Journal
IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING
Volume 18, Issue 3, Pages 1095-1107Publisher
IEEE COMPUTER SOC
DOI: 10.1109/TDSC.2019.2914911
Keywords
Smart home privacy; encrypted query; searchable encryption
Categories
Funding
- National Research Foundation, Prime Ministers Office, Singapore, under its Corporate Laboratory@University Scheme, National University of Singapore
- Singapore Telecommunications Ltd.
- National Natural Science Foundation of China [61632012, 61672239, 61822202, 61872087, 61872089]
Ask authors/readers for more resources
A smart home provides convenience and security for users, but concerns exist around security and privacy due to the potential leakage and unauthorized access of sensitive information. A proposed privacy-preserving scheme, PrivHome, aims to address these issues by ensuring data confidentiality, authentication, and privacy-preserving queries within smart home systems. The scheme utilizes symmetric cryptographic techniques for efficiency and effectiveness, demonstrating its practicality through experimental and simulation results.
Y A smart home enables users to access devices such as lighting, HVAC, temperature sensors, and surveillance camera. It provides a more convenient and safe living environment for users. Security and privacy, however, is a key concern since information collected from these devices are normally communicated to the user through an open network (i.e. Internet) or system provided by the service provider. The service provider may store and have access to these information. Emerging smart home hubs such as Samsung SmartThings and Google Home are also capable of collecting and storing these information. Leakage and unauthorized access to the information can have serious consequences. For example, the mere timing of switching on/off of an HVAC unit may reveal the presence or absence of the home owner. Similarly, leakage or tampering of critical medical information collected from wearable body sensors can have serious consequences. Encrypting these information will address the issues, but it also reduces utility since queries is no longer straightforward. Therefore, we propose a privacy-preserving scheme, PrivHome. It supports authentication, secure data storage and query for smart home systems. PrivHome provides data confidentiality as well as entity and data authentication to prevent an outsider from learning or modifying the data communicated between the devices, service provider, gateway, and the user. It further provides privacy-preserving queries in such a way that the service provider, and the gateway does not learn content of the data. To the best of our knowledge, privacy-preserving queries for smart home systems has not been considered before. Under our scheme is a new, lightweight entity and key-exchange protocol, and an efficient searchable encryption protocol. Our scheme is practical as both protocols are based solely on symmetric cryptographic techniques. We demonstrate efficiency and effectiveness of our scheme based on experimental and simulation results, as well as comparisons to existing smart home security protocols.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available