MLS-ABAC: Efficient Multi-Level Security Attribute-Based Access Control scheme

doi:10.1016/j.future.2022.01.003

Return

MLS-ABAC: Efficient Multi-Level Security Attribute-Based Access Control scheme

2022-06-01

Seyed Farhad Aghili *

Mahdi Sedaghat

Dave Singelée

Maanak Gupta

DOI：10.1016/j.future.2022.01.003

Original

Save

View PDF

Abstract

En 中文

Realizing access control to sensitive data offloaded to a Cloud is challenging in the Internet of Things, where various devices with low computational power and different security levels are interconnected. Despite various solutions, the National Institute of Standards and Technology (NIST)'s Attribute-Based Access Control (ABAC) model is one of the preferred techniques in the literature. In this model, users who satisfy access policies using both static and dynamic attributes are allowed to access the data. However, NIST's ABAC model does not support encryption and therefore does not satisfy data confidentiality. Attribute-Based Encryption (ABE) is a known cryptographic primitive that enables fine-grained access control over encrypted data. However, currently the existing ABE schemes do not meet NIST's ABAC requirements or are not computationally efficient enough for IoT applications. In this paper, we propose a Multi-Level Security ABAC (MLS-ABAC) scheme that satisfies the requirements of NIST's ABAC model. Our construction is efficient and relies on a decryption outsourceable Ciphertext-Policy ABE scheme. Additionally, based on realistic application scenarios, only the authorized data users can decrypt the ciphertext, and check the integrity of the retrieved message. Furthermore, we present both conceptual and formal models for our proposed MLS-ABAC architecture along with performance metrics. The experimental results show that the proposed MLS-ABAC achieves a constant ciphertext size of similar to 230 bytes and with encryption and decryption running times of similar to 18 and similar to 10 ms, respectively, independent of the number of attributes. (c) 2022 The Author(s). Published by Elsevier B.V.This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/).

Keywords:

Access control

Attribute-Based Encryption

Multi-Level Security

Authenticated encryption

Dynamic attributes

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.