BACTDS: Blockchain-Based Fined-Grained Access Control Scheme with Traceablity for IoT Data Sharing

Abstract

Due to the growing prevalence of Internet of Things (IoT) services, there is an opportunity to leverage the data generated by IoT devices to create greater value. However, how individuals can ensure user privacy and data security when sharing their private data remains a major challenge. To address the above problems, we propose a trackable and fine-grained private data sharing access control scheme (BACTDS) based on blockchain. First, to ensure data security, in our proposed system model, data users can interact with the cloud to obtain ciphertext information only if they have permission information and can decrypt the obtained ciphertext to obtain plaintext information only if they meet access policies. Second, we store the user’s identity information in the probability polynomial. With the help of the traceability algorithm, our proposed scheme supports the tracking of malicious users who have leaked private keys. The malicious user’s identity is recovered through lagrangian interpolation polynomials and then traced to malicious users, this prevents illegal sharing and misuse of keys. Finally, we provide a formal security proof of our scheme under the assumption of the random oracle model, which demonstrates its provable security. Moreover, experimental results and performance analysis indicate that our scheme (BACTDS) is time-efficient and cost-effective.

This work was supported in part by the Major Program of Shandong Provincial Natural Science Foundation for the Fundamental Research (ZR2022ZD03), the NSF of China under Grants 62272256 and 61832012, and the Piloting Fundamental Research Program for the Integration of Scientific Research, Education and Industry of Qilu University of Technology (Shandong Academy of Sciences) under Grant 2022XD001.