Efficient and Decentralized Dual Access Control for Cloud-Based Industrial Internet of Things

As an essential application of the Internet of Things (IoT), the Industrial IoT (IIoT) makes it possible to monitor and manage factories more efficiently. With the development of IIoT, cloud storage services are being implemented to exchange large amounts of data. However, determining how to control access to malicious cloud servers is a critical problem. Thus, the ciphertext policy attribute-based encryption (CP-ABE) is proposed to solve this problem. Unfortunately, the corruption of authorities, the Distributed Denial-of-Service (DDoS) attacks, and the Economic Denial of Sustainability (EDoS) attacks bring about an extreme challenge to using the CP-ABE scheme on the cloud-based IIoT system. Due to these problems, in this article, we proposed a new decentralized dual access control system for the cloud-based IIoT by introducing a new decentralized CP-ABE (DABE) scheme. In our scheme, there are multiple authorities, the scheme is secure even though some of the authorities are corrupt. At the same time, our scheme can resist DDoS/EDoS attacks with dual access control technology. Finally, we give security and efficiency analysis in this article. The results show that our scheme can achieve adaptive security and is more efficient than the proposed schemes.