检索结果-内蒙古大学图书馆

15th IEEE International Wireless Communications and Mobile Computing Conference (IEEE IWCMC)

作者： Bouchaala, Mariem Ghazel, Cherif Saidane, Leila Azouz Univ Manouba Tunisia ENSI CRISTAL Lab Manouba Tunisia

ISBN: (纸本)9781538677476

Cloud Computing is the most promising paradigm in recent times. It offers a cost-efficient service to individual and industries. However, outsourcing sensitive data to entrusted Cloud servers presents a brake to Cloud migration. Consequently, improving the security of data access is the most critical task. As an efficient cryptographic technique, ciphertext policy attribute based encryption(CP-ABE) develops and implements fine-grained, flexible and scalable access control model. However, existing CP-ABE based approaches suffer from some limitations namely revocation, data owner overhead and computational cost. In this paper, we propose a sliced revocable solution resolving the aforementioned issues abbreviated RS-CPABE. We applied splitting algorithm. We execute symmetric encryption with Advanced encryption Standard (AES)in large data size and asymmetric encryption with CP-ABE in constant key length. We re-encrypt in case of revocation one single slice. To prove the proposed model, we expose security and performance evaluation.

关键词： Cloud access control ciphertext policy attribute based encryption revocation splitting algorithm Advanced encryption Standard

来源：评论

学校读者我要写书评

暂无评论

A Fully Secure ciphertext-policy attribute-based encryption With a Tree-based Access Structure

引用

JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 2015年第1期31卷 247-265页

作者： Rifki, Sadikin Park, YoungHo Moon, SangJae Kyungpook Natl Univ Sch Elect Engn & Comp Sci Taegu 702701 South Korea Kyungpook Natl Univ Sch Elect Engn Taegu 702701 South Korea Indonesian Inst Sci Res Ctr Informat Bandung 40135 Indonesia

A new fully secure ciphertext-policy attributed based encryption (CP-ABE) scheme with high expressibity access policy is presented. Our CP-ABE scheme uses tree-based access structure which includes AND, OR, threshold and NOT gates which granted high degree of expressibility for encryptor to make an access policy. Moreover, our scheme achieves full security CP-ABE definition where any access structure can be chosen as the challenge ciphertext. The proposed CP-ABE uses composite bilinear groups and dual encryption paradigm to achieve full security CP-ABE definition. We argue that our CP-ABE scheme is secure and feasible.

关键词： ciphertext policy attribute based encryption access control pairing based cryptography public encryption system secure file distribution

来源：评论

学校读者我要写书评

暂无评论

Oblivious Transfer with Fine Grained Access Control from ciphertext policy attribute based encryption in the Standard Model

引用

INTERNATIONAL JOURNAL OF FUTURE GENERATION COMMUNICATION AND NETWORKING 2016年第1期9卷 285-302页

作者： Fu, Xingbing Li, Fagen Zeng, Shengke Univ Elect Sci & Technol China Sch Informat & Software Engn Chengdu 610054 Sichuan Peoples R China Xihua Univ Sch Math & Comp Engn Chengdu Sichuan Peoples R China

In this work, an oblivious transfer with complex access control scheme that is constructed based on ciphertext policy attribute based encryption (CP-ABE) scheme is proposed. In this scheme, the database server can enforce fine grained access control for each record where the authorized user is allowed to access, but the unauthorized user cannot, whereas it learns neither which record a user accesses, nor which attributes a user has. This scheme has the advantages as follows: First, it allows the expressive access control policies where access structures are based on linear secret sharing scheme that directly supports AND, OR and Threshold gates. Second, the communication complexity in this scheme is constant in the numbers of records which have been accessed. Third, this scheme is constructed in prime order bilinear group. Fourth, this scheme is secure in the standard model. To the best of our knowledge, this scheme is the first to obtain these features simultaneously.

关键词： Access Control ciphertext policy attribute based encryption Encrypted Database Oblivious Transfer Privacy Standard Model

来源：评论

学校读者我要写书评

暂无评论

TRAK-CPABE: A novel Traceable, Revocable and Accountable ciphertext-policy attribute-based encryption scheme in cloud computing

引用

JOURNAL OF INFORMATION SECURITY AND APPLICATIONS 2021年 61卷

作者： Bouchaala, Mariem Ghazel, Cherif Saidane, Leila Azzouz Univ Manouba ENSI CRISTAL Lab Manouba Tunisia

ciphertext policy attribute based encryption (CPABE) offers fine-grained access control in Cloud Computing environment. It is considered as the most promising one-to-many encryption mechanism. However, a Cloud user can delegate decryption privileges to unauthorized users for profits. The key abuse issue is not the only limit with this model for the reason that when the malicious user has been caught, it cannot be revoked. To address these problems, we propose a Traceable, Revocable, Accountable and Key-escrow free CPABE scheme (TRAK-CPABE). This solution supports white-box traceability and direct revocation. The main idea of this work is to divide the original data after publishing in cloud server. In the case of user revocation, one single slice is affected. Data owner needs to retrieve, re-encrypt and re-publish it. In addition, shared keys will be traced and conflict scenario will be resolved. More, the traceability of TRAK-CPABE depends on the l-Strong Diffie-Hellman (l-SDH) and Indistinguishability under chosen-plaintext attack (IND-CPA. The security of the proposed scheme is proved formally by using the Scyther tool. Furthermore, the experimental results show the efficiency of the proposed solution.

