ABSTRACT

In Information-Centric Internet of Things (ICIoT), IoT data can be cached throughout a network for close data copy retrievals. Such a distributed data caching environment, however, poses a challenge to flexible authorization in the network. To address this challenge, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) has been identified as a promising approach. However in the existing CP-ABE scheme, publishers need to retrieve attributes from a centralized server for encrypting data, which leads to high communication overhead. To solve this problem, we incorporate CP-ABE and propose a novel Distributed Publisher-driven secure Data sharing for ICIoT (DPD-ICIoT) to enable only authorized users to retrieve IoT data from distributed cache. In DPDICIoT, newly introduced Attribute Manifest (AM) is cached in the network, through which publishers can retrieve the attributes from nearby copy holders instead of a centralized attribute server. In addition, a key chain mechanism is utilized for efficient cryptographic operations, and an Automatic Attribute Self-update Mechanism (AASM) is proposed to enable fast updates of attributes without querying centralized servers. According to the performance evaluation, DPD-ICIoT achieves lower bandwidth cost compared to the existing CPABE scheme.

Existing System

•  
• In DPD-ICIoT, CP-ABE is employed to provide flexible authorization from publishers to users. To balance centralized management and distributed retrievals for attributes, attribute manifest (AM) and data manifest (DM) are introduced and distributedly cached in the network. Thus, publishers can retrieve AMs from close copyholders instead of the centralized attribute servers.
• Herein, AM and DM are the data chunks, with the type of “Manifest”, that describe attributes and data, respectively. Further, to reduce the large traffic overhead of attribute updates, we propose an Automatic Attribute Self-update Mechanism (AASM) to enable the update of attributes without querying the distant server.

ADVANTAGES OF PROPOSED SYSTEM:

• Compared with the existing CP-ABE scheme, the total bandwidth cost in packet transmissions consumed for attribute retrievals can be greatly reduced.
• To the best of our knowledge, this is the first work to investigate publisher-driven fine-grained access control in a ubiquitously distributed caching scenario for ICIoT.
• We integrate CP-ABE with the typical ICN, CCN/NDN and propose a novel DPD-ICIoT scheme for providing distributed, secure, and flexible data sharing for ICIoT.
• We employ a key chain mechanism for efficient data encryption and decryption.
• We design the AM to enable the close copy retrievals of attributes and propose an AASM to provide efficient attribute update.
• System evaluation is performed to compare the proposed DPD-ICIoT scheme with the existing CP-ABE scheme.