IEEE Project Abstract

Fog Computing enables computation, storage, applications and network services between Internet of Things (IoT) and cloud servers by extending the Cloud Computing paradigm to the edge of the network. When protecting information security in Fog Computing, advanced security with low latency,wide-spread geographical distribution support and high flexibility should be concerned at the first, because of its huge number of nodes. In this paper we propose a new cryptographic primitive, named CCA2 Secure Publicly-Verifiable Revocable Large-Universe Multi-Authority Attribute-Based Encryption (CCA2-PV-R-LU-MA-ABE), to achieve flexible fine-grained access control in Fog Computing. In this primitive,end nodes in fogs generate private keys from multiple authorities that might be differentiated by their geographical locations or functions, and their attributes can be denoted by any strings in the large universe,which meets diverse needs in practical Fog applications. In addition, the access ability of nodes can be revoked efficiently even by resource-limited devices. To ensure the validity of cipher text, this primitive supports public verification and only the valid cipher text can be stored or transmitted. Based on the primitive and the feature of fog computing, we construct a concrete CCA2-PV-R-LU-MA-ABE scheme. We define the security model of this primitive, which is much more secure than the CPA-secure scheme. Finally, we compare the efficiency of the proposed concrete scheme with the existing CPA-secure scheme by both theoretical and experimental analysis, and the results shows that the extra consumption of efficiency to improving CPA to CCA2 is considerable low. The proposed scheme is highly secure, flexible and efficient enough to be deployed in practical fog computing.