关键词： ciphertext policy attribute based encryption Cloud computing Access control Revocable Traceable Accountable

来源：评论

学校读者我要写书评

暂无评论

Privacy preserving spatio-temporal attribute-based encryption for cloud applications

引用

CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS 2025年第1期28卷 1-26页

作者： Routray, Kasturi Bera, Padmalochan Indian Inst Technol Bhubaneswar India

Cloud computing offers scalable implementation of applications by sharing internet-based storage and computing resources. However, its ubiquitous nature introduces the security and privacy risks to sensitive data. Existing encryption techniques often rely on access control mechanisms to allow selective sharing of encrypted data. However, they don't efficiently support secure integration of space and time constraints in the authorization mechanism, rendering them unsuitable for dynamic cloud environments. In this paper, we propose a privacy-preserving spatio-temporal attribute-based access control technique for cloud-based applications. Our approach utilizes ciphertext policy attribute-based encryption (CP-ABE) with distributed key generation, geohashes for proximity detection, and fog server-based verification. The proposed cryptosystem generates decryption keys based only on the user's static attributes eliminating the need to manage user revocation due to frequent contextual changes. Time and location constraints are enforced through spatio-temporal locks in the access policy. Geohash enables defining authorized geographic areas while preserving user location privacy. Additionally, our system supports multiple attribute authorities for key generation, enhancing security by limiting user identity leakages and preventing key escrow attacks. Most of the decryption-related computations are outsourced to fog servers, thus, making the decryption independent of the number of attributes in the policies. The analysis of security and performance demonstrates the effectiveness of our scheme in practical cloud-based applications, enabling precise control over real-time data access while satisfying user privacy.

关键词： Time and location constraints Decentralized key generation Decryption outsourcing ciphertext policy attribute based encryption Identity privacy Location privacy

来源：评论

学校读者我要写书评

暂无评论

An Enhanced CP-ABE based Access Control Algorithm for Point to Multi-Point Communication in Cloud Computing

引用

JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 2017年第3期33卷 837-858页

作者： Shynu, P. G. Singh, K. John VIT Univ Sch Informat Technol & Engn Vellore 632014 Tamil Nadu India

ciphertext policy attribute-based encryption (CP-ABE) is a well-known access control technique, where the data content shared by a single user is accessed by several authorized entities with distinct data access rights, which forms the basis of the point to multi-point communication systems. In such type of systems, the process of user attributes management and user access policy specifications are found to be the challenging tasks. This work introduces an enhanced CP-ABE based access control algorithm, which extracts meaningful user attributes from a set of the user given attributes and stores it over a separate database system. based upon the extracted attributes, a complete user attribute hierarchical access structure is framed. The user access is provided only when the user attributes hierarchical access structure satisfies the user access policy defined by the data owner. In this manner, the proposed system better solves the drawbacks of existing systems. Experiments show that our proposed algorithm provides comparatively efficient user access than existing CP-ABE techniques and it has lesser computational complexity.

关键词： ciphertext policy attribute based encryption access control user attribute hierarchical access structure core and reduct attributes cloud security

来源：评论

学校读者我要写书评

暂无评论

Secure Encrypted Data Deduplication based on Data Popularity

引用

MOBILE NETWORKS & APPLICATIONS 2021年第4期26卷 1686-1695页

作者： He, Yunlong Xian, Hequn Wang, Liming Zhang, Shuguang Qingdao Univ Coll Comp Sci & Technol Qingdao 266071 Peoples R China Xidian Univ State Key Lab Integrated Serv Networks Xian 710071 Peoples R China Chinese Acad Sci Inst Informat Engn Beijing 100093 Peoples R China

Deduplication eliminates duplicated data copies and reduces storage costs of cloud service providers. However, deduplication of encrypted data is difficult. Current solutions rely heavily on trusted third parties, and does not recognize the popularity of data, resulting in unsatisfying security and efficiency. A secure encrypted data deduplication scheme based on data popularity is proposed. Tags are calculated via bilinear mapping to determine whether different encrypted data originate from the same plaintext. ciphertext policy attribute-based encryption is used to protect the tags. A secure key delivery scheme is designed to pass the data encryption key from an initial data uploader to subsequent uploaders via the cloud server in an offline manner. The cloud server can perform deduplication without the assistance of any online third party. Security analysis and simulation experiments are provided, proving the practicability and efficiency of the proposed scheme.

