Robust Access Control for Secure IoT Outsourcing with Leakage Resilience

Area of Science:

• Computer Science
• Cybersecurity
• Cryptography

Background:

• The Internet of Things (IoT) enables widespread connectivity but faces significant security and privacy challenges due to device resource constraints.
• Outsourced data security in IoT environments is a critical concern, necessitating robust access control mechanisms.

Purpose of the Study:

• To propose a novel, leakage-resilient access control scheme for IoT data.
• To enhance security and privacy for resource-constrained IoT devices through efficient data handling.

Main Methods:

• Developed an Attribute-Based Encryption (ABE) scheme incorporating partial decryption outsourcing.
• Offloaded intensive decryption computations to cloud servers to minimize IoT device overhead.
• Incorporated resilience against master secret key leakage and side-channel attacks.

Main Results:

• The proposed scheme demonstrates robustness under standard cryptographic assumptions.
• Significant improvements in decryption efficiency, scalability, and computational performance were observed.
• The scheme effectively addresses security and privacy challenges in outsourced IoT data.

Conclusions:

• The developed ABE scheme provides a scalable, efficient, and secure access control framework for IoT.
• This solution is well-suited for real-world IoT applications in smart healthcare, industrial IoT, and smart cities.