An Efficient Ciphertext-Policy Weighted Attribute-Based Encryption for the Internet of Health Things

• Published in: IEEE journal of biomedical and health informatics 2022-05, Vol.26 (5), p.1949-1960
• Main Authors: Li, Hang, Yu, Keping, Liu, Bin, Feng, Chaosheng, Qin, Zhiguang, Srivastava, Gautam
• Format: Article
• Language: English
• Subjects: 0-1 coding; Access control; access policy; Algorithms; ciphertext-policy weighted attribute-based encryption; Cloud Computing; Computer applications; Computer Security; Cybersecurity; Encryption; Humans; Internet; Internet of Health Things; Internet of Things; Logic gates; Medical services; Policy; Security; Surgery; Technology; weighted attribute
• ISSN: 2168-2194; 2168-2208
• DOI: 10.1109/JBHI.2021.3075995

The Internet of Health Things (IoHT) is a medical concept that describes uniquely identifiable devices connected to the Internet that can communicate with each other. As one of the most important components of smart health monitoring and improvement systems, the IoHT presents numerous challenges, among which cybersecurity is a priority. As a well-received security solution to achieve fine-grained access control, ciphertext-policy weighted attribute-based encryption (CP-WABE) has the potential to ensure data security in the IoHT. However, many issues remain, such as inflexibility, poor computational capability, and insufficient storage efficiency in attributes comparison. To address these issues, we propose a novel access policy expression method using 0-1 coding technology. Based on this method, a flexible and efficient CP-WABE is constructed for the IoHT. Our scheme supports not only weighted attributes but also any form of comparison of weighted attributes. Furthermore, we use offline/online encryption and outsourced decryption technology to ensure that the scheme can run on an inefficient IoT terminal. Both theoretical and experimental analyses show that our scheme is more efficient and feasible than other schemes. Moreover, security analysis indicates that our scheme achieves security against a chosen-plaintext attack.