基于细粒度授权的物联网搜索数据隐私保护方案

doi:10.11959/j.issn.2096-109x.2017.00127

Abstract

Abstract:

With the rapid development of the Internet of things (IoT) technology and cloud computing technology, the search engine for Internet of things become a hot research topic. However, because of the openness of the search of IoT, the privacy in traditional Internet search area becomes more prominent and faces more challenges. Firstly, the research background and challenges of data privacy preservation for search of IoT were described. Secondly, the scheme of data privacy preservation for the search of Internet of things based on fine-grained authorization was pro-posed, which combined the encrypted search algorithm with the attribute based access control algorithm. Thirdly, the security analysis and performance analysis of the scheme were also carried out. Finally, the future research work was summarized and pointed out.

Key words: search for Internet of things, privacy preservation, attribute based encryption, searchable symmetric en-cryption, fine-grained authorization

CLC Number:

TP309

Jia-hui WANG,Chuan-yi LIU,Bin-xing FANG. Data privacy preservation for the search of Internet of things based on fine-grained authorization[J]. Chinese Journal of Network and Information Security, 2017, 3(1): 13-22.

Figures/Tables 4

References 30

[31]	STEFANOV E , PAPAMANTHOU C , SHI E . Practical dynamic searchable encryption with small leakage[C]// NDSS. 2014.
[32]	CASH D , JAEGER J , JARECKI S . et al. Dynamic searchable encryption in very large databases: data structures and implementa-tion[C]// Network and Distributed System Security Symposium (NDSS). 2014.
[33]	DI CRESCENZO G , SARASWAT V . Public key encryption with searchable keywords based on Jacobi symbols[C]// Indocrypt 2007. 2007.
[34]	LAI X , LU R , FOXTON K . An efficient searchable encryption scheme and its application in network forensics[C]// E-Forensics. 2010.
[35]	NAVEED M , PRABHAKARAN M , GUNTER C . Dynamic search-able encryption via blind storage[C]// IEEE Symposium on Security and Privacy. 2014.
[36]	SAHAI A , WATERS B . Fuzzy identity based encryption[C]// Eurocrypt. 2005.
[37]	GOYAL V , PANDEY O , SAHAI A , Attribute-based encryption for fine-grained access control of encrypted data[C]// The 13th ACM Conference on Computer and Communications Security(CCS). 2006.
[38]	CHASE M . Multi-authority attribute based encryption[C]// TCC. 2007.
[39]	BO?OVIC V , SOCEK D , STEINWANDT R , Multiauthority attrib-ute-based encryption with honest-but-curious central authority[J]. International Journal of Computer Mathematics. 2012, 89 (3): 268-283.
[40]	CHASE M , CHOW S . Improving privacy and security in multi-authority attribute-based encryption[C]// The 16th ACM Con-ference on Computer and Communications Security (CCS). 2009.
[41]	LEWKO A , WATERS B . Decentralizing attribute-based encryp-tion[C]// Eurocrypt 2011. 2011.
[42]	LIU Z , CAO Z , HUANG Q . Fully secure multi-authority cipher-text-policy attribute-based encryption without random ora-cles[C]// The European Symposium on Research in Computer Secu-rity (ESORICS). 2011.
[43]	HAN J , SUSILO W , MU Y . Privacy-preserving decentralizedkey-policy attribute-based encryption[J]. IEEE Transactions on Parallel and Distributed Systems. 2012, 23 (11): 2150-2162.
[44]	YU S , WANG C , REN K . Achieving secure, scalable, and fine-graineddata access control in cloud computing[C]// IEEE Info-com. 2010.
[1]	ATZORI L , IERA A , MORABITO G , The Internet of things: a survey[J]. Computer Networks, 2010, 54 (15): 2787-2805.
[2]	KANSAL A , NATH S , LIU J , et al. BSenseWeb: an infrastructure forshared sensing[J]. IEEE Multimedia, 2007, 14 (4): 8-13.
[45]	YU S C , REN K , LOU W J . Defending against key abuse attacks in KP-ABE enabled broadcast systems[C]// Security and Privacy in Communication Networks. 2009.
[46]	WANG Y , CHEN K , LONG Y . Accountable authority key policy attribute-based encryption[J]. Science China: Information Sciences, 2012, 55 (7): 1631-1638.
[3]	OSTERMAIER B , ROMER K , MATTERN , et al. A real-time search engine for the Web of things[C]// Internet of Things, Tokyo. 2010.
[4]	BODENHEIM R , BUTTS J , DUNLAP S . Evaluation of the ability of the Shodan search engine to identify Internet-facing industrial control devices[J]. International Journal of Critical InfrastructureProtection, 2014, 7 (2): 114-123.
[47]	LI J , REN K , KIM K . A2BE: Accountable attribute-based encryp-tion for abuse free access control[R]. Cryptology ePrintArchive. 2009.
[48]	LI J , REN K , ZHU B . Privacy-aware attribute based encryption with user accountability[C]// The 12th International Conference. 2009.
[5]	SONG X D , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data[C]// The IEEE Symposium on Security and Privacy. 2000.
[6]	GOH E . Secure indexes[R]. IACR ePrint Cryptography Archive, 2003.
[49]	LI J , HUANG Q , CHEN X . Multi-authority ciphertext-policy at-tribute-based encryption with accountability[C]// The 6th Interna-tional Symposium on Information, Computer and Communications Security (ASIACCS). 2011.
