检索结果-内蒙古大学图书馆

15th IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA) / 16th IEEE International Conference on Ubiquitous Computing and Communications (IUCC)

作者： Wang, Changji Wu, Jiayuan Yuan, Yuan Liu, Jing Guangdong Univ Foreign Studies Collaborat Innovat Ctr 21st Century Maritime Silk Sch Informat Sci & Technol Guangzhou 510006 Guangdong Peoples R China Sun Yat Sen Univ Sch Data Sci & Comp Guangzhou 510006 Guangdong Peoples R China Guangdong Univ Foreign Studies Sch Finance Guangzhou 510006 Guangdong Peoples R China Yunnan Univ Natl Pilot Sch Software Kunming 650500 Yunnan Peoples R China

ISBN: (纸本)9781538637906

ciphertext-policy attribute-based encryption (CP-ABE) is a promising solution to the problem of fine-grained access control over encrypted data in the cloud. Several CP-ABE based cryptographic cloud storage systems have been proposed in recent years. However, access policy revocation is expensive in these systems, because data owner has to retrieve, re-encrypt and re-upload the data when access policy updates. To optimize the access policy revocation procedure, Cheng et al. proposed a revocation scheme for CP-ABE based cryptographic cloud storage. In their scheme, the original data is first divided into a number of slices, and then uploaded to the cloud storage. When a revocation occurs, the data owner needs only to retrieve, re-encrypt and re-upload one slice instead of the entire data. They claimed that their scheme is efficient and computationally secure. In this paper, we first point out Cheng et al.'s scheme only preserves all-or-nothing property for one time, then we show that it is susceptible to a fatal attack from the malicious revoked data user who stores the symmetric key or generates extra valid slices.

关键词： cloud storage ciphertext-policy attribute-based encryption access policy revocation information dispersal algorithm all-or-nothing transform

来源：评论

学校读者我要写书评

暂无评论

BCAS: A blockchain-based ciphertext-policy attribute-based encryption scheme for cloud data security sharing

引用

INTERNATIONAL JOURNAL OF DISTRIBUTED SENSOR NETWORKS 2021年第3期17卷

作者： Zuo, Yuting Kang, Zhaozhe Xu, Jian Chen, Zhide Fujian Normal Univ Cangshan Campus8 Shangsan Rd Fuzhou 350007 Fujian Peoples R China

It is the most important and challenging problem to share the data safely in cloud computing. Some so-called trusted third parties may also infringe users' data privacy. It is an urgent problem for data owners to share data safely with the designated users rather than the third party or other users. Traditional encryption schemes utilize different keys to produce multiple encrypted copies of the same data for users. It is no longer applicable for cloud data sharing security. attribute-based encryption can solve above problems, but it needs to rely on trusted third parties to protect the users' privacy. In this article, in order to address the above problems, we propose a blockchain-based ciphertext-policy attribute-based encryption scheme for cloud data secure sharing without relying on any trusted third parties. Blockchain-based ciphertext-policy attribute-based encryption scheme can protect the rights and security of data owner. Compared with existing cloud security schemes, the proposed scheme has more advantages in terms of the six aspects: (1) data owners have the authority to decide who can decrypt the data;(2) the operations of users are retained permanently, and all records are tamper-proof;(3) our proposed scheme has the characteristic of "one-to-many" encryption, and data is encrypted only once;(4) our scheme does not rely on any trusted third party;(5) in terms of the discrete logarithm problem and decisional q parallel-bilinear Diffie-Hellman exponent problem, we prove that our proposed scheme is secure;and (6) experiment shows that our proposed scheme is more efficient than the comparative scheme.

关键词： Blockchain ciphertext-policy attribute-based encryption data sharing security cloud computing

来源：评论

学校读者我要写书评

暂无评论

White-Box Traceable ciphertext-policy attribute-based encryption in Multi-Domain Environment

引用

IEEE ACCESS 2019年 7卷 128298-128312页

作者： Yan, Xixi He, Xu Yu, Jinxia Tang, Yongli Henan Polytech Univ Sch Comp Sci & Technol Jiaozuo 454003 Henan Peoples R China

