ERACMA: Expressive and Revocable Access Control With Multi-Authority for AIoT-Enabled Human Centric Consumer Electronics

With the maturation of Artificial Intelligence empowered Internet of Things (AIoT) and smart consumer electronics technology, Securing data privacy has become a top priority concern. The lack of computing resources in some consumer electronics (e.g. wearable medical devices) and the inherent security issues such as untrustworthy cloud service providers (CSPs) inevitably lead to unreliable data sharing. Therefore, how to ensure the security, efficiency and scalability of private data sharing with limited resources in consumer electronics is one of the hot topics. However, data encryption schemes that use a single authority typically have high key generation costs, and the data integrity of which can hardly be guaranteed. In this paper, we propose a blockchain-assisted, highly secure access control scheme for AIoT-enabled, human centric consumer electronics. The novel scheme, called ERACMA, supports expressive and revocable access control with multi-authority using attribute-based encryption. The scheme uses multiple attribute authorities to split the key generation, reducing the generation time of the decryption key. Blockchain is utilized to ensure the integrity of private consumer electronics data. Data source identification can be used by human-centric consumer electronics applications to determine the validity and legitimacy of data. The scheme also supports dynamic user group management to address the user license expiration issues involved in consumer applications. A formal definition and concrete construction of ERACMA are also presented, with a security proof under the random oracle. Extensive comparative and experimental analysis has revealed the superior functionality and efficient performance of our scheme which is well-suited for human-centric consumer electronics.