Data aggregation plays a crucial role in smart grid communication as it enables the collection of data in an energy-efficient manner. However, the widespread deployment of smart meters has raised significant concerns regarding the privacy of users' personal data. Therefore, in this paper, we present an efficient and privacy-preserving data aggregation and trust management scheme (PATM) for an IoT-enabled smart grid based on smart contract. Firstly, we propose a five-layer architecture for smart grid communication to support secure and efficient data aggregation and management. Under the architecture, the Boneh-Goh-Nissim cryptosystem with blind factor is improved to facilitate privacy protection. In addition, the tamper-evident nature of blockchain is utilized for effective data management. Our designs also enhance the resistance to differential attack and prevent privacy breaches during the aggregation process. Detailed security proof and theoretical analysis confirm that our PATM can satisfies the necessary security and privacy requirements while maintaining the required efficiency for smart grid operations. Furthermore, comparative experiments demonstrate that PATM outperforms other proposed work in terms of storage cost, computational complexity, and utility of differential privacy.

Currently, the conventional mode of power data transaction is mediated by web pages. Nevertheless, there are challenging issues such as privacy protection, transaction security and data reliability in power data trading. In this paper, we present a novel secure power data trading scheme (SPDTS). Firstly, the zero-knowledge proof is employed to achieve data availability and consistency without revealing the data. Then, SPDTS takes full advantage of the dispersibility and immutability of blockchain to ensure the reliability of data transactions. To keep the transaction process efficient, the processing tasks for power data are performed under smart contract. Meanwhile, a trusted execution environment (TEE) is adopted to guarantee the security of power data. Finally, we present a differential privacy scheme to safeguard the privacy information in the power data. Our study indicates that the proposed scheme can achieve privacy protection, transaction security and data reliability. Also, we conduct security analysis and verify the privacy protection property of the scheme in real cases.

As one of the key technologies to enable the internet of things (IoT), cloud computing plays a significant role in providing huge computing and storage facilities for large-scale data. Though cloud computing brings great advantages, new issues emerge, such as data security breach and privacy disclosure. In this paper, we introduce a novel secure and privacy-preserving outsourcing computing scheme (hereafter referred to as SPOCS) to tackle this issue. In SPOCS, the effective use of Intel SGX, one of the trusted execution environment (TEE), ensures the confidence and integrity of sensitive data in cloud computing and prevents data loss from causing privacy disclosure. In order to keep malicious cloud service providers (CSPs) from illegally tampering with the outsourcing results, blockchain is employed to ensure the data immutability. Significantly, our proposed scheme achieves anonymity and traceability. In the outsourcing process, smart contracts are applied to make the whole process fully automated without any human involvement. Finally, the security of the proposed scheme is analyzed in terms of its resistance to different attacks. The experiments indicate that our scheme is effective and efficient.

Internet of Medical Things (IoMT) technologies significantly improve the quality of health care, especially at the time when COVID-19 is becoming a worldwide pandemic. Due to the complexity of devices and user nodes in the IoMT system, there should be some ways to ensure the security and quality of the service or information. Decentralized trust management techniques are efficient means of promoting application security and reliability in these cases. However, the majority of currently utilized access control schemes cannot be applied in decentralized trust management systems or perform poorly owing to the numerous restrictions of decentralized systems. In this paper, we present a policy-hiding and multi-authority key generation CP-ABE scheme (PM-CPABE) for decentralized trust management systems, which could provide fine-grained access control capabilities. Meanwhile, the proposed scheme does not require any fully trusted entity, thus it can be well adapted to decentralized trust management systems. The scheme also implements policy hiding to protect user privacy. In addition, it supports large universe and outsourced decryption. The security analyses and performance comparisons give evidence of our scheme is security and efficient.

The rapid evolution of the smart grid has made the security and reliability of communication within the power system an urgent and critically important issue. To address this challenge, authentication and key agreement (AKA) protocols have gained significant attention and are regarded as indispensable tools for ensuring the secure operation of the smart grid. However, traditional AKA protocols are plagued by a series of issues, including cumbersome certificate management, delayed certificate revocation, and vulnerability to man-in-the-middle attacks. With the emergence of certificateless public key cryptography (CL-PKC), the integration of conventional AKA protocols with CL-PKC has emerged as a prominent trend. This article presents an enhanced certificateless AKA protocol for smart grids, named ECL-AKA. First, this article outlines the architecture and security model of this protocol. Subsequently, it presents the complete workflow of the ECL-AKA protocol. Notably, the ECL-AKA protocol introduces a private key verification step before key agreement, allowing for rapid screening of malicious requests at a lower computational cost, thereby enhancing the protocol’s resistance to various types of attacks. In addition, the ECL-AKA’s security is formally established through rigorous theoretical proofs based on the random oracle model in this article. Finally, comparative experimental analysis demonstrates that the ECL-AKA exhibits lower computational and communication overhead while satisfying essential security attributes.

Amidst the rapid advancements in metaverse and consumer electronics technology, individuals now have the opportunity to engage in immersive interactive experiences. However, the intimate connection between user data within the metaverse and their real-world identities necessitates the implementation of methods to safeguard the security of user data. Cryptography emerges as a prevalent tool for ensuring data security and consistency. Nevertheless, the inherent features of the metaverse, such as decentralization, pose challenges, rendering many access control strategies either inapplicable or ineffective. This paper proposes a privacy-aware and revocable CP-ABE scheme with fair outsourcing decryption (PRE-CPABE) based on blockchain. The scheme provides fine-grained access control capabilities without requiring a completely trusted central entity. Furthermore, we implement access control policy hiding to shield user privacy. We also consider fairness to both the user and the outsourced service provider. Through rigorous security analysis and performance comparisons, we demonstrate the efficacy of our scheme, showcasing its excellence in both security and efficiency.