In a ciphertext-policy attribute-based encryption (CP-ABE) system, the decryption keys are only related to attributes shared by multiple users and do not contain any identity information of their original holders. Hence, if a decryption key is leaked, there is no feasible method to trace the suspicious user. The user tracing problem has become an obstacle to the adoption of CP-ABE in practice. In order to address it, some traceable/accountable CP-ABE schemes have been established. However, considering the user tracing problem in multi-domain environment will face new challenges. Multi-domain environments usually have a two-layer structure, domains and intradomain users. When tracing a user, we should first trace the domain where the user is located, and then trace the user in the domain. Unfortunately, the existing traceable CP-ABE schemes only focus on one level of users tracing, and are not suitable for the two-layer structure of multi-domain environments. Therefore, a white-box traceable CP-ABE scheme in multi-domain environment is proposed in this paper. The proposed scheme obtains a so-called two-layer tracing. At the domain level, a short signature technique is used to prevent an attacker from forging the tracing parameter and realize the traceability for domains. Linkable ring signature technology is introduced at the user level to provide a tracing method for users by utilizing the linkability of the signature. The two signature structures are reasonably embedded in a user private key to support two-layer white-box tracing at both domains and intradomain users. The proposed scheme supports any monotone access structures and has full security against chosen plaintext attack in the standard model. Compared with related schemes, the asymptotic communication cost and the asymptotic computation cost of the proposed scheme are relatively low. These advantages make the proposed scheme more practical for solving the user tracing problem in multi-domain environment.

关键词： ciphertext-policy attribute-based encryption linkable ring signature multi-domain environment two-layer tracing white-box traceability

来源：评论

学校读者我要写书评

暂无评论

An enhanced media ciphertext-policy attribute-based encryption algorithm on media cloud

引用

INTERNATIONAL JOURNAL OF DISTRIBUTED SENSOR NETWORKS 2020年第2期16卷 1-15页

作者： Li, Hao Deng, Lianbing Yang, Cheng Liu, Jianbo Da Hengqin Sci & Technol Dev Co Ltd Zhuhai Peoples R China Commun Univ China Beijing Peoples R China Commun Univ China Sch Informat & Commun Engn 1 DingFuZhuang East St Beijing 100024 Peoples R China

With the development of cloud computing, more and more video services are moving to the cloud. How to realize fine-grained access control of those data on cloud becomes an urgent problem. attribute-based encryption provides a solution. However, heavy computation is still a bottleneck restricting the wider application of attribute-based encryption in cloud computing. In addition, we find that expression of the access control structure on media cloud can be further improved. To solve these problems, we propose an enhanced media ciphertext-policy attribute-based encryption algorithm and introduce its two key components, the multiple access tree and the key chain. To increase the scalability of the proposed algorithm, we discussed the issues of multi-authorization, user revocation, and 1 -n multiple access tree. Security analysis shows that enhanced media ciphertext-policy attribute-based encryption can successfully resist chosen-plaintext attacks under the decisional bilinear Diffie-Hellman assumption. Performance analysis proves both theoretically and practically that the proposed algorithm incurs less computational cost than the traditional ciphertext-policy attribute-based encryption, multi-message ciphertext-policy attribute-based encryption, and scalable ciphertext-policy attribute-based encryption by optimizing the access control structure. Our proposed algorithm has strong practical significance in media cloud.

关键词： Access control ciphertext-policy attribute-based encryption video encryption fine-grained access structure key chain

来源：评论

学校读者我要写书评

暂无评论

Traceable and undeniable ciphertext-policy attribute-based encryption for cloud storage service

引用

INTERNATIONAL JOURNAL OF DISTRIBUTED SENSOR NETWORKS 2019年第4期15卷

作者： Yu, Gang Wang, Yongjuan Cao, Zhenfu Lin, Jian Wang, Xiangyu Informat Sci & Technol Inst State Key Lab Math Engn & Adv Comp Zhengzhou 450001 Henan Peoples R China Informat Sci & Technol Inst Henan Key Lab Network Cryptog Technol Zhengzhou 450001 Henan Peoples R China East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China

ciphertext-policy attribute-based encryption is a promising mechanism with fine-grained access control for cloud storage system. However, there is a long-lasting problem of key abuse that a user may share its decryption key and a semi-honest authority may illegally issue decryption keys for unauthorized users for profits. To address this problem, we propose an accountable ciphertext-policy attribute-based encryption scheme. In our construction, there are two authorities to issue keys for users, but they cannot decrypt any ciphertexts without collusion. A shared key can be effectively traced, and if the traced identity claims that it is innocent, an auditor can publicly audit who will be responsible for the shared key. Compared with existing accountable ciphertext-policy attribute-based encryption schemes, the proposed scheme is more practical from the two aspects: (1) a user can normally request for a decryption key along with a short signature, and no additional interaction between users and authorities is needed;and (2) the complexity of tracing a masked secret key is reduced to |U| exponent computation, where |U| denotes the number of users in the system. At last, we give the security and experimental analysis.

