Towards Efficient Fine-Grained Access Control and Trustworthy Data Processing for Remote Monitoring Services in IoT

• Published in: IEEE transactions on information forensics and security Vol. 14; no. 7; pp. 1830 - 1842
• Main Authors: Chen, Yaxing, Sun, Wenhai, Zhang, Ning, Zheng, Qinghua, Lou, Wenjing, Hou, Y. Thomas
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.07.2019; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Access control; Cloud computing; Cryptography; Data processing; Decision making; Encryption; fine-grained access control; Hardware; Internet of Things; Internet-of-Things (IoT); Patient monitoring; Remote monitoring; Remote patient monitoring; secure hardware; Software; trusted computing; Trustworthiness
• ISSN: 1556-6013; 1556-6021
• DOI: 10.1109/TIFS.2018.2885287

As an important application of the Internet of Things, many remote monitoring systems adopt a device-to-cloud network paradigm. In a remote patient monitoring case, various resource-constrained devices are used to measure the health conditions of a target patient in a distant non-clinical environment and the collected data are sent to the cloud backend of an authorized health care service for processing and decision making. As the measurements involve private patient information, access control and trustworthy processing of the confidential data become very important. Software-based solutions that adopt advanced cryptographic tools, such as attribute-based encryption and fully homomorphic encryption, can address the problem, but they also impose substantial computation overhead on both client and server sides. In this paper, we deviate from the conventional software-based solutions and propose a secure and efficient remote monitoring framework, called SRM, using the latest hardware-based trustworthy computing technology, such as Intel SGX. In addition, we present a robust and lightweight "heartbeat" protocol to handle notoriously difficult key revocation problem. We implemented a prototype of the framework for SRM and show that SRM can protect user data privacy against unauthorized parties, with minimum performance cost compared to existing software-based solutions.