A lightweight and scalable attribute-based encryption system for smart cities
A lightweight and scalable attribute-based encryption system for smart cities
复制标题
DOI：
10.1016/j.comcom.2019.10.005
复制
发表时间：
2020-01-01
影响因子：
6
通讯作者：
Dini, Gianluca
中科院分区：
文献类型：
--
作者：
Rasori, Marco;Perazzo, Pericle;Dini, Gianluca
在不久的将来，一场技术革命将涉及我们的城市，基于物联网的各种智能服务将被开发出来，以方便市民的需求。传感设备已经部署在城市环境中，它们将产生大量数据。这类数据通常外包给一些云服务，以降低资本和运营成本，并保证高可用性。然而，云服务可能会因为软件和硬件漏洞而遭受数据泄露，或者它们可能有将存储的数据发布给未经授权的实体的动机。在这项工作中，我们提出了ABE-CITIES，一个用于城市感知的加密系统，它通过基于属性的加密(ABE)来解决上述问题，同时确保对数据的细粒度访问控制。ABE-Cities感知来自城市的数据，并以加密形式将其存储在云中。然后，它向用户提供只能解密从城市授权路径或区域感测到的数据的密钥。在阿贝城市，传感器只执行轻量级对称密钥加密，因此我们可以使用受限的传感器设备，如电池供电的微尘。ABE-CITIES允许我们为每个密钥计划到期日期，以及以计划外的方式撤销给定的密钥。通过在由30,000多条街道组成的北京街道网络上模拟30,000个用户，我们证明了ABE-CITIES与用户数量和街道数量的良好伸缩性。除了“香草”的ABE-CITIES方案外，我们还提出了一个“高级”方案，它利用物联网网关的存在来减少原本对单个可信第三方造成的压力的计算负载。我们通过在模拟的休斯顿和北京的街道网络上测试该改进方案来验证这一点。
In the near future, a technological revolution will involve our cities, where a variety of smart services based on the Internet of Things will be developed to facilitate the needs of the citizens. Sensing devices are already being deployed in urban environments, and they will generate huge amounts of data. Such data is typically outsourced to some cloud service in order to lower capital and operating expenses and guarantee high availability. However, cloud services may suffer from data breaches due to software and hardware vulnerabilities, or they may have incentives to release stored data to unauthorized entities. In this work we present ABE-Cities, an encryption system for urban sensing which solves the above problems while ensuring fine-grained access control on data by means of Attribute-Based Encryption (ABE). ABE-Cities senses data from the city and stores it on the cloud in an encrypted form. Then, it provides users with keys able to decrypt only data sensed from authorized paths or zones of the city. In ABE-Cities, sensors perform only lightweight symmetric-key encryption, thus we can employ constrained sensor devices such as battery powered motes. ABE-Cities allows us to plan an expiration date for each key, as well as to revoke a given key in an unplanned fashion. We prove that ABE-Cities scales well with the number of users and the number of streets by simulating it with 30 000 users on the Beijing street network, which consists of more than 30 000 streets. In addition to the "vanilla" ABE-Cities scheme, we propose an "advanced" one that leverages the presence of IoT gateways to reduce the computational load otherwise weighing on a single Trusted Third Party. We validate this by testing the advanced scheme on the simulated Houston and Beijing street networks.