A secure and scalable IoT access control framework with dynamic attribute updates and policy hiding.

Area of Science:

• Computer Science
• Information Security
• Blockchain Technology

Background:

• Internet of Things (IoT) data security is crucial, often relying on cloud computing and attribute-based encryption (ABE).
• Existing blockchain-based access control methods lack dynamic updates, two-way verification, and secure data transmission capabilities.
• Public access policies in current systems compromise user privacy and data security.

Purpose of the Study:

• To propose a novel attribute-based encryption scheme for secure and real-time data sharing in IoT environments.
• To address limitations in dynamic attribute updates and policy visibility in blockchain-based access control.
• To enhance the security and privacy of IoT data through a bidirectional verification process.

Main Methods:

• Designed a dynamic update and policy hiding bidirectional attribute access control (DUPH-BAAC) scheme.
• Implemented a strategy hiding technique for secure policy transmission.
• Utilized blockchain for decentralized identity authentication, authorization, and key management.
• Employed smart contracts for user permission verification and access transaction generation.

Main Results:

• The DUPH-BAAC scheme enables real-time secure sharing with dynamic attribute updates and hidden access policies.
• Blockchain replaces centralized IoT servers, reducing information leakage risks.
• The scheme successfully resists indistinguishable choice access structures and selective plaintext attacks.
• Achieved IND-sAS-CPA security, ensuring robust data protection.

Conclusions:

• The DUPH-BAAC scheme offers a secure and efficient solution for IoT data access control.
• Policy hiding and bidirectional verification significantly enhance user privacy and data integrity.
• Decentralization via blockchain improves the overall security posture of IoT systems.