{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T13:19:32Z","timestamp":1779369572172,"version":"3.53.0"},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T00:00:00Z","timestamp":1606089600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T00:00:00Z","timestamp":1606089600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Universit\u00e0 degli Studi dell\u2019Insubria"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2021,10]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Regulating the access to the Internet of Things (IoT) network\u2019s resources is a complex-prone task, which requires to pay a great attention on how policies are defined, shared, and enforced. The present paper considers the specific context of a smart home, which represents one of the main IoT application domains, and it focuses on two solutions proposed in the literature to cope with the aforementioned issues. On the one side, approaches based on attribute-based encryption (ABE) allow one to encrypt data for multiple recipients, in such a way that only those recipients whose attributes satisfy a given access policy can decrypt afterward. ABE guarantees a high level of customization due to the variety of attributes which can be defined, and it is also flexible enough to be adapted to different kinds of scenarios. On the other side, approaches based on sticky policies allow to attach an access policy directly to the data itself, and to employ a trusted authority to evaluate and enforce the policy itself. Sticky policies also guarantee a highly distributed and customizable enforcement of access control rules. In this paper, we compare the advantages and the drawbacks in terms of performance and robustness of such two techniques by means of their integration within the prototype of an IoT middleware, named networked smart object. Hence, the effectiveness of the presented solutions is validated by means of a real test-bed in the smart home scenario, in terms of storage occupancy, CPU load, and data retrieval delay. The final goal is to reveal the best approach to be used depending on the application\u2019s requirements.<\/jats:p>","DOI":"10.1007\/s10207-020-00526-3","type":"journal-article","created":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T13:03:37Z","timestamp":1606136617000},"page":"695-713","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Attribute-based encryption and sticky policies for data access control in a smart home scenario: a comparison on networked smart object middleware"],"prefix":"10.1007","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6824-8075","authenticated-orcid":false,"given":"Sabrina","family":"Sicari","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alessandra","family":"Rizzardi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gianluca","family":"Dini","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pericle","family":"Perazzo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michele","family":"La Manna","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alberto","family":"Coen-Porisini","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,11,23]]},"reference":[{"issue":"15","key":"526_CR1","doi-asserted-by":"publisher","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","volume":"54","author":"L Atzori","year":"2010","unstructured":"Atzori, L., Iera, A., Morabito, G.: The internet of things: a survey. Comput. Netw. 54(15), 2787\u20132805 (2010)","journal-title":"Comput. Netw."},{"key":"526_CR2","first-page":"457","volume":"3494","author":"A Sahai","year":"2005","unstructured":"Sahai, A., Waters, B.: Fuzzy identity-based encryption. Eurocrypt 3494, 457\u2013473 (2005)","journal-title":"Eurocrypt"},{"issue":"9","key":"526_CR3","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1109\/MC.2011.225","volume":"44","author":"S Pearson","year":"2011","unstructured":"Pearson, S., Mont, M.C.: Sticky policies: an approach for managing privacy across multiple parties. Computer 44(9), 60\u201368 (2011)","journal-title":"Computer"},{"key":"526_CR4","doi-asserted-by":"publisher","first-page":"43","DOI":"10.1016\/j.is.2016.02.003","volume":"58","author":"S Sicari","year":"2016","unstructured":"Sicari, S., Rizzardi, A., Miorandi, D., Cappiello, C., Coen-Porisini, A.: A secure and quality-aware prototypical architecture for the internet of things. Inf. Syst. 58, 43\u201355 (2016)","journal-title":"Inf. Syst."