SEM-ACSIT : Secure and Efficient Multiauthority Access Control for IoT Cloud Storage

Xiong, S. and Ni, Q. and Wang, L. and Wang, Q. (2020) SEM-ACSIT : Secure and Efficient Multiauthority Access Control for IoT Cloud Storage. IEEE Internet of Things Journal, 7 (4). pp. 2914-2927. ISSN 2327-4662

[thumbnail of FINAL_VERSION]
Text (FINAL_VERSION)
FINAL_VERSION.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.

Download (599kB)

Abstract

Data access control in a cloud storage system is regarded as a promising technique for enhanced efficiency and security utilizing a ciphertext-policy attribute-based encryption (CP-ABE) approach. However, due to a large number of data users as well as limited resources and heterogeneity of data devices in Internet of Things (IoT), existing access control schemes for the cloud storage are not effectively applicable to IoT applications. In this article, we construct a new CP-ABE-based storage model for data storing and secure access in a cloud for IoT applications. Our new framework introduces an attribute authority management (AAM) module in the cloud storage system functioned as an agent that provides a user-friendly access control and highly reduces the storage overhead of public keys. Then, we propose a novel secure and efficient multiauthority access control scheme of the cloud storage system for IoT, namely, SEM-ACSIT, which obtains both backward security and forward security when an attribute of a user is revoked. By exploiting encryption outsourcing, simplified key structuring and the AAM module, the computational overhead of a user is immensely decreased. Moreover, a user access control list (UACL) in the cloud server is constructed newly to support authorization access for a specific user. The analysis and simulation results demonstrate that our SEM-ACSIT scheme achieves powerful security with less computational overhead and lower storage costs than the existing schemes.

Item Type:
Journal Article
Journal or Publication Title:
IEEE Internet of Things Journal
Additional Information:
©2020 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Uncontrolled Keywords:
/dk/atira/pure/subjectarea/asjc/1700/1711
Subjects:
?? signal processinginformation systemsinformation systems and managementcomputer science applicationshardware and architecturecomputer networks and communications ??
ID Code:
143961
Deposited By:
Deposited On:
18 May 2020 14:20
Refereed?:
Yes
Published?:
Published
Last Modified:
17 Oct 2024 23:51