Efficient CP-ABE Attribute/Key Management for IoT Applications

Lyes Touati (1, 2) , Yacine Challal (1, 2)

1 Labex MS2T - Laboratoire d'Excellence "Maîtrise des Systèmes de Systèmes Technologiques"
2 Heudiasyc - Heuristique et Diagnostic des Systèmes Complexes [Compiègne]

Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a promising cryptographic mechanism for fine-grained access control to shared data. Attribute/Key management is a keystone issue in CP-APE because of low efficiency of existing attribute revocation techniques. Indeed, existing solutions induce great side effect after each attribute revocation. The side effect induces rekeying and/or re-assignment of attributes to all users. In this paper, we propose a solution which does not require extra entities like proxies to re-encrypt data after every access policy change. Moreover, our solution does not imply latencies following access grants and revocations. We compare our solution with the batch-based CP-ABE attribute management technique and we show that our solution outperforms existing rekeying/revocation techniques in terms of overhead.

Mots clés: Attribute revocation; CP-ABE; Internet of Things; Access Control

Domaines: Informatique ubiquitaire; Cryptographie et sécurité [cs.CR]

Lyes Touati, Yacine Challal. Efficient CP-ABE Attribute/Key Management for IoT Applications. IEEE International Conference on Computer and Information Technology, Oct 2015, Liverpool, United Kingdom. ⟨10.1109/CIT/IUCC/DASC/PICOM.2015.49⟩. ⟨hal-01226085⟩