},{"key":"526_CR5","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1016\/j.is.2017.07.006","volume":"71","author":"S Sicari","year":"2017","unstructured":"Sicari, S., Rizzardi, A., Miorandi, D., Coen-Porisini, A.: Security towards the edge: sticky policy enforcement for networked smart objects. Inf. Syst. 71, 78\u201389 (2017)","journal-title":"Inf. Syst."},{"key":"526_CR6","unstructured":"Bethencourt, J., Sahai, A., Waters, B.: Ciphertext-policy attribute-based encryption. In: IEEE Symposium on Security and Privacy, 2007. SP\u201907. pp. 321\u2013334 (2007)"},{"key":"526_CR7","unstructured":"(1999) IBM and eurotech, \u201dmqtt v3.1 protocol specification\u201d. http:\/\/public.dhe.ibm.com\/software\/dw\/webservices\/ws-mqtt\/mqtt-v3r1.html"},{"key":"526_CR8","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1016\/j.is.2016.05.004","volume":"62","author":"A Rizzardi","year":"2016","unstructured":"Rizzardi, A., Sicari, S., Miorandi, D., Coen-Porisini, A.: AUPS: an open source AUthenticated publish\/subscribe system for the internet of things. Inf. Syst. 62, 29\u201341 (2016)","journal-title":"Inf. Syst."},{"key":"526_CR9","unstructured":"Node.JS (2009). http:\/\/nodejs.org\/"},{"key":"526_CR10","unstructured":"MongoDB. (2009). http:\/\/www.mongodb.org\/"},{"key":"526_CR11","unstructured":"Mosquitto \u201dan open source mqtt v3.1\/v3.1.1 broker\u201d. (2009). http:\/\/mosquitto.org"},{"key":"526_CR12","unstructured":"Karjoth, G., Schunter, M., Waidner, M.: Privacy-enabled services for enterprises. In: 13th International Workshop on Database and Expert Systems Applications, 2002. Proceedings, IEEE, pp. 483\u2013487 (2002)"},{"key":"526_CR13","doi-asserted-by":"crossref","unstructured":"Goyal, V., Pandey, O., Sahai, A., Waters, B.: Attribute-based encryption for fine-grained access control of encrypted data. In: Proceedings of the 13th ACM conference on Computer and Communications Security, pp. 89\u201398 (2006)","DOI":"10.1145\/1180405.1180418"},{"issue":"6","key":"526_CR14","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1109\/MM.2016.101","volume":"36","author":"M Ambrosin","year":"2016","unstructured":"Ambrosin, M., Anzanpour, A., Conti, M., Dargahi, T., Moosavi, S.R., Rahmani, A.M., Liljeberg, P.: On the feasibility of attribute-based encryption on Internet of Things devices. IEEE Micro 36(6), 25\u201335 (2016)","journal-title":"IEEE Micro"},{"key":"526_CR15","doi-asserted-by":"crossref","unstructured":"Girgenti, B., Perazzo, P., Vallati, C., Righetti, F., Dini, G., Anastasi, G.: On the feasibility of attribute-based encryption on constrained IoT devices for smart systems. In: 2019 IEEE International Conference on Smart Computing (SMARTCOMP), IEEE, pp. 225\u2013232 (2019)","DOI":"10.1109\/SMARTCOMP.2019.00057"},{"key":"526_CR16","doi-asserted-by":"crossref","unstructured":"Ambrosin, M., Conti, M., Dargahi, T.: On the feasibility of attribute-based encryption on smartphone devices. In: Proceedings of the 2015 Workshop on IoT challenges in Mobile and Industrial Systems, ACM, pp. 49\u201354 (2015)","DOI":"10.1145\/2753476.2753482"},{"key":"526_CR17","doi-asserted-by":"publisher","first-page":"133","DOI":"10.1016\/j.comnet.2016.08.014","volume":"108","author":"S Sicari","year":"2016","unstructured":"Sicari, S., Rizzardi, A., Miorandi, D., Cappiello, C., Coen-Porisini, A.: Security policy enforcement for networked smart objects. Comput. Netw. 108, 133\u2013147 (2016)","journal-title":"Comput. Netw."},{"key":"526_CR18","unstructured":"Baccelli, E., Cragie, R., Der\u00a0Stok, P., Brandt, A.: Applicability Statement: The Use of the Routing Protocol for Low-Power and Lossy Networks (RPL) Protocol Suite in Home Automation and Building Control. RFC 7733, RFC Editor, (2016). https:\/\/www.rfc-editor.org\/rfc\/rfc7733.txt"},{"key":"526_CR19","first-page":"2228","volume":"4","author":"S Sicari","year":"2017","unstructured":"Sicari, S., Rizzardi, A., Miorandi, D., Coen-Porisini, A.: Dynamic policies in internet of things: enforcement and synchronization. IEEE Internet Things J. 4, 2228\u20132238 (2017)","journal-title":"IEEE Internet Things J."