TLDR: This research introduces a novel decentralized data sharing system for Intelligent Transportation Systems (ITS) that combines a relay chain with a modified Ciphertext-Policy Attribute-Based Encryption (CP-ABE) scheme. The system uses regional blockchains for local data storage and a global relay chain for policy coordination, context-aware encryption switching, and cross-regional access. It enables On-Board Units (OBUs) to encrypt data based on dynamic security flags, ensuring fine-grained access control, traceability, and efficient revocation. Performance analysis demonstrates superior computational efficiency and optimized storage costs compared to existing methods, making it highly suitable for secure and scalable vehicular networks.
Intelligent Transportation Systems (ITS) are rapidly expanding, creating an urgent need for secure, efficient, and context-aware ways to share data across diverse and widespread networks. These systems, which include the Internet of Vehicles (IoVs), face significant challenges such as ensuring data security, maintaining data availability, protecting user privacy, and managing the immense volume of data generated by smart cars. Traditional solutions often suffer from single points of failure, limited coverage, and vulnerability to malicious attacks.
To address these critical issues, a new architecture has been proposed that combines a relay chain-driven encryption system with a modified Ciphertext-Policy Attribute-Based Encryption (CP-ABE) scheme. This innovative approach aims to overcome the dual challenges of dynamic access control and low-latency communication in modern vehicular networks.
The Core Architecture
The proposed system, called RC-CP-ABE, operates on a two-layer blockchain architecture:
- On-Board Units (OBUs): These are devices in vehicles that sense and generate traffic-related information, such as accident warnings or vehicle speed. OBUs are responsible for encrypting data in real-time and sending it to the nearest regional blockchain.
- Roadside Units (RSUs): These act as support nodes for OBUs, assisting with communication, routing, and query forwarding, especially when OBUs are resource-limited or disconnected.
- Regional Blockchains: Each geographical area has its own blockchain ledger to store encrypted traffic data from local OBUs. These blockchains ensure data persistence, local access control, and traceability.
- Relay Chain: This serves as a global controller, connecting all regional blockchains. It manages attribute definitions, access templates, user revocation lists, and context-aware encryption policies. A smart contract on the relay chain dynamically determines the appropriate encryption policy based on the data’s context.
- Trusted Authority (TA): A centralized or federated entity responsible for the initial setup of the CP-ABE scheme, including generating public parameters and master secret keys, and issuing private attribute keys to authorized users like traffic police or emergency teams.
- Authorized Users: Entities such as traffic management centers or police officers who can decrypt data if their attribute keys match the policy embedded in the ciphertext.
Context-Aware Encryption and Data Flow
The system’s communication begins when an OBU collects traffic information. Before encryption, the OBU queries the relay chain’s smart contract with metadata like event type, region, and timestamp. The smart contract evaluates this against global policies and responds with a security flag. If the flag indicates a high-sensitivity event (e.g., a night accident in a critical region), the OBU applies a strict CP-ABE policy requiring multiple attributes for access. For non-sensitive information (e.g., a weather report), a more relaxed policy is used, or the data might even be transmitted without encryption to reduce processing burdens.
The encrypted data is then stored in the relevant regional blockchain. If the relay chain identifies the data as having broader importance, it also stores the ciphertext or a secure pointer to it on the relay chain, enabling cross-regional access for authorized users. This dual storage mechanism ensures both local responsiveness and global accessibility.
Security, Traceability, and Efficiency
The proposed RC-CP-ABE scheme is designed for robust security and efficiency. It achieves strong security against chosen-plaintext attacks, relying on the Decisional Bilinear Diffie-Hellman (DBDH) problem’s hardness. Furthermore, it guarantees traceability, meaning that any user who accesses data can be identified, thanks to their encrypted identity being embedded in their secret key. This feature enhances accountability and transparency.
Performance evaluations show that the system is computationally efficient. Key generation, encryption, and decryption costs are significantly reduced compared to existing schemes. For instance, the encryption time remains constant regardless of the attribute set size, and decryption time is notably lower. The storage overhead for secret keys, public parameters, and ciphertext is also optimized, making it suitable for resource-constrained devices like OBUs in ITS environments. The use of smart contracts on the relay chain also enables automatic revocation and attribute updates, reducing latency and improving responsiveness.
Also Read:
- Securing Space Networks: A New Approach to Understanding Cyber-Physical Threats
- Enhancing Urban Mobility Simulations with AI: The Preference Chain Approach
Looking Ahead
This novel decentralized data sharing system offers a balanced solution for real-time responsiveness and security in next-generation vehicular networks. By integrating an enhanced CP-ABE scheme with local and relay blockchains, it improves trust, transparency, and auditability while providing efficient and secure data storage. The system’s regional scalability and superior computational efficiency make it highly suitable for real-world deployment in complex urban IoV settings. Future work aims to expand the model to include dynamic, real-time updates of various policy types based on contextual information like traffic flow or environmental data, further enhancing its usability. For more details, you can refer to the original research paper.
