{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,3]],"date-time":"2026-03-03T15:36:31Z","timestamp":1772552191810,"version":"3.50.1"},"reference-count":37,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2017,6,17]],"date-time":"2017-06-17T00:00:00Z","timestamp":1497657600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61502134"],"award-info":[{"award-number":["61502134"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>In the fog computing environment, the encrypted sensitive data may be transferred to multiple fog nodes on the edge of a network for low latency; thus, fog nodes need to implement a search over encrypted data as a cloud server. Since the fog nodes tend to provide service for IoT applications often running on resource-constrained end devices, it is necessary to design lightweight solutions. At present, there is little research on this issue. In this paper, we propose a fine-grained owner-forced data search and access authorization scheme spanning user-fog-cloud for resource constrained end users. Compared to existing schemes only supporting either index encryption with search ability or data encryption with fine-grained access control ability, the proposed hybrid scheme supports both abilities simultaneously, and index ciphertext and data ciphertext are constructed based on a single ciphertext-policy attribute based encryption (CP-ABE) primitive and share the same key pair, thus the data access efficiency is significantly improved and the cost of key management is greatly reduced. Moreover, in the proposed scheme, the resource constrained end devices are allowed to rapidly assemble ciphertexts online and securely outsource most of decryption task to fog nodes, and mediated encryption mechanism is also adopted to achieve instantaneous user revocation instead of re-encrypting ciphertexts with many copies in many fog nodes. The security and the performance analysis show that our scheme is suitable for a fog computing environment.<\/jats:p>","DOI":"10.3390\/s17061423","type":"journal-article","created":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T10:29:26Z","timestamp":1497868166000},"page":"1423","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":34,"title":["A Hybrid Scheme for Fine-Grained Search and Access Authorization in Fog Computing Environment"],"prefix":"10.3390","volume":"17","author":[{"given":"Min","family":"Xiao","sequence":"first","affiliation":[{"name":"School of Cyber Security and Information Law, Chongqing University of Posts and Telecommunicaitons, Chongqing 400065, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Chongqing University of Posts and Telecommunicaitons, Chongqing 400065, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xuejiao","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute of Service Engineering, Hangzhou Normal University, Hangzhou 311121, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingda","family":"Jiang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Chongqing University of Posts and Telecommunicaitons, Chongqing 400065, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2017,6,17]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Bonomi, F., Milito, R., Zhu, J., and Addepalli, S. (2012, January 17). Fog Computing and its Role in the Internet of Things. Proceedings of the first edition of the MCC workshop on Mobile cloud computing, Helsinki, Finland.","DOI":"10.1145\/2342509.2342513"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Stojmenovic, I., and Wen, S. (2014, January 7\u201310). The Fog computing paradigm: Scenarios and security issues. Proceedings of the Federated Conference on Computer Science and Information Systems, Warsaw, Poland.","DOI":"10.15439\/2014F503"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Yi, S., Li, C., and Li, Q. (2015, January 21). A Survey of Fog Computing: Concepts, Applications and Issues. Proceedings of the 2015 Workshop on Mobile Big Data, Hangzhou, China.","DOI":"10.1145\/2757384.2757397"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Goyal, V., Pandey, O., Sahai, A., and Waters, B. (November, January 30). Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the ACM Conference on Computer and Communications Security, CCS 2006, Alexandria, VA, USA.","DOI":"10.1145\/1180405.1180418"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Bethencourt, J., Sahai, A., and Waters, B. (2007, January 20\u201323). Ciphertext-Policy Attribute-Based Encryption. Procededings of the IEEE Symposium on Security and Privacy, 2007, Berkeley, CA, USA.","DOI":"10.1109\/SP.2007.11"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1109\/TPDS.2012.97","article-title":"Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption","volume":"24","author":"Li","year":"2013","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_7","unstructured":"Zuo, C., Shao, J., Wei, G., Xie, M., and Ji, M. (2016). CCA-secure ABE with outsourced decryption for fog computing. Future Gener. Comput. Syst."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Jiang, Y., Susilo, W., Mu, Y., and Guo, F. (2017). Ciphertext-policy attribute-based encryption against key-delegation abuse in fog computing. Future Gener. Comput. Syst.","DOI":"10.1016\/j.future.2017.01.026"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Yu, Z., Man, H.A., Xu, Q., Yang, R., and Han, J. (2017). Towards leakage-resilient fine-grained access control in fog computing. Future Gener. Comput. Syst.","DOI":"10.1016\/j.future.2017.01.025"},{"key":"ref_10","unstructured":"Zhang, P., Chen, Z., Liu, J.K., Liang, K., and Liu, H. (2016). An efficient access control scheme with outsourcing capability and attribute update for fog computing. Future Gener. Comput. Syst."},{"key":"ref_11","unstructured":"Song, D.X., Wagner, D., and Perrig, A. (2000, January 14\u201317). Practical techniques for searches on encrypted data. Proceedings of the IEEE Symposium on Security & Privacy, Berkeley, CA, USA."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2636328","article-title":"A Survey of Provably Secure Searchable Encryption","volume":"47","author":"Bosch","year":"2015","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Chang, Y.C., and Mitzenmacher, M. (2005, January 7\u201310). Privacy Preserving Keyword Searches on Remote Encrypted Data. Proceedings of the Applied Cryptography and Network Security, ANCS 2005, LNCS, Cambridge, MA, USA.","DOI":"10.1007\/11496137_30"},{"key":"ref_14","first-page":"79","article-title":"Searchable symmetric encryption: Improved definitions and efficient constructions","volume":"19","author":"Curtmola","year":"2011","journal-title":"J. Comput. Secur."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Yang, Y., Lu, H., and Weng, J. (December, January 29). Multi-user private keyword search for cloud computing. Proceedings of the 2011 IEEE Third International Conference on Cloud Computing Technology and Science (CloudCom), Athens, Greece.","DOI":"10.1109\/CloudCom.2011.43"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Sun, W.H., Yu, S.C., Lou, W.J., Hou, Y.T., and Li, H. (May, January 27). Protecting your right: Attribute-based keyword search with fine-grained owner-enforced search authorization in the cloud. Proceedings of the INFOCOM, Toronto, ON, Canada.","DOI":"10.1109\/TPDS.2014.2355202"},{"key":"ref_17","unstructured":"Dan, B., Crescenzo, G.D., Ostrovsky, R., and Persiano, G. (2003). Public Key Encryption with Keyword Search. Advances in Cryptology-EUROCRYPT 2004, Springer."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"217","DOI":"10.1007\/11836810_16","article-title":"On the Integration of Public Key Data Encryption and Public Key Encryption with Keyword Search","volume":"Volume 4176","author":"Baek","year":"2006","journal-title":"Information Security"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1981","DOI":"10.1109\/TIFS.2015.2442215","article-title":"Searchable Attribute-Based Mechanism With Efficient Data Sharing for Secure Cloud Storage","volume":"10","author":"Liang","year":"2015","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1109\/MM.2016.101","article-title":"On the Feasibility of Attribute-Based Encryption on Internet of Things Devices","volume":"36","author":"Ambrosin","year":"2016","journal-title":"IEEE Micro"},{"key":"ref_21","first-page":"34","article-title":"Outsourcing the decryption of ABE ciphertexts","volume":"Volume 49","author":"Green","year":"2011","journal-title":"Usenix Conference on Security"},{"key":"ref_22","first-page":"592","article-title":"Fine-Grained Access Control System Based on Outsourced Attribute-Based