Show simple item record

AuthorUnal, Devrim
AuthorAl-Ali, Abdulla
AuthorCatak, Ferhat Ozgur
AuthorHammoudeh, Mohammad
Available date2024-04-22T12:31:48Z
Publication Date2021-12-01
Publication NameFuture Generation Computer Systems
Identifierhttp://dx.doi.org/10.1016/j.future.2021.06.050
CitationUnal, D., Al-Ali, A., Catak, F. O., & Hammoudeh, M. (2021). A secure and efficient Internet of Things cloud encryption scheme with forensics investigation compatibility based on identity-based encryption. Future Generation Computer Systems, 125, 433-445.‏
ISSN0167739X
URIhttps://www.scopus.com/inward/record.uri?partnerID=HzOxMe3b&scp=85109450572&origin=inward
URIhttp://hdl.handle.net/10576/54067
AbstractData security is a challenge for end-users of cloud services as the users have no control over their data once it is transmitted to the cloud. A potentially corrupt cloud service provider can obtain the end-users’ data. Conventional PKI-based solutions are insufficient for large-scale cloud systems, considering efficiency, scalability, and security. In large-scale cloud systems, the key management requirements include scalable encryption, authentication, and non-repudiation services, as well as the ability to share files with different users and data recovery when the user keys of encrypted data are not accessible. Further requirements in cloud systems include the ability to provide the means for digital forensic investigations on encrypted data. Once data on the cloud is encrypted with a user's key it becomes impossible to access by forensic investigation teams. In this regard, distributing the trust of key management into multiple authorities is desirable. In the literature, there is no available secure cloud storage system with secure and efficient Type-3 pairings, supporting Encryption-as-a-Service (EaaS) and multiple Public Key Generators (PKGs). This paper proposes an efficient Identity-based cryptography (IBC) architecture for secure cloud storage, named Secure Cloud Storage System (SCSS), which supports distributed key management and encryption mechanisms and support for multiple PKGs. During forensic investigations, the legal authorities will be able to use the multiple PKG mechanism for data access, while an account locking mechanism prevents a single authority to access user data due to trust distribution. We also demonstrate that, the IBC scheme used in SCSS has better performance compared to similar schemes in the literature. For the security levels of 128-bits and above, SCSS has better scalability compared to existing schemes, with respect to encryption and decryption operations. Since the decryption operation is frequently needed for forensic analysis, the improved scalability results in a streamlined forensic investigation process on the encrypted data in the cloud.
SponsorThis publication was made possible by NPRP grant NPRP 10-0125-170250 from the Qatar National Research Fund (a member of Qatar Foundation). The statements made herein are solely the responsibility of the authors.
Languageen
PublisherElsevier B.V.
SubjectCloud security
Encryption-as-a-Service
Identity-based cryptography
Type-3 pairings
TitleA secure and efficient Internet of Things cloud encryption scheme with forensics investigation compatibility based on identity-based encryption
TypeArticle
Pagination433-445
Volume Number125
dc.accessType Abstract Only


Files in this item

FilesSizeFormatView

There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record