关键词： ciphertext-policy attribute-based encryption key escrow traceability accountability cloud computing

来源：评论

学校读者我要写书评

暂无评论

Survey on Revocation in ciphertext-policy attribute-based encryption

引用

SENSORS 2019年第7期19卷 1695.-1695.页

作者： Al-Dahhan, Ruqayah R. Shi, Qi Lee, Gyu Myoung Kifayat, Kashif Univ Anbar Coll Comp & Informat Technol Al Anbar 31001 Iraq Liverpool John Moores Univ Dept Comp Sci Byrom St Liverpool L3 3AF Merseyside England Air Univ Dept Comp Sci & Engn Islamabad 44000 Pakistan

Recently, using advanced cryptographic techniques to process, store, and share data securely in an untrusted cloud environment has drawn widespread attention from academic researchers. In particular, ciphertext-policy attribute-based encryption (CP-ABE) is a promising, advanced type of encryption technique that resolves an open challenge to regulate fine-grained access control of sensitive data according to attributes, particularly for Internet of Things (IoT) applications. However, although this technique provides several critical functions such as data confidentiality and expressiveness, it faces some hurdles including revocation issues and lack of managing a wide range of attributes. These two issues have been highlighted by many existing studies due to their complexity which is hard to address without high computational cost affecting the resource-limited IoT devices. In this paper, unlike other survey papers, existing single and multiauthority CP-ABE schemes are reviewed with the main focus on their ability to address the revocation issues, the techniques used to manage the revocation, and comparisons among them according to a number of secure cloud storage criteria. Therefore, this is the first review paper analysing the major issues of CP-ABE in the IoT paradigm and explaining the existing approaches to addressing these issues.

关键词： cloud computing internet of things ciphertext-policy attribute-based encryption multiauthority schemes single authority schemes revocation

来源：评论

学校读者我要写书评

暂无评论

Optimized ciphertext-policy attribute-based encryption with Efficient Revocation

引用

INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS 2013年第6期7卷 385-394页

作者： Li, Yang Zhu, Jianming Wang, Xiuli Chai, Yanmei Shao, Shuai Cent Univ Finance & Econ Coll Informat Beijing 100081 Peoples R China China Informat Technol Secur Evaluat Ctr Beijing 100085 Peoples R China

In this work, we design a method for efficient revocation within ciphertext-policy attribute-based encryption scheme. Our main technical innovation is based on linear secret sharing and binary tree techniques, every user in system is assigned with both a set of attributes and a unique identifier. Any user can also be efficiently revoked by using this identifier. Furthermore, this technique resulted in two key contributions: the size of the cryptographic key material is smaller and encryption/decryption cannot be affected with an unbounded number of revoked users. Then, the scheme is proved to be secure under the q-MEBDH assumption in the standard model. The efficiency is also optimized that the size of user's private key has only a constant increase. The revocation information is embedded in the ciphertext so that the fine-grained access control is more flexible.

关键词： ciphertext-policy attribute-based encryption Efficient Revocation Linear Secret Sharing Schemes Security Model

来源：评论

学校读者我要写书评

暂无评论

Fine-Grained Access Control for Cloud Data Sharing by Secure and Efficient attribute-Revocable ciphertext-policy attribute-based encryption

引用

INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS 2016年第10期10卷 303-319页

作者： Vaanchig, Nyamsuren Chen, Wei Qin, Zhiguang Univ Elect Sci & Technol China Sch Informat & Software Engn Chengdu 610054 Peoples R China

