TY - JOUR
T1 - A Bilateral Access Control Data Sharing Scheme for Internet of Vehicles
AU - Hu, Xiaoya
AU - Wang, Licheng
AU - Gu, Lize
AU - Ning, Yuqiao
N1 - Publisher Copyright:
© 2014 IEEE.
PY - 2024
Y1 - 2024
N2 - Data sharing among vehicles can effectively address the traffic congestion and accidents caused by the increasing number of vehicles, thereby enhancing traffic efficiency and the travel experience. However, it also introduces security and privacy challenges related to confidentiality, authentication, identity privacy, identity revocation, and tamper resistance. To address the above challenges, we propose a bilateral access control data sharing scheme by extending Matchmaking Encryption. Our proposal ensures data confidentiality and data source authentication by combining attribute-based encryption with identity-based encryption. Most importantly, we verify the bilateral policies within a single logical step. To achieve identity revocation, we propose a revocation scheme based on a pseudo-identity list, which can revoke all the pseudo-identities associated with a malicious user and ensure the privacy of legitimate real identity. Security analysis indicates that apart from ensuring confidentiality and authentication, our proposal resists attacks, such as tampering, guessing, and collusion. We conduct theoretical complexity analysis and experimental performance evaluations to demonstrate the efficiency and practicality of our proposal for Internet of Vehicles (IoV) data sharing.
AB - Data sharing among vehicles can effectively address the traffic congestion and accidents caused by the increasing number of vehicles, thereby enhancing traffic efficiency and the travel experience. However, it also introduces security and privacy challenges related to confidentiality, authentication, identity privacy, identity revocation, and tamper resistance. To address the above challenges, we propose a bilateral access control data sharing scheme by extending Matchmaking Encryption. Our proposal ensures data confidentiality and data source authentication by combining attribute-based encryption with identity-based encryption. Most importantly, we verify the bilateral policies within a single logical step. To achieve identity revocation, we propose a revocation scheme based on a pseudo-identity list, which can revoke all the pseudo-identities associated with a malicious user and ensure the privacy of legitimate real identity. Security analysis indicates that apart from ensuring confidentiality and authentication, our proposal resists attacks, such as tampering, guessing, and collusion. We conduct theoretical complexity analysis and experimental performance evaluations to demonstrate the efficiency and practicality of our proposal for Internet of Vehicles (IoV) data sharing.
KW - Bilateral access control
KW - data sharing
KW - identity revocation
KW - pseudo-identity
KW - security and privacy
UR - https://www.scopus.com/pages/publications/85197039111
U2 - 10.1109/JIOT.2024.3420176
DO - 10.1109/JIOT.2024.3420176
M3 - Article
AN - SCOPUS:85197039111
SN - 2327-4662
VL - 11
SP - 36748
EP - 36762
JO - IEEE Internet of Things Journal
JF - IEEE Internet of Things Journal
IS - 22
ER -