IOT data access control scheme combining attribute-based encryption and blockchain
Mingrui Liu, Chen Wang, Baocheng Wang · 2025
With the rapid development of Internet of things technology, data sharing and access control issues have become increasingly prominent. Although the existing access control schemes based on Attribute-based Encryption (ABE) improve data security, they still have shortcomings in performance, flexibility and dependence on trusted third parties. Therefore, this paper proposes an innovative scheme, which combines Multi-Authority, Elliptic Curve encryption (ECC), ciphertext-policy attribute-based encryption (CP-ABE) and Verifiable Outsourcing. The scheme managed attributes decentrally by multiple authorities to reduce the risk of single point of failure. ECC was used to replace the traditional bilinear pairing operation, which greatly improved the encryption and decryption efficiency. At the same time, the correctness and security of the outsourced calculation are verified by fog nodes and blockchain technology to avoid the single point of failure of the centralized trust mechanism. Security and performance analysis show that the proposed scheme significantly improves the system performance while ensuring data security, which can effectively meet the requirements of large-scale data access control in the Internet of Things.