PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control

摘要

With the fast development of mobile Internet, ecommerce has been widely applied to the living of the masses. Because of the strong dependence of e-commerce, logistics industry has attracted much attention. However, when users get convenient service from the logistics industry, their privacy is compromised. Addresses, phone numbers and other private information on the parcel are accessible to anyone. Moreover, because users' logistics data is stored in plaintext in the companies' servers, it is vulnerable to the peep from staffs in the company and even the Hackers. This paper presents the first logistics system, PriExpress, which protects the users' privacy and ensures the efficient delivery of the parcel at the same time. To address the above problem, we improved attribute based encryption with a hidden access tree. Based on users' attributes, we enforce fine-grained access control on the logistic data. Our security and performance analysis shows that PriExpress is both secure and efficient.