},{"key":"526_CR20","doi-asserted-by":"crossref","unstructured":"Rasori, M., Perazzo, P., Dini, G.: ABE-Cities: an attribute-based encryption system for smart cities. In: Proceedings of IEEE SMARTCOMP 2018 (to appear), pp. 1\u20138 (2018)","DOI":"10.1109\/SMARTCOMP.2018.00075"},{"key":"526_CR21","unstructured":"Yu, S., Wang, C., Ren, K., Lou, W.: Achieving secure, scalable, and fine-grained data access control in cloud computing. In: Infocom, 2010 Proceedings IEEE, pp. 1\u20139 (2010)"},{"key":"526_CR22","doi-asserted-by":"crossref","unstructured":"Fujisaki, E., Okamoto, T.: Secure integration of asymmetric and symmetric encryption schemes. In: Annual International Cryptology Conference, Springer, pp. 537\u2013554 (1999)","DOI":"10.1007\/3-540-48405-1_34"},{"key":"526_CR23","doi-asserted-by":"crossref","unstructured":"Perazzo, P., Vallati, C., Arena, A., Anastasi, G., Dini, G.: An implementation and evaluation of the security features of RPL. In: International Conference on Ad-Hoc Networks and Wireless, Springer, pp. 63\u201376 (2017)","DOI":"10.1007\/978-3-319-67910-5_6"},{"key":"526_CR24","first-page":"112","volume":"111","author":"S Barker","year":"2012","unstructured":"Barker, S., Mishra, A., Irwin, D., Cecchet, E., Shenoy, P., Albrecht, J.: Smart*: an open data set and tools for enabling research in sustainable homes. SustKDD 111, 112 (2012)","journal-title":"SustKDD"},{"key":"526_CR25","doi-asserted-by":"crossref","unstructured":"Yi, S., Li, C., Li, Q.: A survey of fog computing: concepts, applications and issues. In: Proceedings of the 2015 Workshop on Mobile Big Data, ACM, pp. 37\u201342 (2015)","DOI":"10.1145\/2757384.2757397"},{"issue":"3","key":"526_CR26","doi-asserted-by":"publisher","first-page":"1389","DOI":"10.1109\/SURV.2012.111412.00158","volume":"15","author":"M Palattella","year":"2013","unstructured":"Palattella, M., Accettura, N., Vilajosana, X., Watteyne, T., Grieco, L., Boggia, G., Dohler, M.: Standardized protocol stack for the internet of (important) things. Commun. Surv. Tutor. IEEE 15(3), 1389\u20131406 (2013)","journal-title":"Commun. Surv. Tutor. IEEE"},{"key":"526_CR27","doi-asserted-by":"crossref","unstructured":"Bagci, I., Raza, S., Chung, T., Roedig, U., Voigt, T.: Combined secure storage and communication for the Internet of Things. In: 2013 IEEE International Conference on Sensing, Communications and Networking, SECON 2013, New Orleans, LA, United States, pp. 523\u2013631 (2013)","DOI":"10.1109\/SAHCN.2013.6645024"},{"key":"526_CR28","doi-asserted-by":"publisher","DOI":"10.1002\/9781119974031","volume-title":"M2M Communications: A Systems Approach","author":"D Boswarthick","year":"2012","unstructured":"Boswarthick, D., Elloumi, O., Hersent, O.: M2M Communications: A Systems Approach, 1st edn. Wiley, Hoboken (2012)","edition":"1"},{"key":"526_CR29","doi-asserted-by":"crossref","unstructured":"Conzon, D., Bolognesi, T., Brizzi, P., Lotito, A., Tomasi, R., Spirito, M.: The VIRTUS middleware: an XMPP based architecture for secure IoT communications. In: 2012 21st International Conference on Computer Communications and Networks, ICCCN 2012, Munich, Germany, pp. 1\u20136 (2012)","DOI":"10.1109\/ICCCN.2012.6289309"},{"key":"526_CR30","doi-asserted-by":"publisher","first-page":"460","DOI":"10.1016\/j.chb.2013.06.022","volume":"30","author":"A G\u00f2mez-Goiri","year":"2014","unstructured":"G\u00f2mez-Goiri, A., Orduna, P., Diego, J., de Ipina, D.L.: Otsopack: lightweight semantic framework for interoperable ambient intelligence applications. Comput. Hum. Behav. 30, 460\u2013467 (2014)","journal-title":"Comput. Hum. Behav."},{"key":"526_CR31","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1016\/j.adhoc.2013.02.008","volume":"18","author":"CH Liu","year":"2013","unstructured":"Liu, C.H., Yang, B., Liu, T.: Efficient naming, addressing and profile services in Internet-of-Things sensory environments. Ad Hoc Netw. 18, 85\u2013101 (2013)","journal-title":"Ad Hoc Netw."},{"key":"526_CR32","doi-asserted-by":"publisher","first-page":"146","DOI":"10.1016\/j.comnet.2014.11.008","volume":"76","author":"S Sicari","year":"2015","unstructured":"Sicari, S., Rizzardi, A., Grieco, L.A., Coen-Porisini, A.: Security, privacy and trust in internet of things: the road ahead. Comput. Netw. 76, 146\u2013164 (2015)","journal-title":"Comput. Netw."},{"key":"526_CR33","doi-asserted-by":"crossref","unstructured":"Moldovan, G., Tragos, E.Z., Fragkiadakis, A., Pohls, H.C., Calvo, D.: An IoT middleware for enhanced security and privacy: the RERUM approach. In: 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS), IEEE, pp. 1\u20135 (2016)","DOI":"10.1109\/NTMS.2016.7792434"},{"key":"526_CR34","doi-asserted-by":"publisher","first-page":"688","DOI":"10.1016\/j.future.2017.12.031","volume":"87","author":"B Mukherjee","year":"2018","unstructured":"Mukherjee, B., Wang, S., Lu, W., Neupane, R., Dunn, D., Ren, Y., Su, Q., Calyam, P.: Flexible IoT security middleware for end-to-end cloud-fog communication. Future Gener. Comput. Syst. 87, 688\u2013703 (2018)","journal-title":"Future Gener. Comput. Syst."