文献类型：期刊文献

英文题名：Secure, Efficient, and Weighted Access Control for Cloud-Assisted Industrial IoT

作者：Li, Qi[1];Zhang, Qianqian[1];Huang, Haiping[1];Zhang, Wei[1];Chen, Wei[1,2,3];Wang, Huaqun

机构：[1]Nanjing Univ Posts & Telecommunicat, Sch Comp Sci & Jiangsu Key Lab Big Data Secur & I, Nanjing 210023, Peoples R China;[2]Nanjing Univ Posts & Telecommunicat, Sch Comp Sci & Jiangsu Key Lab Big Data Secur & I, Nanjing 210023, Peoples R China;[3]Shaoxing Univ, Dept Comp Sci & Engn, Shaoxing 312000, Peoples R China

年份：2022

卷号：9

期号：18

起止页码：16917

外文期刊名：IEEE INTERNET OF THINGS JOURNAL

收录：SCI-EXPANDED(收录号：WOS:000884575200016)、、EI(收录号：20220511570064)、Scopus(收录号：2-s2.0-85123724647)、WOS

基金：This work was supported in part by the National Key Research and Development Program of China under Grant 2019YFB2101700; in part by the National Natural Science Foundation of China under Grant 61872192 and Grant 62072369; and in part by the Major Science Research Project of Jiangsu Provincial Education Department under Grant 19KJA310010.

语种：英文

外文关键词：Batch verification; compressed ciphertext length; Industrial Internet of Things (IIoT); online/offline key generation; outsoured decryption; weighted access control

外文摘要：In the cloud-assisted Industrial Internet of Things (IIoT), ciphertext-policy attribute-based encryption (CP-ABE) could help the data owner (DO) share his sensitive data via the cloud under self-defined access structures. Among general CPABE schemes, the decryption overhead, the key generation cost, and the ciphertext length increase with the number of involved attributes. Additionally, only regular attributes are taking into consideration rather than weighted attributes. In this article, we proposed a secure, efficient, and weighted access control scheme (SEWAC) for cloud-assisted IIoT applications. SEWAC enables the DO to formulate any fine-grained access structure over weighted attributes without making it more complicated. Furthermore, such weighted attributes would not add the length of ciphertext. SEWAC also supports online/offline key generation to alleviate the computational cost of the authority from answering mass key requests in the online phase, while most computational tasks are executed in the offline phase. The heavy decryption overhead is offloaded to the cloud. To ensure the cloud to honestly execute the process of outsourced decryption, we design an efficient batch verification method, which allows the user to spend only three bilinear pairing operations in checking the correctness of batch results. We also give the formal security proof of the proposed scheme. Comprehensive comparisons and implementation results indicate that SEWAC can better achieve weighted access control, compressed ciphertext length, efficient key generation, and the assurance of the outsourced decryption result.