Title: A data-owner centric privacy model with blockchain and adapted attribute-based encryption for internet-of-things and cloud environment

Authors: Youcef Ould-Yahia; Samia Bouzefrane; Hanifa Boucheneb; Soumya Banerjee

Addresses: CEDRIC Lab, Conservatoire National des Arts et Métiers, 292 rue Saint Martin 75141, Paris Cédex 03, France ' CEDRIC Lab, Conservatoire National des Arts et Métiers, 292 rue Saint Martin 75141, Paris Cédex 03, France ' VeriForm Lab, Ecole Polytechnique de Montréal, P.O. Box 6079, Station Centre-ville, Montréal, Québec, H3C 3A7, Canada ' CEDRIC Lab, Conservatoire National des Arts et Métiers, 292 rue Saint Martin 75141, Paris Cédex 03, France

Abstract: Advances in internet of things (IoT) and cloud computing technologies have led to the emergence of new applications such as in e-health domain bringing convenience for both physicians and patients. However, the development of these new technologies makes users' privacy vulnerable. The threats on private data may arise from service providers themselves voluntarily or by inadvertence. As a result, the data owner would like to ensure that the collected data are securely stored and accessed only by authorised users. In this paper, we propose a novel data-owner centric privacy model in IoT/cloud environment. Our model combines two promising paradigms for data privacy, which are attribute-based encryption (ABE) and blockchain, to strengthen the data-owner privacy protection. We propose a new scheme of ABE that is, in one hand, suitable to resource-constrained devices by externalising the computing capabilities, thanks to fog computing paradigm and, in the other hand, combined with a blockchain-based protocol to overcome a single point of trust and to enhance data-owner access control.

Keywords: internet of things; IoT; cloud; privacy; fog computing; blockchain; attribute-based encryption; ABE; e-health.

DOI: 10.1504/IJICS.2022.122374

International Journal of Information and Computer Security, 2022 Vol.17 No.3/4, pp.261 - 284

Received: 19 Feb 2019
Accepted: 18 Mar 2019
Published online: 22 Apr 2022 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article