[50]	SUN W , YU S , LOU V . Protecting your right: attribute-based key-word with fine-grained owner enforced search authorization in the cloud[C]// IEEE Infocom. 2014.
[7]	CHANG Y , MITZENMACHER M . Privacy preserving keyword searches on remote encrypted data[C]// The Applied Cryptography and Network Security. 2005.
[8]	CURTMOLA R , GARAY J , KAMARA S , et al. Searchable sym-metric encryption: improved definitions and efficient construc-tions[C]// The 13th ACM Conference on Computer and Communi-cations Security (CCS 2006). 2006.
[51]	HAN F , QIN J , ZHAO H . A general transformation from KP-ABE to searchable encryption[J]. Future Generation Computer Systems, 2014, 30: 107-115.
[52]	BOUABANATEBIBEL T , KACI A . Parallel search over encrypted data under attribute based encryption on the cloud computing[J]. Computers＆Security, 2015.
[9]	LIESDONK P V , SEDGHI S , DOUMEN J , et al. Computationally efficient searchable symmetric encryption[C]// Secure Data Man-agement, VLDB Workshop(SDM 2010). 2010: 87-100.
[10]	KAMARA S , PAPAMANTHOU C , ROEDER T , et al. Dynamic searchable symmetric encryption[C]// 2012 ACM Conference on Computer and Communications Security. 2012: 965-976.
[53]	KACI A , BOUABANA-TEBIBEL T . Access control reinforcement over searchable encryption[C]// The 15th IEEE International Con-ference on Information Reuse And Integration. 2014.
[54]	CASH D , JARECKI S , JUTLA C . Highly-scalable searchable symmetric encryption with support forboolean queries[C]// Crypto, 2013.
[55]	SADAKANE K . Fast algorithms for k-word proximity search[J]. IEICE Transactions on Fundamentals of Electronics, Communica-tions and Computer Sciences, 2001, 84 (9): 2311-2318.
[11]	CASH D , JAEGER J , JARECKI S , et al. Dynamic searchable encryption in very-large databases: data structures and implementa-tion[C]// Network and Distributed SystemSecurity Symposium (NDSS'14). 2014.
[12]	BONEH D , CRESCENZO G D , OSTROVSKY R , Public key encryption with keyword search[C]// Eurocryp'04. 2004.
[13]	ABDALLA M , BELLARE M , CATALANO D , Searchable encryp-tion revisited: consistency properties, relation to anonymous IBE, and extensions[C]// Crypto'05. 2005.
[14]	BAEK J , SAFAVI-NAINI R , SUSILO W , Public key encryption with keyword search revisited[C]// The International Conference on Computational Science and Applications (ICCSA 2008). 2008.
[15]	RHEE H S , PARK J H , SUSILO W , et al. Improved searchable public key encryption with designated tester[C]// The ACM Sympo-sium on Information, Computer and Communications Secu-rity(ASIACCS 2009). 2009.
[16]	FANG L , SUSILO W , GE C , et al. A secure channel free public key encryption with keyword search scheme without random ora-cle[C]// The International Conference on Cryptology and Network Security. 2009.
[17]	KERSCHBAUM L , SORNIOTTI W . Searchable encryption for outsourced data analytics[C]// The 7th European Conference on Public Key Infrastructures, Services and Applications(EuroPKI'10). 2010.
[18]	CAO N , WANG C , REN K . Privacy-preserving multi-keyword ranked search over encrypted cloud data[C]// IEEE Infocom. 2011.
[19]	SUN W , WANG B , CAO N . Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking[C]// ACM Symposium on Information, Computer and Communications Secu-rity. 2013: 71-82.
[20]	CHUAH M , HU W . Privacy-aware bedtree based solution for fuzzy multi-keyword search over encrypted data[C]// The International Conference on Distributed Computing Systems Workshops. 2011.
[21]	WANG B , YU S , LOU W . Privacy-preserving multi-keyword fuzzy search over encrypted data in the cloud[C]// IEEE Infocom. 2014.
[22]	MASHAURI D , LI R , HAN H . Adaptive multi-keyword ranked search over encrypted cloud data.[C]// The International Conference on Collaborate Computing. 2015.
[23]	SUN X , WANG X , XIA Z . Dynamic multi-keyword top-k ranked search over encrypted cloud data[J]. The International Journal of Security and Its Applications. 2014, 8 (1): 319-332.
[24]	BONEH D , WATERS B . Conjunctive, subset, and range queries on encrypted data[C]// TCC. 2007.
[25]	SUN W , WANG B , CAO N . Verifiable privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking[J]. IEEE Transactions on Parallel and Distributed Systems, 2014, 25 (11): 3025-3035.
[26]	LI J , WANG Q , WANG C . Fuzzy keyword search over encrypted data in cloud computing[C]// IEEE Infocom. 2010.
[27]	WANG C , CAO N , REN K . Enabling secure and efficient ranked keyword search over outsourced cloud data[J]. IEEE Transactions on Parallel and Distributed Systems (TPDS), 2011, 23 (8): 1467-1749.
[28]	SHI E , BETHENCOURT V , CHAN H . Multi-dimensional range query over encrypted data[C]// IEEE Symposium on Security and Privacy, 2007.
[29]	KAMARA S , PAPAMANTHOU C . Parallel and dynamic search-able symmetric encryption[M]// Financial Cryptography and Data Security, Berlin: Springer, 2013: 258-274.
[30]	KAMARA S , PAPAMANTHOU C . Parallel and dynamic search-able symmetric encryption[M]// CCS. 2012.

