Assured Data Deletion With Fine-Grained Access Control for Fog-Based Industrial Applications

Abstract

The advances of cloud computing, fog computing and Internet of Things (IoT) make industries more prosperous than ever. However, in this sophisticated system security and privacy issues are major concerns. In this paper, we focus on the issue of assured data deletion. We firstly propose a framework to integrate the cloud, the fog and the things together to manage stored data from industries or individuals. We then focus on secure data deletion in this framework by proposing an assured data deletion scheme which fulfills verifiable data deletion as well as flexible access control over sensitive data. Only data owners and fog devices are involved when deleting cloud data and validating the deletion of these data, which makes the protocol practical. The proposed protocol takes advantage of attribute-based encryption, whose security can be proved under standard model. The theoretical analysis and the implementation results demonstrate the feasibility of our proposal.