End to End secure data exchange in value chains with dynamic policy updates
Data exchange among value chain partners offers a competitive advantage, but it also exposes sensitive data to increasing risks of compromise. To protect this data, securing it during storage and transmission is essential, allowing only the data producer and final consumer to access or modify it. Th...
| Autores: | , , , |
|---|---|
| Tipo de recurso: | artículo |
| Fecha de publicación: | 2024 |
| País: | España |
| Institución: | Universidad del País Vasco |
| Repositorio: | Addi. Archivo Digital para la Docencia y la Investigación |
| OAI Identifier: | oai:addi.ehu.eus:10810/76521 |
| Acceso en línea: | http://hdl.handle.net/10810/76521 |
| Access Level: | acceso abierto |
| Palabra clave: | CP-ABE data exchange end-to-end (E2E) security IIoT policy update value chain |
| Sumario: | Data exchange among value chain partners offers a competitive advantage, but it also exposes sensitive data to increasing risks of compromise. To protect this data, securing it during storage and transmission is essential, allowing only the data producer and final consumer to access or modify it. This can be particularly challenging for Industrial Internet of Things (IIoT) devices, which often have limited processing and memory capabilities. To address these challenges, End-to-End (E2E) security mechanisms are needed to prevent data breaches resulting from value chain attacks. Additionally, value chain environments are dynamic and involve multiple data generation and consumption entities, requiring the ability to update access policies as needed. This paper presents a Ciphertext-Policy Attribute-Based Encryption (CP-ABE) data exchange system that provides E2E security for value chains, considering the most relevant security and industrial requirements. The proposed solution can protect data according to access policies while also allowing those policies to be updated without breaking E2E security or overloading field devices. The experimental evaluation demonstrates the feasibility of the proposed solution for IIoT platforms. |
|---|