检索结果-内蒙古大学图书馆

5th IEEE International Conference on Smart Computing (SMARTCOMP)

作者： La Manna, Michele Perazzo, Pericle Rasori, Marco Dini, Gianluca Univ Florence Dept Informat Engn Florence Italy Univ Pisa Dept Informat Engn Pisa Italy

ISBN: (纸本)9781728116891

The Internet of Things (IoT) is a technological vision in which constrained or embedded devices connect together through the Internet. This enables common objects to be empowered with communication and cooperation capabilities. Industry can take an enormous advantage of IoT, leading to the so-called Industrial IoT. In these systems, integrity, confidentiality, and access control over data are key requirements. An emerging approach to reach confidentiality and access control is attribute-based encryption (ABE), which is a technique able to enforce cryptographically an access control over data. In this paper, we propose fABElous, an ABE scheme suitable for Industrial IoT applications which aims at minimizing the overhead of encryption on communication. fABElous ensures data integrity, confidentiality, and access control, while reducing the communication overhead of 35% with respect to using ABE techniques naively.

关键词： attribute-based encryption ABE ciphertext-policy attribute-based encryption CP-ABE Broadcast

来源：评论

学校读者我要写书评

暂无评论

Privacy-Friendly Photo Sharing and Relevant Applications Beyond

Privacy-Friendly Photo Sharing and Relevant Applications Bey...

引用

作者： Lin YUAN ECOLE POLYTECHNIQUE FEDERALE DE LAUSANNE

学位级别：博士

Online photo sharing has become everyday life for many, but has also raised concerns for privacy. Online social networking (OSN) sites usually offer a limited degree of privacy protection and the most common solution is conditional access control. Researchers have studied various approaches to enable image privacy in photo sharing, mostly focusing on encrypting or distorting image visual content, which may compromise utility and user experience of photo sharing. This thesis investigates novel solutions to protect image privacy with a particular emphasis on the scenario of online photo sharing. To this end, we investigate not only algorithms to protect visual content in image but also design of architectures for privacy-preserving photo sharing. Beyond privacy, we also explore the additional impacts and potentials of employing daily images being captured and shared for other relevant applications. First, we propose and study two image encoding algorithms to protect image visual privacy, within a framework named Secure JPEG. The first method scrambles a JPEG image by randomly changing the signs of its quantized DCT coefficients based on a secret key. The second method, called JPEG Transmorphing, allows one to obfuscate arbitrary image regions, while secretly preserving information about the original regions in application segments of the obfuscated JPEG image. Both algorithms are backward compatible with JPEG, meaning that the protected image is readable by any JPEG decoder in its visually protected form; The original image can only be recovered by a dedicated JPEG decoder with the right secret key provided. Evaluations (both objective and subjective) reveal a good degree of storage overhead and privacy protection capability using both methods. Particularly, JPEG Transmorphing proved to be able to preserve the maximum pleasantness from both perception and usage perspectives. Second, we investigate the design of two architectures for privacy-preserving photo sharing. T

关键词： privacy security social network photo sharing JPEG Secure JPEG Scrambling Transmorphing aJPEG backward compatibility public key infrastructure ciphertext-policy attribute-based encryption machine learning context decision making emotion deep learning

来源：评论

学校读者我要写书评

暂无评论

An Efficient Cloud-based Personal Health Records System Using attribute-based encryption and Anonymous Multi-Receiver Identity-based encryption 9

An Efficient Cloud-based Personal Health Records System Usin...

引用

NINTH INTERNATIONAL CONFERENCE ON P2P, PARALLEL, GRID, CLOUD AND INTERNET COMPUTING (3PGCIC)

作者： Wang, Chang-Ji Xu, Xi-Lei Shi, Dong-Yuan Lin, Wen-Long Sun Yat Sen Univ Sch Informat Sci & Technol Guangzhou 510006 Guangdong Peoples R China Guangdong Prov Informat Secur Key Lab Guangzhou 510006 Guangdong Peoples R China

ISBN: (纸本)9781479941711

As an emerging patient-centric model of health information exchange, cloud-based personal health record (PHR) system holds great promise for empowering patients and ensuring more effective delivery of health care. In this paper, we propose a novel patient-centric cloud-based secure PHR system, which allows patients to securely store their PHR data on the semi-trusted cloud service providers, and selectively share their PHR data with a wide range of users, including health care provider like doctors and nurses, family members or friends. To reduce the key management complexity for owners and users, we divide the users in the cloud-based PHR system into two security domains named public domain and personal domain. Different from previous cloud-based PHR system, PHR owners encrypt their PHR data for the public domain using ciphertext-policy attribute-based encryption scheme, while they encrypt their PHR data for the personal domain using anonymous multi-receiver identity-based encryption scheme. Only authorized users whose credentials satisfy the specified ciphertext-policy or whose identities belong to dedicated identities can decrypt the encrypted PHR data, where ciphertext-policy or dedicated identities are embedded in the encrypted PHR data. Extensive analytical and experimental results are presented which show the patient-centric cloud-based secure PHR system is secure, scalable and efficient.

