Efficient and privacy preserving access control scheme for fog-enabled IoT

• Published in: Future generation computer systems 2019-10, Vol.99, p.134-142
• Main Authors: Fan, Kai, Xu, Huiyue, Gao, Longxiang, Li, Hui, Yang, Yintang
• Format: Article
• Language: English
• Subjects: Access control; Attribute-based encryption; Cloud computing; Decryption outsourcing; Fog computing; Privacy preserving
• ISSN: 0167-739X; 1872-7115
• DOI: 10.1016/j.future.2019.04.003

The fog-to-things paradigm is introduced to mitigate the heavy burden on the edge of cloud-based network due to the centralized processing and storing of the massive volume of IoT data. Fog-enabled IoT architectures ensure small latency and enough computing resource that enables real time devices and applications. However, there still exist security and privacy challenges on data access control for fog-enabled IoT. Ciphertext-policy attribute-based encryption (CP-ABE) can be adopted to realize data access control in cloud-fog computing systems. In this paper, we propose an efficient and privacy preserving outsourced multi-authority access control scheme, named PPO-MACS. All attributes of users are transformed to be anonymous and authenticable to realize privacy preserving. And the verifiable outsourced decryption is introduced to reduce computation overheads on the end user side. Meanwhile, an efficient user revocation method is proposed. Security and performance analysis show that our scheme is secure and highly efficient. •We propose an efficient and privacy preserving access control scheme for fog-enabled IoT.•We design the efficient and verifiable outsourced decryption assisted by fog nodes in the scheme.•We propose a secure approach to transform attributes to be anonymous and authenticable.•The performance simulation show that proposed scheme is secure and highly efficient.