CUPS: secure opportunistic cloud of things framework based on attribute‐based encryption scheme supporting access policy update

Sana Belguith , Nesrine Kaaniche (1, 2, 3) , Giovanni Russello

1 IP Paris - Institut Polytechnique de Paris
2 TSP - RST - Département Réseaux et Services de Télécommunications
3 SCN-SAMOVAR - Sécurité et Confiance Numérique

The ever-growing number of internet connected devices, coupled with the new computing trends, namely within emerging opportunistic networks, engenders several security concerns. Most of the exchanged data between the internet of things (IoT) devices are not adequately secured due to resource constraints on IoT devices. Attribute-based encryption is a promising cryptographic mechanism suitable for distributed environments, providing flexible access control to encrypted data contents. However, it imposes high decryption costs, and does not support access policy update, for highly dynamic environments. This paper presents CUPS, an ABE-based framework for opportunistic cloud of things applications, that securely outsources data decryption process to edge nodes in order to reduce the computation overhead on the user side. CUPS allows end-users to offload most of the decryption overhead to an edge node and verify the correctness of the received partially decrypted data from the edge node. Moreover, CUPS provides the access policy update feature with neither involving a proxy-server, nor re-encrypting the enciphered data contents and re-distributing the users' secret keys. The access policy update feature in CUPS does not affect the size of the message received by the end-user, which reduces the bandwidth and the storage usage. Our comprehensive theoretical analysis proves that CUPS outperforms existing schemes in terms of functionality, communication and computation overheads.

Mots clés: Opportunistic computing Cloud of things Constant-size attribute based encryption Decryption delegation Verifiability Access policy update Confidentiality Access control; Opportunistic computing; Cloud of things; Constant-size attribute based encryption; Decryption delegation; Verifiability; Access policy update; Confidentiality; Access control

Domaines: Informatique [cs]

Sana Belguith, Nesrine Kaaniche, Giovanni Russello. CUPS: secure opportunistic cloud of things framework based on attribute‐based encryption scheme supporting access policy update. Security and Privacy , 2020, 3 (4), pp.1-24. ⟨10.1002/spy2.85⟩. ⟨hal-03991066⟩