Metrics

Recommended 0

No Suggested Reading articles found!

Data privacy preservation for the search of Internet of things based on fine-grained authorization

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 30

Related Articles 10

Metrics

Recommended 0

[1]	Saite CHEN, Weihai LI, Yuanzhi YAO, Nenghai YU. Location privacy protection method based on lightweight K-anonymity incremental nearest neighbor algorithm [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 60-72.
[2]	Xianmang HE. Multi-party summation query method based on differential privacy [J]. Chinese Journal of Network and Information Security, 2020, 6(3): 14-18.
[3]	Wen-bo YAN,Yuan-zhi YAO,Wei-ming ZHANG,Neng-hai YU. Privacy-preserving scheme for logistics systems based on 2D code and information hiding [J]. Chinese Journal of Network and Information Security, 2017, 3(11): 22-28.
[4]	Bing-wen FENG,Jian WENG,Wei LU. Research on outsourcing of digital image forensics based on privacy preserving [J]. Chinese Journal of Network and Information Security, 2016, 2(8): 23-31.
[5]	Yi-zhang JIANG,Shi-tong WANG. Research on privacy-preserving learning machines [J]. Chinese Journal of Network and Information Security, 2016, 2(6): 22-31.
[6]	Shang LI,Zhi-gang ZHOU,Hong-li ZHANG,Xiang-zhan YU. Prospect of secure-efficient search and privacy-preserving mechanism on big data [J]. Chinese Journal of Network and Information Security, 2016, 2(4): 21-32.
[7]	Jia-feng HUA,Feng-hua LI,Yun-chuan GUO,Kui GENG,Ben NIU. Research on privacy protection in the process of information exchange [J]. Chinese Journal of Network and Information Security, 2016, 2(3): 28-38.
[8]	Zheng YAN,Chen-zi WU,Wei FENG,Zi-long WANG. Survey of trustworthy pervasive social networking [J]. Chinese Journal of Network and Information Security, 2016, 2(2): 30-40.
[9]	Kui REN. Privacy-preserving image processing in cloud computing [J]. Chinese Journal of Network and Information Security, 2016, 2(1): 12-17.
[10]	Ben NIU,Feng-hua LI,Jia-feng HUA,Yuan-yuan HE. Research on scenario-based mechanism in privacy-aware mobile networks [J]. Chinese Journal of Network and Information Security, 2015, 1(1): 31-42.