Secure and Efficient Blockchain-Based Access Control Scheme With Attribute Update

Secure data access control is widely concerned in Cyber Physical Systems (CPSs) to protect consumer rights. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is an ideal solution that supports fine-grained access control. It is a pity that they fail to consider the attribute control and the verifiable legitimacy when consumer’s attributes are updated. Additionally, the existing revocable CP-ABE schemes are unsuitable for resource-constrained consumer electronic devices due to their high computational and storage overhead. This paper proposes a blockchain-based access control scheme with attribute update. A new revocation mechanism is designed to guarantee the forward/backward security of the attribute update. The lightweight ciphertext update protocol is proposed to optimize the computation cost. To realize secure and efficient attribute management, this paper designs the on-chain/off-chain separation storage mode, and proposes the traceability-based attribute set generation and validation algorithm. This paper performs the formal security proof. The experimental results demonstrate that the scheme is efficient in terms of encryption and decryption.