In the Internet of Things (IoT) environment, the intelligent devices collect and share large-scale sensitive personal data for a wide range of application. However, the power of storage and computing of IoT devices is limited, so the mass perceived data will be encrypted and transmitted to a cloud platform-interconnected IoT devices. Therefore, the concern how to save the encryption/decryption cost and preserve the privacy of the sensitive data in IoT environment is an issue that deserves research. To mitigate these issues, an offline/online attribute-based encryption scheme that supports partial policy hidden and outsourcing decryption will be proposed. This scheme adopts offline/online attribute-based encryption algorithms; then, the key generation algorithm and encryption algorithm are divided into two stages: offline stage and online stage. Meanwhile, in order to solve the problem of policy disclosure under the cloud platform, the policy hidden is supported, that is, the attribute is divided into the attribute value and the attribute name. For the pairing operation involved in decryption process, a verifiable outsourced decryption is implemented. Our scheme is constructed based on composite bilinear groups, which meets full security under the standard model. Finally, by comparing with other schemes in terms of functionality and computational overhead, it is shown that the proposed scheme is more efficient and applicable to the mobile devices with limited computing and storage functions in the Internet of Things environment.

中文翻译：

---

对物联网隐藏了部分策略的离线/在线外包基于属性的加密

在物联网（IoT）环境中，智能设备收集并共享大规模敏感的个人数据，以用于广泛的应用程序。但是，物联网设备的存储和计算能力有限，因此，大量感知的数据将被加密并传输到与云平台互连的物联网设备。因此，如何在物联网环境中节省加密/解密成本并保护敏感数据的私密性是值得研究的问题。为了缓解这些问题，将提出一种支持部分策略隐藏和外包解密的基于离线/在线属性的加密方案。该方案采用离线/在线基于属性的加密算法；然后，将密钥生成算法和加密算法分为两个阶段：离线阶段和在线阶段。同时，为了解决云平台下的策略公开问题，支持隐藏策略，即将属性分为属性值和属性名称。对于解密过程中涉及的配对操作，实现了可验证的外包解密。我们的方案是基于复合双线性组构建的，在标准模型下可以满足完全安全性。最后，通过在功能和计算开销方面与其他方案进行比较，表明所提出的方案更加有效，适用于物联网环境中具有有限的计算和存储功能的移动设备。属性分为属性值和属性名称。对于解密过程中涉及的配对操作，实现了可验证的外包解密。我们的方案是基于复合双线性组构建的，在标准模型下可以满足完全安全性。最后，通过在功能和计算开销方面与其他方案进行比较，表明所提出的方案更加有效，适用于物联网环境中具有有限的计算和存储功能的移动设备。属性分为属性值和属性名称。对于解密过程中涉及的配对操作，实现了可验证的外包解密。我们的方案是基于复合双线性组构建的，在标准模型下可以满足完全安全性。最后，通过在功能和计算开销方面与其他方案进行比较，表明所提出的方案更加有效，适用于物联网环境中具有有限的计算和存储功能的移动设备。