MATRaCAE: Time-based Revocable Access Control in the IoT - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

MATRaCAE: Time-based Revocable Access Control in the IoT

Résumé

Internet of Things (IoT)

promises a strong connection between digital and physical environments. Nevertheless, this framework comes with security vulnerabilities, due to the heterogeneous nature of devices and the diversity of their provenance. Furthermore, technical constraints (e.g. devices' limited resources) require to lighten the design of the underlying security protocols. Liu et al. presented a system for data access with time-based control and direct user revocation that are beneficial features in IoT. In this paper, we propose an extension of this system, called MATRaCAE, that involves multiple authorities and considers binary time credentials. Doing so, we mitigate the key escrow problem and comes with a better trade-off between key update frequency and number of revoked users, which limited the applicability of Liu et al.'s scheme in IoT. Our solution can be proved secure under the Decisional Bilinear Diffie-Hellman Exponent assumption. Subsequently, we implement and evaluate MATRaCAE to demonstrate its suitability to IoT frameworks.

Fichier principal
Vignette du fichier
main.pdf (871.54 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04742788 , version 1 (21-10-2024)

Licence

Identifiants

Citer

Clémentine Gritti, Emanuel Regnath, Sebastian Steinhorst. MATRaCAE: Time-based Revocable Access Control in the IoT. SECRYPT 2024 - 21st International Conference on Security and Cryptography, Jul 2024, Dijon, France. pp.274-285, ⟨10.5220/0012825700003767⟩. ⟨hal-04742788⟩
6 Consultations
10 Téléchargements

Altmetric

Partager

More