Reinforcing IoT-Enforced Security Policies

To provide confidentiality protection and access control to large amount of data generated by the Internet of Things (IoT), one promising approach lies on the use of Attribute-Based Encryption (ABE). However, the ABE-based approach needs to cope with the resource constraints of IoT devices, by providing data encryption and access control only under small access policies. With the goal to mitigate this limitation inherent to the IoT, this paper introduces a new technique that relies on semi-trusted intermediate entities to reinforce large access policies derived from small policies enforced by IoT devices without revealing the encrypted data.