Sticky-PRE: A Sticky Proxy Re-Encryption Protocol for Persistent Vehicle Data Privacy

Connected vehicles generate a vast amount of data and share it with external entities such as the cloud, neighboring vehicles, Road-Side Units (RSUs), and other third-party services in a Vehicle to Everything (V2X) setting. This data is vulnerable and can lead to the leakage of personal information of vehicle owners, such as driving habits, travel routes, and identity theft, among others. Moreover, with the implementation of the General Data Protection Regulation (GDPR), it becomes imperative to empower users with control over their data and the ability to choose whom they share it with. To address this objective, we present a protocol that utilizes a combination of sticky policies and a proxy re-encryption scheme. This protocol ensures that user-defined access controls on the data persist even when crossing organizational boundaries and addresses the confidentiality, integrity, and accountability of vehicle data. Furthermore, we assess our protocol using a semi-honest threat model and analyze its vulnerabilities. Lastly, we perform a quantitative analysis of the data flow model to observe the system's performance.