},{"issue":"4","key":"526_CR35","doi-asserted-by":"publisher","first-page":"673","DOI":"10.1109\/TPDS.2010.130","volume":"22","author":"S Yu","year":"2011","unstructured":"Yu, S., Ren, K., Lou, W.: FDAC: toward fine-grained distributed data access control in wireless sensor networks. IEEE Trans. Parallel Distrib. Syst. 22(4), 673\u2013686 (2011)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"526_CR36","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1016\/j.future.2014.10.010","volume":"49","author":"X Yao","year":"2015","unstructured":"Yao, X., Chen, Z., Tian, Y.: A lightweight attribute-based encryption scheme for the Internet of Things. Future Gener. Comput. Syst. 49, 104\u2013112 (2015). https:\/\/doi.org\/10.1016\/j.future.2014.10.010","journal-title":"Future Gener. Comput. Syst."},{"key":"526_CR37","doi-asserted-by":"publisher","first-page":"3273","DOI":"10.1109\/ACCESS.2017.2669940","volume":"5","author":"V Odelu","year":"2017","unstructured":"Odelu, V., Das, A.K., Khan, M.K., Choo, K.K.R., Jo, M.: Expressive CP-ABE scheme for mobile devices in IoT satisfying constant-size keys and ciphertexts. IEEE Access 5, 3273\u20133283 (2017)","journal-title":"IEEE Access"},{"issue":"12","key":"526_CR38","doi-asserted-by":"publisher","first-page":"22619","DOI":"10.3390\/s141222619","volume":"14","author":"P Picazo-Sanchez","year":"2014","unstructured":"Picazo-Sanchez, P., Tapiador, J.E., Peris-Lopez, P., Suarez-Tangil, G.: Secure publish-subscribe protocols for heterogeneous medical wireless body area networks. Sensors 14(12), 22619\u201322642 (2014)","journal-title":"Sensors"},{"key":"526_CR39","doi-asserted-by":"crossref","unstructured":"Singh, M., Rajan, M., Shivraj, V., Balamuralidhar, P.: Secure MQTT for Internet of Things (IoT). In: 2015 Fifth International Conference on Communication Systems and Network Technologies (CSNT), IEEE, pp. 746\u2013751 (2015)","DOI":"10.1109\/CSNT.2015.16"},{"key":"526_CR40","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1016\/j.comcom.2018.08.010","volume":"130","author":"JL Hern\u00e1ndez-Ramos","year":"2018","unstructured":"Hern\u00e1ndez-Ramos, J.L., P\u00e9rez, S., Hennebert, C., Bernab\u00e9, J.B., Denis, B., Macabies, A., Skarmeta, A.F.: Protecting personal data in IoT platform scenarios through encryption-based selective disclosure. Comput. Commun. 130, 20\u201337 (2018)","journal-title":"Comput. Commun."},{"key":"526_CR41","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1016\/j.comcom.2019.10.005","volume":"149","author":"M Rasori","year":"2020","unstructured":"Rasori, M., Perazzo, P., Dini, G.: A lightweight and scalable attribute-based encryption system for smart cities. Comput. Commun. 149, 78\u201389 (2020)","journal-title":"Comput. Commun."},{"key":"526_CR42","doi-asserted-by":"crossref","unstructured":"La\u00a0Manna, M., Perazzo, P., Rasori, M., Dini, G.: Fabelous: an attribute-based scheme for industrial internet of things. In: 2019 IEEE International Conference on Smart Computing (SMARTCOMP), IEEE, pp. 33\u201338 (2019)","DOI":"10.1109\/SMARTCOMP.2019.00025"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00526-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-020-00526-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00526-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,11,29]],"date-time":"2022-11-29T09:20:34Z","timestamp":1669713634000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-020-00526-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,23]]},"references-count":42,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2021,10]]}},"alternative-id":["526"],"URL":"https:\/\/doi.org\/10.1007\/s10207-020-00526-3","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,11,23]]},"assertion":[{"value":"23 November 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"Sabrina Sicari declares that she has no conflict of interest. Alessandra Rizzardi declares that she has no conflict of interest. Michele La Manna declares that he has no conflict of interest. Pericle Perazzo declares that he has no conflict of interest. Gianluca Dini declares that he has no conflict of interest. Alberto Coen-Porisini declares that he has no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}