- Conference Paper
Rights / licenseIn Copyright - Non-Commercial Use Permitted
IoT applications often utilize the cloud to store and provide ubiquitous access to collected data. This naturally facilitates data sharing with third-party services and other users, but bears privacy risks, due to data breaches or unauthorized trades with user data. To address these concerns, we present Pilatus, a data protection platform where the cloud stores only encrypted data, yet is still able to process certain queries (e.g., range, sum). More importantly, Pilatus features a novel encrypted data sharing scheme based on re-encryption, with revocation capabilities and in situ key-update. Our solution includes a suite of novel techniques that enable efficient partially homomorphic encryption, decryption, and sharing. We present performance optimizations that render these cryptographic tools practical for mobile platforms. We implement a prototype of Pilatus and evaluate it thoroughly. Our optimizations achieve a performance gain within one order of magnitude compared to state-of-the-art realizations; mobile devices can decrypt hundreds of data points in a few hundred milliseconds. Moreover, we discuss practical considerations through two example mobile applications (Fitbit and Ava) that run Pilatus on real-world data. Show more
Book titleProceedings of the 15th ACM Conference on Embedded Network Sensor System (SenSys '17)
Pages / Article No.
SubjectIoT; Encryption; Sharing; Encrypted Data Processing; Homomorphic Encryption; Security
Organisational unit03528 - Mattern, Friedemann / Mattern, Friedemann
NotesConference lecture on 8 November 2017.
MoreShow all metadata