检索结果-内蒙古大学图书馆

Securely Outsourcing attribute-based encryption with Checkability

IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS 2014年第8期25卷 2201-2210页

作者： Li, Jin Huang, Xinyi Li, Jingwei Chen, Xiaofeng Xiang, Yang Guangzhou Univ Sch Comp Sci Guangzhou Peoples R China Xidian Univ State Key Lab Integrated Serv Networks ISN Xian Peoples R China Fujian Normal Univ Sch Math & Comp Sci Fujian Prov Key Lab Network Secur & Cryptol Fuzhou Peoples R China Nankai Univ Coll Informat Tech Sci Tianjin Peoples R China Deakin Univ Sch Informat Technol Geelong Vic 3217 Australia

attribute-based encryption (ABE) is a promising cryptographic primitive which significantly enhances the versatility of access control mechanisms. Due to the high expressiveness of ABE policies, the computational complexities of ABE key-issuing and decryption are getting prohibitively high. Despite that the existing Outsourced ABE solutions are able to offload some intensive computing tasks to a third party, the verifiability of results returned from the third party has yet to be addressed. Aiming at tackling the challenge above, we propose a new Secure Outsourced ABE system, which supports both secure outsourced key-issuing and decryption. Our new method offloads all access policy and attribute related operations in the key-issuing process or decryption to a Key Generation Service Provider (KGSP) and a Decryption Service Provider (DSP), respectively, leaving only a constant number of simple operations for the attribute authority and eligible users to perform locally. In addition, for the first time, we propose an outsourced ABE construction which provides checkability of the outsourced computation results in an efficient way. Extensive security and performance analysis show that the proposed schemes are proven secure and practical.

关键词： attribute-based encryption access control outsourcing computation key issuing checkability

来源：评论

学校读者我要写书评

暂无评论

An attribute-based encryption scheme with multiple authorities on hierarchical personal health record in cloud

引用

JOURNAL OF SUPERCOMPUTING 2020年第7期76卷 4884-4903页

作者： Guo, Rui Li, Xiong Zheng, Dong Zhang, Yinghui Xian Univ Posts & Telecommun Natl Engn Lab Wireless Secur Xian 710121 Peoples R China Beijing Univ Posts & Telecommun State Key Lab Networking & Switching Technol Beijing 100876 Peoples R China Hunan Univ Sci & Technol Sch Comp Sci & Engn Xiangtan 411201 Peoples R China Westone Cryptol Res Ctr Beijing 100070 Peoples R China

In the personal health record (PHR) system, the patient's health records are usually outsourced to a large database, such as the cloud service provider. In order to guarantee the confidentiality of this data , achieve access control with flexibility and fine-grained property, it usually employs ciphertext-policy attribute-based encryption (CP-ABE) scheme in cloud computing. However, the outsourced data have the characteristic of multi-level hierarchy, and the general CP-ABE is inappropriate for being applied in distributed cloud service systems directly to provide the security of hierarchy structure of outsourced data. In this paper, to overcome this challenge, a PHR hierarch CP-ABE scheme with multiple authorities is presented. This protocol integrated some different access structures into a single one, which the hierarchical PHR is encrypted based on. There are multiple authorities to generate and distribute user's private key all together. According to this mode, it enables to avoid the problem of key escrow and conform to the distributed characteristic of cloud service systems. However, it has no trusted single or central one in these authorities. Moreover, this proposed scheme resists (N-1) corrupted authorities out of N authorities in the collusion attack. based on the intractability of the standard decisional bilinear Diffie-Hellman problem, the security of this protocol is proven to be semantic secure. Finally, by comparison analysis, this protocol exhibits a better performance.

