Description

We present the design, implementation, and evaluation of a novel approach, Priccess, to ensure distributed privacy-preserving access control. In Priccess, users who have similar access privileges are organized into the same group by the network owner. A network user signs a query command on behalf of his group and then sends the signed query to the sensor nodes of his interest. The signature can be verified by its recipient as coming from someone authorized without exposing the actual signer. Therefore, a user might not want the WSNs or others to associate his identity to the data he requests, or the time he accesses the network. In particular, a user may wish to keep confidential whether he accessed the sensor data, the data types he was interested in, or from which nodes he obtained the data, since the disclosure of such information may be used against his interest. we assume that the adversary may compromise and control a number of sensor nodes subject to his choice. Additionally, we consider two sybil attacks: one is that the network owner could add a user to a group in which other users are impersonated by the network owner, this would remove the anonymity of this user.