Verifiable Predicate-based Access Control Encryption with Dynamic Revocation

In wireless communication, data is typically encrypted before transmission to ensure confidentiality, which complicates the implementation of access control.Predicate encryption based (PE-based) access control enables fine-grained and secure control over encrypted data. The previous PE-based access control systems only guarantee the access of the authorized receivers but not control illegal senders, and have to execute re-authorization due to its static setting. In this paper, we propose a verifiable predicate-based access control encryption supporting dynamic revocation scheme (dvPACE), which is a dynamic access control mechanism on both senders and receivers. In contrast to existing access control, dvPACE controls not only "who can access" but also "who can send". It involves an additional sanitizer to handle the cipher data and embraces multi-verification against illegal entities. To achieve efficiency and scalability, dvPACE embeds inner-product predicate encryption and borrows the idea of identity-based revocation systems. dvPACE achieves about 19ms computational cost of data access, a comparable performance over conventional mechanisms with improvements of functionalities.