关键词： attribute-based encryption Multi-authority Hierarchical PHR Cloud computing

来源：评论

学校读者我要写书评

暂无评论

Flexible revocation in ciphertext-policy attribute-based encryption with verifiable ciphertext delegation

引用

MULTIMEDIA TOOLS AND APPLICATIONS 2023年第14期82卷 22251-22274页

作者： Deng, Shijie Yang, Gaobo Dong, Wen Xia, Ming Hunan Univ Sch Informat Sci & Elect Engn Changsha 410082 Peoples R China

attribute-based encryption (ABE) is a promising approach to enables fine-grained access control for encrypted data in cloud storage. However, to design a flexible and effective revocation mechanism has always been a tricky problem for ABE, especially for the situations where revocation occurs frequently. In this work, we propose a practical attribute-based access control scheme by introducing ciphertext-policy attribute-based encryption (CP-ABE) that allows the trusted authority (TA) to efficiently manage the credentials of data users. The problem of revocation is solved efficiently by exploiting user binary tree. To achieve flexible revocation, our scheme supports both attribute revocation and user revocation to accommodate different revocation needs. Non-revoked users can still decrypt the ciphertext as long as his/her remaining attributes satisfy the access policy associated with the ciphertext. Moreover, verifiable ciphertext delegation is presented to reduce the heavy computation cost brought by frequent revocation. The merits of the proposed scheme are proved by comparing its performance and security with the related works.

关键词： Cloud computing attribute-based encryption Verifiable ciphertext delegation Flexible revocation Access control

来源：评论

学校读者我要写书评

暂无评论

A new technique for compacting ciphertext in multi-channel broadcast encryption and attribute-based encryption

引用

THEORETICAL COMPUTER SCIENCE 2018年 723卷 51-72页

作者： Canard, S. Phan, D. H. Pointcheval, D. Trinh, V. C. Orange Labs Appl Crypto Grp Caen France Univ Limoges Limoges France PSL Res Univ CNRS Dept Informat ENS F-75005 Paris France Hong Duc Univ Thanh Hoa Vietnam INRIA Le Chesnay France

Standard Broadcast encryption (BE) and attribute-based encryption (ABE) aim at sending a content to a large arbitrary group of users at once. Regarding Broadcast encryption, currently, the most efficient schemes provide constant-size headers, that encapsulate ephemeral session keys under which the payload is encrypted. However, in practice, and namely for pay-TV, providers have to send various contents to different groups of users. Headers are thus specific to each group, one for each channel: as a consequence, the global overhead is linear in the number of channels. Furthermore, when one wants to zap to and watch another channel, one has to get the new header and decrypt it to learn the new session key: either the headers are sent quite frequently or one has to store all the headers, even if one watches one channel only. Otherwise, the zapping time becomes unacceptably long. We consider the encapsulation of several ephemeral keys, for various groups and thus various channels, in one header only, and we call this new primitive Multi-Channel Broadcast encryption or MCBE: one can hope for a much shorter global overhead and a much shorter zapping time since the decoder already has the information to decrypt any available channel at once. Regarding attribute-based encryption, a scheme with constant-size ciphertext is still a challenging task. In this paper, we introduce a new technique of optimizing the ciphertext-size for both MCBE and ABE schemes. (C) 2018 Elsevier B.V. All rights reserved.

关键词： Broadcast encryption Multi-channel broadcast encryption attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

Practical attribute-based encryption: Traitor Tracing, Revocation and Large Universe^aEuro

引用

COMPUTER JOURNAL 2016年第7期59卷 983-1004页

作者： Liu, Zhen Wong, Duncan S. ASTRI Secur & Data Sci Hong Kong Hong Kong Peoples R China

A blackbox traceable attribute-based encryption (ABE) can identify a malicious user called traitor, which created a decryption box with respect to an attribute set (respectively, access policy), out of all the users who share the same attribute set (respectively, access policy). However, none of the existing traceable ABE schemes can also support revocation and large attribute universe, that is, being able to revoke compromised keys, and can take an exponentially large number of attributes. In this paper, we formalize the definitions and security models, and propose constructions of both Ciphertext-Policy ABE and Key-Policy ABE that support (i) public and fully collusion-resistant blackbox traceability, (ii) revocation, (iii) large universe and (iv) any monotonic access structures as policies (i.e. high expressivity). We also show that the schemes are secure and blackbox traceable in the standard model against selective adversaries.

