journal article·2023-10-13Open access

Multiauthority Ciphertext Policy-Attribute-Based Encryption (MA-CP-ABE) with Revocation and Computation Outsourcing for Resource-Constraint Devices

Xiaodan Yan, Shanshan Tu, Hisham Alasmary, Fengming Huang

Applied Sciences· Volume 13· Issue 20

Abstract

Fog computing accredits by utilizing the network edge while still rendering the possibility to interact with the cloud. Nevertheless, the features of fog computing are encountering several security challenges. The security of end users and/or fog servers brings a significant dilemma in implementing fog computing. The computational power of the resources constrains Internet of Things (IoT) devices in the fog-computing environment. Therefore, an attacker can easily attack. The traditional methods like attribute-based encryption (ABE) techniques are inappropriate for resource-constraint devices with protracted computing and limited computational capabilities. In this regard, we investigate a multiauthority ciphertext policy-attribute-based encryption (MA-CP-ABE) method that enables multiauthority attribute revocation and computation outsourcing. Moreover, the encryption and decryption processes of resource-constraint IoT devices are outsourced to the fog nodes. In this way, it also reduces the computational burden of the resource-constraint IoT devices. Hence, we propose MA-CP-ABE for encryption and decryption, attribute revocation and outsourcing by reducing the computational burden and securing the system. We compare the computational offloading approach with the existing techniques to prove that the proposed approach outperforms the existing approaches. The proposed method reduces the operation time for the encryption and decryption process. We outsource cryptography operations to the fog node, reducing the end user’s computational cost. Eventually, simulated outcomes are used to assess the algorithm’s computational cost.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Privacy-Preserving Technologies in Data · Cryptography and Data Security · Advanced Data and IoT Technologies

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Cyber Science and Technology, Beihang University, Beijing 100191, China

Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China

Department of Computer Science, College of Computer Science, King Khalid University, Abha 61421, Saudi Arabia

Funding

National Natural Science Foundation of China · China Postdoctoral Science Foundation · King Khalid University

References (49)

