Blockchain-Aided Anonymous Traceable and Revocable Access Control Scheme With Dynamic Policy Updating for the Cloud IoT
Leyou Zhang, Xinmin Li, Qing Wu, Fatemeh Rezaeibagha
Abstract
The Internet of Things has been applied in various fields of industry, which has promoted the intelligent development of the industry and improved efficiency in industrial production. The devices involved in the IoT have generated useful and sensitive data over time and upload the data to the cloud to realize real-time data sharing. To ensure the confidentiality of data, many systems use attribute-based encryption primitive to encrypt data. However, there are still some security and privacy problems in this mode, such as the lack of identification of malicious users who leaked private keys, performance bottleneck caused by excessive reliance on a single central authority (CA), and vulnerability because a single CA holds the private keys of all users in the system. In this article, white-box tracking is used to identify malicious users. The alliance chain is introduced to support multiauthority environments, where the consensus nodes are managed by different authorities and assist CA in generating partial private keys. To protect users’ privacy, users remain anonymous at all times during their interactions with blockchain consensus. The security analysis and simulation results show that the proposed scheme outperformed other comparable schemes, indicating that it is a preferable scheme.