arrow
Return

An IoT Attribute-Based Security Framework for Topic-Based Publish/Subscribe Systems

delete2021-01-01
delete4
delete
OA
AI
O
Olivier Blazy
E
Emmanuel Conchon
M
Mathieu Klingler
D
Damien Sauveron *
DOI:10.1109/ACCESS.2021.3051469delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Publish/subscribe is a widely used paradigm in the Internet of Things (IoT). It allows a loose coupling between data producers and data consumers using a network of interconnected brokers. However, sensitive data could be exposed if a broker is compromised or if the broker itself is curious about the information that is exchanged. In this paper, we present a complete security framework for topic-based publish/subscribe systems to ensure both security and privacy at the broker level, going beyond the naive encryption of information while keeping the loose coupling between publishers and subscribers. Furthermore, the proposed solution enables user revocation at the broker level; i.e. a revoked user can no longer subscribe to published data. To achieve that, we propose a unified solution relying on attribute-based cryptography with: (1) Attribute-Based Encryption (ABE) for data encryption; (2) a new construction of Attribute-Based Keyword Search (ABKS) to allow the broker to perform an encrypted matching that enforces privacy; and (3) an Attribute-Based Signature (ABS) to enforce the data authentication.
Keywords:
Cryptography
Encryption
Payloads
Access control
Couplings
Public key
Privacy
Secure publish
subscribe
attribute-based cryptography
publications
subscriptions confidentiality
user revocation
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

C
centre national de la recherche scientifique (cnrs)
Scholars:
24.5W
Papers: 18.2W
Citations: 279