关键词： attribute-based encryption traitor tracing revocation large attribute universe

来源：评论

学校读者我要写书评

暂无评论

Cost-Efficient Outsourced Decryption of attribute-based encryption Schemes for Both Users and Cloud Server in Green Cloud Computing

引用

IEEE ACCESS 2020年 8卷 20862-20869页

作者： Liao, Yongjian Zhang, Ganglin Chen, Hongjie Univ Elect Sci & Technol China Sch Informat & Software Engn Chengdu 610054 Peoples R China

To reduce a user's decryption cost and protect the private information from being leaked, Green et al. proposed an approach oursourcing the decryption of the attribute based encryption (ABE) scheme to the cloud server. Later, almost all ABE schemes with outsourced decryption (ABE-OD) used their model or approach. However, the cloud server needs to repeat the outsourced decryption service of the same ciphertext for distinct users satisfying the same access policy in these schemes. Green computing is the atmosphere conscientious and recyclable utilization of resources. The green cloud networks can reduce their cost or energy requirements by adapting its performance, optimizing resources management and services. The method is not efficient for the cloud server in the green cloud networks. In this article, to take into account recyclable utilization of resources for the cloud server, we put forward a new and secure approach to reduce total overhead of the cloud server when many users satisfying an access policy require the outsourced decryptions for the same ciphertext besides decreasing the decryption computation cost for users. Compared with the existing ABE-OD schemes, our total overhead of the cloud server is independent of the number of the users who satisfy an access policy and request the outsourcing decryption service. Finally, we extend our approach to a RCCA-secure ABE-OD scheme.

关键词： Green cloud computing attribute-based encryption outsourced decryption cloud server recyclable utilization bilinear maps

来源：评论

学校读者我要写书评

暂无评论

A Novel attribute-based encryption Approach with Integrity Verification for CAD Assembly Models

引用

Engineering 2021年第6期7卷 787-797页

作者： Yueting Yang Fazhi He Soonhung Han Yaqian Liang Yuan Cheng School of Computer Science Wuhan UniversityWuhan 430072China State Key Laboratory of Digital Manufacturing Equipment and Technology Huazhong University of Science and TechnologyWuhan 430074China Division of Ocean Engineering Korea Advanced Institute of Science and TechnologyDaejeon 34141Republic of Korea School of Information Management Wuhan UniversityWuhan 430072China

Cloud manufacturing is one of the three key technologies that enable intelligent *** paper presents a novel attribute-based encryption(ABE)approach for computer-aided design(CAD)assembly models to effectively support hierarchical access control,integrity verification,and deformation protection for co-design scenarios in cloud *** assembly hierarchy access tree(AHAT)is designed as the hierarchical access ***-related ciphertext elements,which are contained in an assembly ciphertext(ACT)file,are adapted for content keys decryption instead of CAD component *** modify the original Merkle tree(MT)and reconstruct an assembly *** proposed ABE framework has the ability to combine the deformation protection method with a content privacy of CAD *** proposed encryption scheme is demonstrated to be secure under the standard *** simulation on typical CAD assembly models demonstrates that the proposed approach is feasible in applications.

关键词： Information security Cloud-based design and manufacture Co-design CAD assembly models attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

Practical attribute-based encryption: Outsourcing decryption, attribute revocation and policy updating

引用

JOURNAL OF NETWORK AND COMPUTER APPLICATIONS 2018年 108卷 112-123页

作者： Liu, Zechao Jiang, Zoe L. Wang, Xuan Yiu, S. M. Harbin Inst Technol Shenzhen Grad Sch Shenzhen 518055 Peoples R China Univ Hong Kong Hong Kong Hong Kong Peoples R China

attribute-based encryption (ABE) offers fine-grained access control policy over encrypted data, and thus applicable in cloud storage to provide authorized data privacy. However, there are some issues that should be solved before deploying ABE in practice. Firstly, as the heavy decryption cost grows with the complexity of access policy, an ABE with outsourcing decryption is preferred to relieve user's computation cost. Secondly, when user's attributes are altered, it is required for ABE supporting attribute revocation to change user's access privilege timely and effectively. Thirdly, in the case of access control policy changed by data owner, policy updating requirement must be met in designing ABE. Therefore, a practical ABE scheme is proposed which can solve aforementioned issues simultaneously. In order to support flexible number of attributes, our scheme also achieves large universe and multiple attribute authorities. The security and performance of the proposed scheme are discussed, followed by extensive experiments to demonstrate its effectiveness and practicability.

