Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls for IoT

Area of Science:

• Cryptography and Information Security
• Internet of Things (IoT) Security
• Cloud Computing Security

Background:

• Internet of Things (IoT) devices rely on cloud storage and computing, posing challenges for secure and efficient data communication.
• Ciphertext-Policy Attribute-Based Encryption (CP-ABE) offers fine-grained access control but single-authority schemes have single points of failure.
• Multi-Authority CP-ABE (MA-CP-ABE) improves security, yet provably secure schemes are vulnerable to backdoor attacks and incur significant computational overhead, especially for resource-constrained IoT devices.

Purpose of the Study:

• To develop a secure and efficient MA-CP-ABE scheme for IoT environments.
• To address the vulnerabilities of backdoor attacks in cryptographic schemes.
• To reduce the computational and storage overhead associated with ABE schemes for resource-constrained devices.

Main Methods:

• Construction of an Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls (OO-MA-CP-ABE-CRFs) scheme.
• Integration of Cryptographic Reverse Firewalls (CRFs) to mitigate backdoor attack risks.
• Implementation of online/offline key generation, online/offline encryption, and outsourcing encryption techniques to optimize efficiency.

Main Results:

• The proposed OO-MA-CP-ABE-CRFs scheme effectively resists backdoor attacks.
• Significant reduction in storage and computing costs for users, particularly beneficial for IoT devices.
• The scheme's security is formally proven, and experimental results demonstrate its efficiency and practicality.

Conclusions:

• The OO-MA-CP-ABE-CRFs scheme provides a robust solution for secure and efficient data management in IoT cloud environments.
• The integration of CRFs and online/offline techniques successfully balances security and performance.
• This approach offers a practical and secure method for fine-grained access control in the face of advanced cryptographic threats and device limitations.