Cloud-assisted secure and conjunctive publish/subscribe service in smart grids

• Published in: IET information security Vol. 14; no. 4; pp. 470 - 481
• Main Authors: Li, Jinguo, Wen, Mi, Zhang, Kai
• Format: Journal Article
• Language: English
• Published: The Institution of Engineering and Technology 01.07.2020
• Subjects: Advanced Metering Infrastructure servers; AMI servers; authorisation; ciphertext policy attribute‐based encryption; cloud computing; cloud‐assisted secure conjunctive; cryptography; data burst problem; data protection; data security; database management systems; message passing; middleware; obstacles traditional data utilisation; prefix‐based membership verification algorithm; protocols; publish‐subscribe service; Research Article; return data; security of data; sensitive data; serious server crash; smart grid need; smart meters; smart power grids; publish-subscribe service; Advanced Metering Infrastructure servers; message passing; data security; smart power grids; cryptography; prefix-based membership verification algorithm; obstacles traditional data utilisation; database management systems; cloud-assisted secure conjunctive; return data; smart meters; security of data; authorisation; sensitive data; AMI servers; data burst problem; data protection; serious server crash; ciphertext policy attribute-based encryption; cloud computing; protocols; smart grid need; middleware
• ISSN: 1751-8709; 1751-8717; 1751-8717
• DOI: 10.1049/iet-ifs.2019.0086

The publish/subscribe (P/S) service on Advanced Metering Infrastructure (AMI) servers of smart grid need to deal with huge amount of data, which may lead to data burst on AMI servers and serious server crash. Moreover, for protecting data security, sensitive data must be encrypted before being published. It obstacles traditional data utilisation based on plaintext P/S service. Thus, enabling an encrypted data-based P/S service is of paramount importance. Considering the huge amount of data and subscribers, it is necessary to allow conjunctive subscriptions containing mixtures of keywords, numeric data etc., and return data according to a reasonable access control mechanism (ACM). In this study, the authors propose a cloud-assisted secure conjunctive publish/subscribe protocol to challenge the encrypted data-based P/S service on AMI servers. To overcome the data burst, the P/S computation tasks are shifted from AMI servers to the cloud. To support conjunctive P/S operations in a reasonable ACM, a prefix-based membership verification algorithm combining with the ciphertext policy attribute-based encryption is explored. The proposed protocol is proved to be secure against chosen keyword/plaintext attacks under formally defined security models. Experiments on the real-world data set further show proposed protocol indeed introduce low overhead on computation and communication.