Research On Privacy Protection Mechanism Of Integrated Access Control In Crowd Sensing

In recent years,with the rise of the crowd sensing,it has provided technical support for realizing the comprehensive sensing of the Internet of Things(IoT).With the increasing awareness of privacy protection,people's willingness to participate in crowd sensing is not high.Therefore,it is especially important to implement privacy protection in this kind of application,which is an important prerequisite for people to participate in crowd sensing.Integrating access control ideas into crowd sensing privacy protection can control the access rights of different entities to sensitive data,making them unable to directly access real data and prevent the disclosure of private information.The work of this paper is as follows:1.We proposed a privacy protection mechanism based on homomorphic encryption for the crowd sensing.Reduce the requester's computing and storage burden by introducing a third-party cloud as an aggregation server.Integrating access control,homomorphic encryption,data segmentation,etc.,proposes a data processing scheme based on homomorphic encryption and a data submission scheme based on data segmentation.In these way,the authority to control access to the sensitive data of different entities is achieved,so that the requester,the cloud,the external attacker,etc.can not directly access the real sensing data and extract the user's privacy,and solve the privacy leakage problem when happened collusion attack and the requester eavesdropping in the cloud.Combined with the k-anonymity mechanism,users can participate in sensing tasks anonymously and protect identity privacy.2.In order to reduce the cost of users and ensure the availability of data while implementing privacy protection,a privacy protection mechanism based on data perturbation for the crowd sensing is proposed.First,adding a noise key that can be eliminated to the sensing data for lightweight encryption,reducing the cost of the user and ensuring the availability of the data.Then,using the proposed group collaborative data submission scheme that can dynamically join and exit,the privacy protection problem in the case of collusion attack is solved.Through the above two schemes,the purpose of controlling the access rights of the sensing data is achieved.Finally,the integrity and non-repudiation of the data are guaranteed by the introduced certificateless signature scheme,and the burden of the third party cloud is reduced by the signature batch verification.