关键词： Deduplication Data popularity Bilinear mapping ciphertext policy attribute based encryption

来源：评论

学校读者我要写书评

暂无评论

Permanent Revocation in attribute based Broadcast encryption

Permanent Revocation in Attribute Based Broadcast Encryption

引用

ASE International Conference on Cyber Security (CyberSecurity) / ASE International Conference on Social Informatics (SocialInformatics) / ASE International Conference on Biomedical Computing (BioMedCom)

作者： Dolev, Shlomi Gilboa, Niv Kopeetsky, Marina Ben Gurion Univ Negev Dept Comp Sci IL-84105 Beer Sheva Israel Ben Gurion Univ Negev Dept Commun Syst Engn IS-84105 Beer Sheva Israel Sami Shamoon Coll Engn Dept Software Engn IS-84100 Beer Sheva Israel

ISBN: (纸本)9780769550145;9781479902194

We propose a new and efficient scheme for broadcast encryption. A broadcast encryption system allows a broadcaster to send an encrypted message to a dynamically chosen subset RS, |RS| = n, of a given set of users, such that only users in this subset can decrypt the message. An important component of broadcast encryption schemes is revocation of users by the broadcaster, thereby updating the subset RS. Revocation may be either temporary, for a specific ciphertext, or permanent. We present the first public key broadcast encryption scheme with permanent revocation of users, unlike all previous public key schemes that support temporary revocation. Our approach is especially appealing in applications in which once a user is revoked that user should not be able to decrypt any subsequent messages. Our scheme is fully collusion-resistant. In other words, even if all the revoked users collude, the revoked user cannot encrypt messages without receiving new keys from the broadcaster. The overhead of revocation in our system is constant in all major performance measures including length of private and public keys, computational complexity, user's storage space, and computational complexity of encryption and decryption. The scheme we construct improves on our original scheme in a poster presentation [7] by a factor of O(log n) in all major performance measures.

关键词： ciphertext policy attribute based encryption broadcast encryption permanent revocation

来源：评论

学校读者我要写书评

暂无评论

Dual Revocation: attribute and User Revocation based On CPABE In Cloud Computing 15

Dual Revocation: Attribute and User Revocation Based On CPAB...

引用

15th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)

作者： Bouchaala, Mariem Ghazel, Cherif Saidane, Leila Azouz Univ Manouba Tunisia ENSI CRISTAL Lab Manouba Tunisia

ISBN: (纸本)9781728133164

Access Control models are required to secure Cloud Computing from unauthorized access. As an efficient cryptographic tool, ciphertext policy attribute based encryption offers a fine-grained access to user assets. But, revocation operation presents a major brake in the implementation of this algorithm. However, existing approaches either cannot deal with this problem or have an important computation and/ or storage overheads. In this paper, we propose a sliced revocable solution resolving the aforementioned issues abbreviated MRS-CPABE. It is an efficient solution in case of lazy or complete revocation. We apply information dispersal algorithm and we introduce a match then decrypt process. To assess the perfromance of our solution, we perform a security evaluation with Scyther tool and a formal validation to prove that our proposal can withstand various known attacks. Then, we expose the experiments simulation results.

关键词： Cloud access control ciphertext policy attribute based encryption revocation match then decrypt

来源：评论

学校读者我要写书评

暂无评论

Secure Data Provenance in Internet of Things based Networks by Outsourcing attribute based Signatures and using Bloom Filters

引用

INTERNATIONAL JOURNAL OF ADVANCED COMPUTER SCIENCE AND APPLICATIONS 2019年第5期10卷 221-226页

作者： Siddiqui, Muhammad Shoaib Rahman, Atiqur Nadeem, Adnan Alzahrani, Ali M. Islamic Univ Madinah Fac Comp & Informat Syst Medina Saudi Arabia

With the dawn of autonomous organization and network and service management, the integration of existing networks with Internet of Things (IoT) based networks is becoming a reality. With minimal human interaction, the security of IoT data moving through the network becomes prone to attacks. IoT networks require a secure provenance mechanism, which is efficient and lightweight because of the scarce computing and storage resources at the IoT nodes. In this paper, we have proposed a secure mechanism to sign and authenticate provenance messages using ciphertext-policy attribute based encryption (CP-ABE) based signatures. The proposed technique uses Bloom filters to reduce storage requirements and an outsourced ABE mechanism to use lessen the computational requirements at the IoT devices. The proposed technique helps in reducing the storage requirements and computation time in IoT devices. The performance of the proposed mechanism is evaluated and the results show that the proposed solution is best suited for resourced constrained IoT network.

关键词： Data provenance bloom filter ciphertext policy attribute based encryption IoT

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：