Abstract

IoT technology has been widely valued and applied, and the resulting massive IoT data brings many challenges to the traditional centralized data management, such as performance, privacy, and security challenges. This paper proposes an IoT data access control scheme that combines attribute-based encryption (ABE) and blockchain technology. Symmetric encryption and ABE algorithms are utilized to realize fine-grained access control and ensure the security and openness of IoT data. Moreover, blockchain technology is combined with distributed storage to solve the storage bottleneck of blockchain systems. Only the hash values of the data, the hash values of the ciphertext location, the access control policy, and other important information are stored on the blockchain. In this scheme, smart contract is used to implement access control. The results of experiments demonstrate that the proposed scheme can effectively protect the security and privacy of IoT data and realize the secure sharing of data.

Highlights

  • At present, the Internet of ings (IoT) technology has been more and more widely used [1], such as in smart medicine and smart cars

  • In the scheme proposed in this paper, the encrypted data are stored in an interplanetary file system (IPFS) distributed network, and the CP-attribute-based encryption (ABE) algorithm is used to achieve fine-grained data access control. e blockchain only stores the hash values of data, the content hash values generated by IPFS, the access control policy, timestamps, and other metadata information, which greatly reduces the storage overhead

  • Access Control Structure. e efficiency of the access control scheme is limited by the access control structure and file storage mode. e access control structure in this study consists of the process of attribute-based encryption and file encryption. erefore, comparative experiments were carried out under different numbers of attributes

Read more

Summary

Introduction

The Internet of ings (IoT) technology has been more and more widely used [1], such as in smart medicine and smart cars. Ge et al and Li et al [8] used blockchain technology to store important data generated by IoT devices, solve the privacy and security problems of centralized storage architectures, and realize the secure sharing of data These strategies are weak in terms of data access control and do not optimize the blockchain storage; they encounter the blockchain storage bottleneck. Cheng et al [23] proposed a data management scheme for IoT based on blockchain technology and edge computing, which uses the Advanced Encryption Standard (AES) encryption algorithm to protect data security and personal privacy, stores the hash values and some important files on the chain, and stores the encrypted data on the edge server by using a distributed algorithm (Kademlia) to solve the storage bottleneck problem of the blockchain system. In the scheme proposed in this paper, the encrypted data are stored in an IPFS distributed network, and the CP-ABE algorithm is used to achieve fine-grained data access control. e blockchain only stores the hash values of data, the content hash values generated by IPFS, the access control policy, timestamps, and other metadata information, which greatly reduces the storage overhead

Data Access Control Scheme
Data Storage and Access
Request PK
Call KeyGen of CPABE algorithm to generate SK
Security Model
Experiment and Analysis
Experimental Results
Conclusion
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call