End to End Secure Data Exchange in Value Chains with Dynamic Policy Updates
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2022
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866909188204003328 |
|---|---|
| author | Mosteiro-Sanchez, Aintzane Barcelo, Marc Astorga, Jasone Urbieta, Aitor |
| author_facet | Mosteiro-Sanchez, Aintzane Barcelo, Marc Astorga, Jasone Urbieta, Aitor |
| contents | Data exchange among value chain partners provides them with a competitive advantage, but the risk of exposing sensitive data is ever-increasing. Information must be protected in storage and transmission to reduce this risk, so only the data producer and the final consumer can access or modify it. End-to-end (E2E) security mechanisms address this challenge, protecting companies from data breaches resulting from value chain attacks. Moreover, value chain particularities must also be considered. Multiple entities are involved in dynamic environments like these, both in data generation and consumption. Hence, a flexible generation of access policies is required to ensure that they can be updated whenever needed. This paper presents a CP-ABE-reliant data exchange system for value chains with E2E security. It considers the most relevant security and industrial requirements for value chains. The proposed solution can protect data according to access policies and update those policies without breaking E2E security or overloading field devices. In most cases, field devices are IIoT devices, limited in terms of processing and memory capabilities. The experimental evaluation has shown the proposed solution's feasibility for IIoT platforms. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2201_06335 |
| institution | arXiv |
| publishDate | 2022 |
| record_format | arxiv |
| spellingShingle | End to End Secure Data Exchange in Value Chains with Dynamic Policy Updates Mosteiro-Sanchez, Aintzane Barcelo, Marc Astorga, Jasone Urbieta, Aitor Cryptography and Security Data exchange among value chain partners provides them with a competitive advantage, but the risk of exposing sensitive data is ever-increasing. Information must be protected in storage and transmission to reduce this risk, so only the data producer and the final consumer can access or modify it. End-to-end (E2E) security mechanisms address this challenge, protecting companies from data breaches resulting from value chain attacks. Moreover, value chain particularities must also be considered. Multiple entities are involved in dynamic environments like these, both in data generation and consumption. Hence, a flexible generation of access policies is required to ensure that they can be updated whenever needed. This paper presents a CP-ABE-reliant data exchange system for value chains with E2E security. It considers the most relevant security and industrial requirements for value chains. The proposed solution can protect data according to access policies and update those policies without breaking E2E security or overloading field devices. In most cases, field devices are IIoT devices, limited in terms of processing and memory capabilities. The experimental evaluation has shown the proposed solution's feasibility for IIoT platforms. |
| title | End to End Secure Data Exchange in Value Chains with Dynamic Policy Updates |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2201.06335 |