MATRaCAE: Time-Based Revocable Access Control in the IoT

Clémentine Gritti, Emanuel Regnath, Sebastian Steinhorst

2024

Abstract

Internet of Things (IoT) promises a strong connection between digital and physical environments. Nevertheless, this framework comes with security vulnerabilities, due to the heterogeneous nature of devices and the diversity of their provenance. Furthermore, technical constraints (e.g. devices’ limited resources) require to lighten the design of the underlying security protocols. Liu et al. presented a system for data access with time-based control and direct user revocation that are beneficial features in IoT. In this paper, we propose an extension of this system, called MATRaCAE, that involves multiple authorities and considers binary time credentials. Doing so, we mitigate the key escrow problem and comes with a better trade-off between key update frequency and number of revoked users, which limited the applicability of Liu et al.’s scheme in IoT. Our solution can be proved secure under the Decisional Bilinear Diffie-Hellman Exponent assumption. Subsequently, we implement and evaluate MATRaCAE to demonstrate its suitability to IoT frameworks.

Paper Citation

in Harvard Style

Gritti C., Regnath E. and Steinhorst S. (2024). MATRaCAE: Time-Based Revocable Access Control in the IoT. In Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-709-2, SciTePress, pages 274-285. DOI: 10.5220/0012825700003767

in Bibtex Style

@conference{secrypt24,
author={Clémentine Gritti and Emanuel Regnath and Sebastian Steinhorst},
title={MATRaCAE: Time-Based Revocable Access Control in the IoT},
booktitle={Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2024},
pages={274-285},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012825700003767},
isbn={978-989-758-709-2},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - MATRaCAE: Time-Based Revocable Access Control in the IoT
SN - 978-989-758-709-2
AU - Gritti C.
AU - Regnath E.
AU - Steinhorst S.
PY - 2024
SP - 274
EP - 285
DO - 10.5220/0012825700003767
PB - SciTePress