Encryption","volume":"8134","author":"Li","year":"2013","journal-title":"Comput. Secur. Esorics"},{"key":"ref_23","first-page":"293","article-title":"Online\/offline attribute-based encryption","volume":"Volume 8383","author":"Hohenberger","year":"2014","journal-title":"Public-Key Cryptography, PKC"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"309","DOI":"10.1007\/978-3-642-10838-9_23","article-title":"Mediated Ciphertext-Policy Attribute-Based Encryption and Its Application","volume":"Volume 5932","author":"Luan","year":"2009","journal-title":"Information Security Applications"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"457","DOI":"10.1007\/11426639_27","article-title":"Fuzzy Identity-Based Encryption","volume":"3494","author":"Sahai","year":"2004","journal-title":"Lect. Notes Comput. Sci."},{"key":"ref_26","unstructured":"Cheung, L., and Newport, C. (November, January 29). Provably secure ciphertext policy ABE. Proceedings of the ACM Conference on Computer and Communications Security, Alexandria, VA, USA."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Pirretti, M., Traynor, P., Mcdaniel, P., and Waters, B. (November, January 30). Secure attribute-based systems. Proceedings of the ACM Conference on Computer and Communications Security, CCS 2006, Alexandria, VA, USA.","DOI":"10.1145\/1180405.1180419"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Yang, K., Jia, X., and Ren, K. (2013, January 8\u201310). Attribute-based fine-grained access control with efficient revocation in cloud storage systems. Proceedings of the ACM Sigsac Symposium on Information, Computer and Communications Security, Hangzhou, China.","DOI":"10.1145\/2484313.2484383"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"172","DOI":"10.1109\/TCC.2013.11","article-title":"Hybrid attribute- and re-encryption-based key management for secure and scalable mobile applications in clouds","volume":"1","author":"Tysowski","year":"2013","journal-title":"IEEE Trans. Cloud Comput."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Zhang, R., and Imai, H. (2007). Generic Combination of Public Key Encryption with Keyword Search and Public Key Encryption. Cryptology and Network Security, Springer.","DOI":"10.1007\/978-3-540-76969-9_11"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"493","DOI":"10.1007\/s10623-014-0014-x","article-title":"Generic constructions of integrated PKE and PEKS","volume":"78","author":"Chen","year":"2016","journal-title":"Des. Codes Cryptogr."},{"key":"ref_32","unstructured":"Wang, P., Wang, H., and Pieprzyk, J. (2008, January 19\u201325). Threshold privacy preserving keyword searches. Proceedings of the International Conference on Current Trends in Theory and Practice of Informatics, Novy Smokovec, Slovakia."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Wang, P., Wang, H., and Pieprzyk, J. (2008, January 23\u201325). An Efficient Scheme of Common Secure Indices for Conjunctive Keyword-Based Retrieval on Encrypted Data. Proceedings of the International Workshop on Information Security Applications, Jeju Island, Korea.","DOI":"10.1007\/978-3-642-00306-6_11"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1187","DOI":"10.1109\/TPDS.2014.2355202","article-title":"Protecting Your Right: Verifiable attribute-based keyword search with fine-grained owner-enforced search authorization in the cloud","volume":"27","author":"Sun","year":"2016","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_35","unstructured":"Cohen, W.W. (2016, July 26). Enron Email Dataset. Available online: https:\/\/www.cs.cmu.edu\/enron\/."},{"key":"ref_36","unstructured":"(2017, May 12). Pairing-Based Cryptography Libray. Available online: http:\/\/crypto.stanford.edu\/pbc\/."},{"key":"ref_37","unstructured":"(2017, May 12). JPBC: The Java Pairing Based Cryptography Library. Available online: http:\/\/gas.dia.unisa.it\/projects\/jpbc\/."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/17\/6\/1423\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T18:39:28Z","timestamp":1760207968000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/17\/6\/1423"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,6,17]]},"references-count":37,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2017,6]]}},"alternative-id":["s17061423"],"URL":"https:\/\/doi.org\/10.3390\/s17061423","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,6,17]]}}}