The Internet of Things (IoT) is an information service paradigm based on the integration of smart objects, mobile devices, and computers via the Internet. IoT technologies are key enablers for a multitude of applications in diverse fields, such as digital health, smart city, industrial automation, and supply chain. This raises new security and privacy challenges that can be addressed by advanced cryptographic methods. One of the most prominent is attribute-based encryption (ABE), which allows one to encrypt data while enforcing fine-grained access control on it. ABE is advantageous in many IoT applications since it allows data to be safely stored on untrusted storage, such as third-party cloud servers, hackable publish-subscribe brokers, physically accessible sensors, etc. This article surveys the ABE literature proposing schemes and solutions that are best suited for IoT applications. To do so, it first identifies three performance indicators that are key in IoT, namely, the data producer CPU efficiency, the data producer bandwidth efficiency, and the key authority bandwidth efficiency. Then, it analyzes only those schemes that are promising from the point of view of one or more indicators and, therefore, more applicable in typical IoT applications. As a further contribution, this article selects a subset of representative schemes and assesses their efficiency by thorough simulations. Such simulations show that no scheme excels in all three performance indicators at once, but some simultaneously perform well in two indicators.

中文翻译：

---

适用于物联网的基于属性的加密方案综述


物联网（IoT）是一种基于智能对象、移动设备和计算机通过互联网集成的信息服务范式。物联网技术是数字健康、智慧城市、工业自动化和供应链等不同领域众多应用的关键推动因素。这提出了新的安全和隐私挑战，可以通过先进的加密方法来解决。其中最突出的一种是基于属性的加密 (ABE)，它允许对数据进行加密，同时对其实施细粒度的访问控制。 ABE 在许多物联网应用中具有优势，因为它允许数据安全地存储在不受信任的存储上，例如第三方云服务器、可破解的发布-订阅代理、物理可访问的传感器等。本文调查了 ABE 文献，提出了以下方案和解决方案：最适合物联网应用。为此，它首先确定了物联网中关键的三个性能指标，即数据生产者CPU效率、数据生产者带宽效率和关键权限带宽效率。然后，它仅分析那些从一个或多个指标的角度来看有前景的方案，因此更适用于典型的物联网应用。作为进一步的贡献，本文选择了代表性方案的子集，并通过彻底的模拟来评估其效率。这样的模拟表明，没有一个方案能够同时在所有三个性能指标上表现出色，但有些方案同时在两个指标上表现良好。