The ubiquitous and pervasive nature of Internet of Things (IoT) has raised concerns over storage and transmission of sensitive personal data. Therefore, developing technologies to preserve privacy during data distribution in IoT is paramount for security researchers. Until now, the data owners have had little to no control over their private data collected by the IoT devices, which is stored with proprietary cloud service providers and possibly shared among third parties without the consent of the data owners. The sorry state of data owners arises primarily because the privacy policies of the storage and sharing service providers are not fully transparent as well as difficult to understand. Moreover, the service providers are often than not, keen to analyze and share personal information for their own benefit. As a solution to the privacy problem, this paper proposes a novel approach to combine privacy preserving sticky policy approach with the Attribute-Based Encryption (ABE) technique with the goal of enhancing data control for owners and allowing fine-grained sharing of data. The technique described in this paper utilizes Proxy Re-Encryption (PRE) of transmitted data which prevents even the data storage server from being able to decrypt it. We present our Light-SABRE (Lightweight Sticky Attribute-Based proxy Re-Encryption) architecture which effectively combines the above-mentioned approaches to provide a platform for a private data distribution system for IoT devices.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Light-SABRE: A Lightweight Encrypted Data Distribution System for Internet of Things

  • Nakul Ghate,
  • Shohei Mitani,
  • Hirofumi Ueda

摘要

The ubiquitous and pervasive nature of Internet of Things (IoT) has raised concerns over storage and transmission of sensitive personal data. Therefore, developing technologies to preserve privacy during data distribution in IoT is paramount for security researchers. Until now, the data owners have had little to no control over their private data collected by the IoT devices, which is stored with proprietary cloud service providers and possibly shared among third parties without the consent of the data owners. The sorry state of data owners arises primarily because the privacy policies of the storage and sharing service providers are not fully transparent as well as difficult to understand. Moreover, the service providers are often than not, keen to analyze and share personal information for their own benefit. As a solution to the privacy problem, this paper proposes a novel approach to combine privacy preserving sticky policy approach with the Attribute-Based Encryption (ABE) technique with the goal of enhancing data control for owners and allowing fine-grained sharing of data. The technique described in this paper utilizes Proxy Re-Encryption (PRE) of transmitted data which prevents even the data storage server from being able to decrypt it. We present our Light-SABRE (Lightweight Sticky Attribute-Based proxy Re-Encryption) architecture which effectively combines the above-mentioned approaches to provide a platform for a private data distribution system for IoT devices.