IoT Data Sharing with Outsourced Attribute-Based Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT devices face challenges in sharing real-time data due to their low computational performance, making it difficult to perform complex encryption operations for multiple users, which hinders efficient data sharing.
Innovation Solution
IoT devices outsource high-performance operations of attribute-based encryption to peripheral devices with better computational capabilities, using attribute bloom filters to enable secure and efficient data sharing through a server that acts as a broker, ensuring only legitimate consumers receive the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IoT devices perform complex attribute-based encryption operations for multiple users, then data security is improved, but computational performance deteriorates
Solution Approach 1:
The encryption operation is divided into two segments: the IoT device performs initial encryption of data with its own key, then a peripheral device performs a second encryption layer using attribute-based encryption. This segmentation allows the computationally intensive ABE operations to be performed by the peripheral device rather than the resource-constrained IoT device, resolving the contradiction between security and computational performance.
Solution Approach 2:
A peripheral device is introduced as an intermediary between the IoT device and the server. The peripheral device performs the computationally intensive attribute-based encryption operations and manages the complexity of multiple user access policies, allowing the IoT device to focus on data collection and initial encryption without being burdened by complex cryptographic operations.
2Adaptability or versatility
If the number of users requiring IoT data increases, then data sharing versatility is improved, but encryption operation complexity increases
Solution Approach 1:
User access policies and attributes are pre-configured and stored on the server before data sharing occurs. When an IoT device or peripheral device needs to encrypt data for multiple users, it retrieves the pre-defined access policies from the server, eliminating the need to dynamically create complex encryption structures at data transmission time. This preliminary setup reduces the complexity of handling multiple users.
Solution Approach 2:
The system uses template-based access policies that can be copied and reused for multiple users with similar access requirements. Instead of creating unique complex encryption schemes for each user, the system replicates and adapts standardized policy templates, significantly reducing the complexity of managing encryption operations for a large number of users.
Data Source
AI summary
An IoT device according to an embodiment encrypts IoT data using a peripheral device and transmits the IoT data to a server, and a user device requests and obtains necessary IoT data from the server, thereby achieving real-time IoT data sharing. The IoT device performs only relatively low-performance operation of attribute-based encryption to encrypt IoT data collected through a sensor and outsources the remaining high-performance operations of attribute-based encryption to the peripheral device providing external communication network connection to the IoT device to generate a final ciphertext. A user device generates an attribute bloom filter using an access policy thereof, requests and obtains IoT data encrypted according to attribute-based encryption. A cloud server receives and stores IoT data encrypted by the IoT device and the peripheral device according to attribute-based encryption and transmits IoT data retrieved using the attribute bloom filter as a query to the user device.