegator selection. Additionally, blockchain is integrated into IoT to enhance the security of the environment. For that purpose, this research proposes Dynamic Secure Access Control using Blockchain (DSA-Block) model, which performs secure access control and data sharing. Initially, the IoT device attributes and user attributes are registered at a local domain authority (LDA) for generating private and public keys using the Hyperelliptic Curve Cryptography (HECC) algorithm, which ensures the legitimacy of the users and devices. Then, the IoT devices send a request message to the edge nodes via a gateway, which performs request filtration by validating the user's authenticity. The filtered requests are sent to the edge server to perform access delegation using Rock Hyraxes Swarm Optimization (RHSO), which selects a set of delegator nodes. The access control decision is made by using the Trusted Practical Byzantine Fault Tolerance (PBFT) consensus algorithm. The IoT data are stored in the cloud server for secure storage, in which the data are secured using a differential privacy mechanism. Finally, dual revocations, such as user attribute revocation and user revocation, are used to maintain security. The performance of DSA-Block is evaluated and the results demonstrate that the proposed DSA-Block model achieves superior performance compared to previous works.

show abstract

“…Blockchain equipped with smart contracts or chaincode, which can perform specific computing task, provides a feasible solution. Among the previous mentioned blockchain-based data sharing schemes, proposals in [20][21][22][23][24][25][26] ignored the huge data storage on chain. Wang et al [29] proposed an improved scheme by IPFS, but the user has to take huge computational costs, while Wang et al [12] put forward an ABE-OD scheme assisted by blockchain to reduce users' costs, but it ignored the security in practice.…”

Section: Motivationmentioning

confidence: 99%

“…e development of blockchain technology contributes to addressing issues in data sharing caused by traditional cloud storage system due to its transparency and tamper resistance. For better combination with practical applications, schemes in [20][21][22][23] proposed blockchain-based EHRs sharing models and schemes in [24][25][26] put forward blockchain-based sharing models in scenario of IoT (Internet of ings). Despite the sophisticated design of ABE schemes that can support traceable, searchable, and outsourced decryption, key leakage resistance, etc., none of them concentrates on the storage burden on chain caused by huge ABE ciphertext storage overheads.…”

Section: Blockchain-based Data Sharing Schemementioning

confidence: 99%

“…Blockchain, with its powerful decentralized mechanism, has attracted a growing number of researchers and provides feasible approaches to address the impact of cloud since data stored on chain are tamper resistant and transparent. Efficient blockchain-based CP-ABE schemes for specific data sharing scenarios like electronic health records (EHRs) and Internet of ings (IoT) [20][21][22][23][24][25][26] have received widespread attention. However, in most mentioned cases, the decryption of ciphertexts is still outsourced to cloud while blockchain is only used to record access control data in which storage burden on chain raises another problem.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Practical and Efficient Blockchain-Assisted Attribute-Based Encryption Scheme for Access Control and Data Sharing

Hong

Zhang

Gong

et al. 2022

Security and Communication Networks

View full text Add to dashboard Cite

Attribute-based encryption (ABE) is a powerful encryption scheme with flexible access control over encrypted data that has been widely adopted in cloud computing scenarios to facilitate data sharing. However, despite convenience and efficiency provided by data sharing based on cloud, it is commonly vulnerable to issues like key abuse (namely, illegal key sharing by user or key distribution by authority) and key escrow (namely, illegal decryption by ABE authority). Hence, exploring a more secure ABE scheme that can be key abuse and key escrow resistant is crucial. Furthermore, data modification that happens in cloud storage and outsourced computation is also a challenge for the cloud-based data sharing schemes. To handle the above issues, in this paper, we propose a secure and efficient data sharing scheme based on attribute-based encryption (ABE) and blockchain equipped with InterPlanetary File System (IPFS). In particular, we show that the large-universe ABE with outsourced decryption (LU-ABE-OD) scheme proposed by Ning et al. is vulnerable to key escrow attack, which is not secure enough in the data sharing scenario. Therefore, based on their basic proposal, we construct an improved multi-authority LU-ABE-OD scheme to encrypt personal data, which are stored in the IPFS system while blockchain is applied to store the hash value returned by IPFS and be responsible for the outsourced decryption. As a result, our scheme greatly reduces the decryption overheads of the user while risks of key abuse and key escrow can be settled. Meanwhile, the introduction of IPFS significantly reduces the storage burden on chain without data tampering problem. Through theoretical analysis and experimental simulation, we prove the feasibility, security, and efficiency of our scheme.

show abstract

Secure ABE Scheme for Access Management in Blockchain-Based IoT

Cited by 14 publications

References 32 publications

A Survey on the Role of Industrial IoT in Manufacturing for Implementation of Smart Industry

A Survey on the Role of Industrial IoT in Manufacturing for Implementation of Smart Industry

Dynamic Secure Access Control and Data Sharing Through Trusted Delegation and Revocation in a Blockchain-Enabled Cloud-IoT Environment

A Practical and Efficient Blockchain-Assisted Attribute-Based Encryption Scheme for Access Control and Data Sharing

Contact Info

Product

Resources

About