Show source-provided references
1. Virtual fog: A virtualization enabled fog computing framework for Internet of Things10.1109/JIOT.2017.2774286 ↗
2. Survey of fog computing: Fundamental, network applications, and research challenges10.1109/COMST.2018.2814571 ↗
3. A survey on socially aware device-to-device communications10.1109/COMST.2018.2820069 ↗
4. SDN-based intrusion detection system for IoT using deep learning classifier (IDSIoT-SDL)10.1049/cit2.12003 ↗
5. Security in fog computing: A novel technique to tackle an impersonation attack10.1109/ACCESS.2018.2884672 ↗
6. Research on internet security situation awareness prediction technology based on improved RBF neural network algorithm
7. Multiauthority CP-ABE-based Access Control Model for IoT-enabled Healthcare Infrastructure10.1109/TII.2022.3167842 ↗
8. A Modified Hierarchical Attribute-Based Encryption Access Control Method for Mobile Cloud Computing10.1109/TCC.2015.2513388 ↗
9. Moffat, S., Hammoudeh, M., and Hegarty, R. (2017, January 19–20). A Survey on Ciphertext-Policy Attribute-Based Encryption (CP-ABE) Approaches to Data Security on Mobile Devices and its Application to IoT. Proceedings of the International Conference on Future Networks and Distributed Systems (ICFNDS’17), Cambridge, UK.10.1145/3102304.3102338 ↗
10. Social-aware secret key generation for secure device-to-device communication via trusted and non-trusted relays10.1109/TWC.2018.2817607 ↗
11. Security and privacy in device-to-device (D2D) communication: A review10.1109/COMST.2017.2649687 ↗
12. Physical Model Informed Fault Detection and Diagnosis of Air Handling Units Based on Transformer Generative Adversarial Network10.1109/TII.2022.3193733 ↗
13. Practical attribute-based encryption: Outsourcing decryption, attribute revocation and policy updating10.1016/j.jnca.2018.01.016 ↗
14. User Collusion Avoidance CP-ABE with Efficient Attribute Revocation for Cloud Storage10.1109/JSYST.2017.2667679 ↗
15. Privacy protection scheme based on CP-ABE in crowdsourcing-IoT for smart ocean10.1109/JIOT.2020.2989476 ↗
16. Al-Dahhan, R.R., Shi, Q., Lee, G.M., and Kifayat, K. (2019). Survey on Revocation in Ciphertext-Policy Attribute-Based Encryption. Sensors, 19.10.3390/s19071695 ↗
17. Attribute-based broadcast encryption scheme for lightweight devices10.1049/iet-ifs.2017.0157 ↗
18. Goyal, V., Pandey, O., Sahai, A., and Waters, B. (November, January 30). Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the 13th ACM Conference on Computer and Communications Security, Alexandria, VA, USA.
19. Yu, S., Ren, K., Lou, W., and Li, J. (2009, January 21–23). Defending against key abuse attacks in KP-ABE enabled broadcast systems. Proceedings of the International Conference on Security and Privacy in Communication Systems, Washington, DC, USA.10.1007/978-3-642-05284-2_18 ↗
20. Enhancing attribute-based encryption with attribute hierarchy10.1007/s11036-010-0233-y ↗
21. An attribute-based encryption scheme to secure fog communications10.1109/ACCESS.2017.2705076 ↗
22. An expressive fully policy-hidden ciphertext policy attribute-based encryption scheme with credible verification based on blockchain10.1109/JIOT.2021.3117378 ↗
23. Extended file hierarchy access control scheme with attribute-based encryption in cloud computing10.1109/TETC.2019.2904637 ↗
24. Unbounded and efficient revocable attribute-based encryption with adaptive security for cloud-assisted internet of things10.1109/JIOT.2021.3094323 ↗
25. Efficient revocable storage attribute-based encryption with arithmetic span programs in cloud-assisted internet of things10.1109/TCC.2021.3131686 ↗
26. Rouselakis, Y., and Waters, B. (2015, January 26–30). Efficient statically-secure large-universe multi-authority attribute-based encryption. Proceedings of the International Conference on Financial Cryptography and Data Security, San Juan, Puerto Rico.10.1007/978-3-662-47854-7_19 ↗
27. Li, Q., and Zhu, H. (2017, January 11–13). Multi-authority attribute-based access control scheme in mhealth cloud with unbounded attribute universe and decryption outsourcing. Proceedings of the 2017 9th International Conference on Wireless Communications and Signal Processing (WCSP), Nanjing, China.10.1109/WCSP.2017.8171106 ↗
28. Outsourcing Decryption of Multi-Authority ABE Ciphertexts
29. Multi-authority attribute-based keyword search over encrypted cloud data
30. A robust generic multi-authority attributes management system for cloud storage services10.1109/TCC.2018.2867871 ↗
31. Enabling authorized encrypted search for multi-authority medical databases10.1109/TETC.2019.2905572 ↗
32. Access control system based cloudlet and ABE on mobile cloud
33. Yu, S., Wang, C., Ren, K., and Lou, W. (2010, January 13–16). Attribute based data sharing with attribute revocation. Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, Beijing, China.10.1145/1755688.1755720 ↗
34. Attribute-based access control with efficient revocation in data outsourcing systems10.1109/TPDS.2010.203 ↗
35. Efficient revocable and grantable attribute-based encryption from lattices with fine-grained access control10.1049/iet-ifs.2017.0225 ↗
36. Revocable attribute-based encryption with data integrity in clouds10.1109/TDSC.2021.3065999 ↗
37. Zhou, Z., and Huang, D. (2012, January 22–26). Efficient and secure data storage operations for mobile cloud computing. Proceedings of the 2012 8th International Conference on Network and Service Management, Las Vegas, NV, USA.
38. Generic and efficient constructions of attribute-based encryption with verifiable outsourced decryption10.1109/TDSC.2015.2423669 ↗
39. CCA-secure ABE with outsourced decryption for fog computing10.1016/j.future.2016.10.028 ↗
40. An efficient access control scheme with outsourcing capability and attribute update for fog computing10.1016/j.future.2016.12.015 ↗
41. Secure Data Access Control With Ciphertext Update and Computation Outsourcing in Fog Computing for Internet of Things10.1109/ACCESS.2017.2727054 ↗
42. O 3-R-CP-ABE: An efficient and revocable attribute-based encryption scheme in the cloud-assisted IoMT system10.1109/JIOT.2021.3055541 ↗
43. Forward secure public key encryption with keyword search for outsourced cloud storage10.1109/TCC.2019.2944367 ↗
44. A revocable and outsourced multi-authority attribute-based encryption scheme in fog computing10.1016/j.comnet.2021.108196 ↗
45. Tu, S., Huang, F., Zhang, S., Badshah, A., Alasmary, H., and Waqas, M. (2022, January 13–15). Ciphertext-Policy Attribute-based Encryption for Securing IoT Devices in Fog Computing. Proceedings of the 2022 International Conference on Computer, Information and Telecommunication Systems (CITS), Athens, Greece.10.1109/CITS55221.2022.9832996 ↗
46. A Simple Methodology that Efficiently Generates All Optimal Spanning Trees for the Cable-Trench Problem
47. Lynn, B. (2023, August 02). The Pairing-Based Cryptography Library Benchmarks. Available online: http://crypto.stanford.edu/pbc/times.html.
48. Attribute-based encryption with parallel outsourced decryption for edge intelligent IoV10.1109/TVT.2020.3027568 ↗
49. Efficient and secure attribute-based access control with identical sub-policies frequently used in cloud storage10.1109/TDSC.2020.2987903 ↗