Nowadays, more and more users outsource their data to third party cloud storage servers for the purpose of sharing, so cloud data sharing becomes one of the popular services offered by cloud service providers. However, the third party storage servers in cloud data sharing systems, which are not fully trusted by data owners, make access control to the shared data a challenging issue. Although ciphertext-policy attributebased encryption (CP-ABE) is an emerging cryptographic solution for this issue, dealing with dynamic changes to users' access privileges (attribute revocation) in its practical applications as cloud data sharing systems is a real challenge. To overcome this challenge, we propose a fine-grained access control scheme for cloud data sharing systems by designing secure and efficient attribute-revocable CP-ABE scheme. Our scheme only allows non-revoked users in the attribute group to update their secret key by themselves using their unique key-update keys and the ciphertexts are updated by minimally trusted cloud server using a ciphertext-update key. Compared with the existing access controls achieved by attribute-revocable CP-ABE schemes, our proposed access control scheme reduces the trust degree of the cloud server in the attribute revocation mechanism. Furthermore, the analysis indicates that our access control scheme is more secure and efficient to apply to practical scenarios.

关键词： Access control attributes revocation ciphertext-policy attribute-based encryption and cloud data sharing

来源：评论

学校读者我要写书评

暂无评论

Circuit ciphertext-policy attribute-based Hybrid encryption with Verifiable Delegation in Cloud Computing

引用

IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS 2016年第1期27卷 119-129页

作者： Xu, Jie Wen, Qiaoyan Li, Wenmin Jin, Zhengping Beijing Univ Posts & Telecommun State Key Lab Networking & Switching Technol Beijing 100876 Peoples R China

In the cloud, for achieving access control and keeping data confidential, the data owners could adopt attribute-based encryption to encrypt the stored data. Users with limited computing power are however more likely to delegate the mask of the decryption task to the cloud servers to reduce the computing cost. As a result, attribute-based encryption with delegation emerges. Still, there are caveats and questions remaining in the previous relevant works. For instance, during the delegation, the cloud servers could tamper or replace the delegated ciphertext and respond a forged computing result with malicious intent. They may also cheat the eligible users by responding them that they are ineligible for the purpose of cost saving. Furthermore, during the encryption, the access policies may not be flexible enough as well. Since policy for general circuits enables to achieve the strongest form of access control, a construction for realizing circuit ciphertext-policy attribute-based hybrid encryption with verifiable delegation has been considered in our work. In such a system, combined with verifiable computation and encrypt-then-mac mechanism, the data confidentiality, the fine-grained access control and the correctness of the delegated computing results are well guaranteed at the same time. Besides, our scheme achieves security against chosen-plaintext attacks under the k-multilinear Decisional Diffie-Hellman assumption. Moreover, an extensive simulation campaign confirms the feasibility and efficiency of the proposed solution.

关键词： ciphertext-policy attribute-based encryption circuits verifiable delegation multilinear map hybrid encryption

来源：评论

学校读者我要写书评

暂无评论

Multi-Value-Independent ciphertext-policy attribute based encryption with Fast Keyword Search

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2020年第6期13卷 1142-1151页

作者： Wang, Haijiang Dong, Xiaolei Cao, Zhenfu Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai 200240 Peoples R China East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China

ABKS has drawn much attention from research and industry in recent years, an ABKS scheme is an encryption scheme that supports keyword search and access control. attribute-based encryption is a public key encryption that enables users to encrypt and decrypt message based on attributes. In a typical implementation, the size of the ciphertext is proportional to the number of attributes associated with it and the decryption time is proportional to the number of attributes used during decryption. Inherit from ABE technology, the computation cost and ciphertext size in most ABKS schemes grow with the complexity of the access policy. On the other hand, we found that the traditional ABKS schemes cannot resist our secret-key-recovery attack. To deal with the above problems, we present new ciphertext policy attribute based encryption with fast keyword search constructions. Our constructions preserve the fine-grained access control inherited from the ABE system while supporting hidden policy and fast keyword search. Our constructions feature multi-value-independent compared with the existing attribute based searchable encryption schemes. The performance analysis demonstrates the efficiency of our constructions. We offer rigorous security proof of our second scheme, which is IND-CKA and IND-CPA secure.

关键词： Keyword search encryption Servers Cloud computing Access control Public key ciphertext-policy attribute-based encryption searchable encryption commercial applications multi-value-Independent fast keyword search

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：