关键词： attribute-based encryption Outsourcing decryption attribute revocation Policy updating Large universe Multiple authorities

来源：评论

学校读者我要写书评

暂无评论

An Efficient File Hierarchy attribute-based encryption Scheme in Cloud Computing

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2016年第6期11卷 1265-1277页

作者： Wang, Shulan Zhou, Junwei Liu, Joseph K. Yu, Jianping Chen, Jianyong Xie, Weixin Shenzhen Univ Coll Informat Engn ATR Key Lab Natl Def Technol Shenzhen 518060 Peoples R China Wuhan Univ Technol Sch Comp Sci & Technol Hubei Key Lab Transportat Internet Things Wuhan 430070 Peoples R China Monash Univ Fac Informat Technol Clayton Vic 3800 Australia Shenzhen Univ Coll Comp & Software Engn Shenzhen 518060 Peoples R China

Ciphertext-policy attribute-based encryption (CP-ABE) has been a preferred encryption technology to solve the challenging problem of secure data sharing in cloud computing. The shared data files generally have the characteristic of multilevel hierarchy, particularly in the area of healthcare and the military. However, the hierarchy structure of shared files has not been explored in CP-ABE. In this paper, an efficient file hierarchy attribute-based encryption scheme is proposed in cloud computing. The layered access structures are integrated into a single access structure, and then, the hierarchical files are encrypted with the integrated access structure. The ciphertext components related to attributes could be shared by the files. Therefore, both ciphertext storage and time cost of encryption are saved. Moreover, the proposed scheme is proved to be secure under the standard assumption. Experimental simulation shows that the proposed scheme is highly efficient in terms of encryption and decryption. With the number of the files increasing, the advantages of our scheme become more and more conspicuous.

关键词： Cloud computing data sharing file hierarchy ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

Revocable Blockchain-Aided attribute-based encryption With Escrow-Free in Cloud Storage

引用

IEEE TRANSACTIONS ON COMPUTERS 2023年第7期72卷 1901-1912页

作者： Guo, Yuyan Lu, Zhenhua Ge, Hui Li, Jiguo Huaibei Normal Univ Coll Comp Sci & Technol Huaibei 235000 Anhui Peoples R China Fujian Normal Univ Coll Math & Informat Fuzhou 350117 Fujian Peoples R China

The massive amount of data generated by the Internet of Things (IoT) and the need to store that data presents a huge challenge for storage. However, meeting this challenge has also driven the development of storage technologies, especially those related to cloud storage. Although attribute-based encryption (ABE) schemes are commonly used to achieve data confidentiality and fine-grained access control in cloud storage, there is still an inherent problem with ABE schemes, namely the key escrow problem. In this paper, we propose a revocable blockchain-aided ABE with escrow-free (BC-ABE-EF) system that resolves the key escrow problem by replacing the traditional key authority with a consortium blockchain. The keys are generated between the blockchain and the data user through a secure key issuing protocol, and the blockchain cannot obtain the user's full key alone. Furthermore, utilize the decryption cloud server to schedule pre-decryption operations in cloud and introduce a group manager to update the group keys of unrecovered users and generate re-encryption keys. The security analysis shows that our scheme is secure under the Decisional Computation Diffie Hellman (DCDH) assumption. The effectiveness of the scheme is demonstrated by simulating the BC-ABE-EF scheme and comparing it based on performance analysis.

关键词： Blockchains Protocols encryption Cloud computing Internet of Things Peer-to-peer computing Outsourcing Blockchain attribute-based encryption key escrow issue user revocation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：