关键词： personal health record cloud computing ciphertext-policy attribute-based encryption anonymous multi-receiver identity-based encryption

来源：评论

学校读者我要写书评

暂无评论

A Lightweight Access Control Scheme Supporting policy Hidden based on Path Bloom Filter 19th

A Lightweight Access Control Scheme Supporting Policy Hidden...

引用

19th International Conference on Information Security and Cryptology (Inscrypt)

作者： Luo, Chao Shi, Jiaoli Xie, Minchen Hu, Chao Wang, Lihua Mei, Zhuolin Yao, Shimao Li, Hui Jiujiang Univ Sch Comp & Big Data Sci Jiujiang 332005 Jiangxi Peoples R China Jiujiang Key Lab Network & Informat Secur Jiujiang 332005 Jiangxi Peoples R China Jiujiang Univ Inst Informat Secur Jiujiang 332005 Jiangxi Peoples R China Peking Univ Shenzhen Grad Sch Shenzhen Peoples R China

ISBN: (纸本)9789819709410;9789819709427

Traditional CP-ABE (ciphertext-policy attribute-based encryption) schemes require the access policy to be uploaded to the cloud along with the ciphertext, but access policies often also involve some private information, which can lead to privacy leakage. Moreover, the decryption cost of the traditional CPABE scheme is too high, which is not suitable for source-limited end devices, such as medical monitoring terminals. To achieve policy hiding, decryption lightening, and high expressiveness of access policy all at the same time, we present a new CP-ABE scheme, in which a PBF (Path Bloom Filter) is designed based on ROBDD (Reduced Ordered Binary Decision Diagram). The ROBDD, as the access structure, can provide more vital and more flexible expressiveness. Then the PBF can hide the access policy, reduce the decryption cost, and accelerate the decryption speed. Analysis and simulation study show that our proposed scheme is secure under Decisional q-BDHE assumption and superior to previous schemes concerning computational cost.

关键词： ciphertext-policy attribute-based encryption policy Hiding Reduced Ordered Bifurcated Decision Diagrams Path Bloom Filter

来源：评论

学校读者我要写书评

暂无评论

Fine-grained encryption for Secure Research Data Sharing 35

Fine-grained Encryption for Secure Research Data Sharing

引用

35th IEEE International Symposium on Computer-based Medical Systems (CBMS)

作者： Reis, Lucio H. A. de Oliveira, Marcela T. Olabarriaga, Silvia D. Univ Amsterdam Epidemiol & Data Sci Amsterdam UMC Locat Amsterdam Netherlands Univ Amsterdam Biomed Engn & Phys Amsterdam UMC Locat Amsterdam Netherlands Amsterdam Publ Hlth & Methodol Amsterdam Netherlands

ISBN: (数字)9781665467704

ISBN: (纸本)9781665467704

Research data sharing requires provision of adequate security. The requirements for data privacy are extremely demanding for medical data that is reused for research purposes. To address these requirements, the research institutions must implement adequate security measurements, and this demands large effort and costs to do it properly. The usage of adequate access controls and data encryption are key approaches to effectively protect research data confidentiality;however, the management of the encryption keys is challenging. There are novel mechanisms that can be explored for managing access to the encryption keys and encrypted files. These mechanisms guarantee that data are accessed by authorised users and that auditing is possible. In this paper we explore these mechanisms to implement a secure research medical data sharing system. In the proposed system, the research data are stored on a secure cloud system. The data are partitioned into subsets, each one encrypted with a unique key. After the authorisation process, researchers are given rights to use one or more of the keys and to selectively access and decrypt parts of the dataset. Our proposed solution offers automated fine-grain access control to research data, saving time and work usually made manually. Moreover, it maximises and fortifies users' trust in data sharing through secure clouds solutions. We present an initial evaluation and conclude with a discussion about the limitations, open research questions and future work around this challenging topic.

关键词： Research Data attribute-based Access Control ciphertext-policy attribute-based encryption Symmetric Searchable encryption Security Privacy Data Reuse

来源：评论

学校读者我要写书评

暂无评论

Redesign CloudRAID for Flexible and Secure Enterprise File Sharing over Public Cloud Storage 17

Redesign CloudRAID for Flexible and Secure Enterprise File S...

引用

10th International Conference on Security of Information and Networks (SIN)

作者： Sukmana, Muhammad I. H. Torkura, Kennedy A. Meinel, Christoph Graupner, Hendrik Univ Potsdam HPI Potsdam Germany Bundesdruckerei GmbH Berlin Germany

ISBN: (纸本)9781450353038

CloudRAID is a secure personal cloud storage broker that provides data availability, security, and privacy for private usage. But some of the challenges need to be resolved to use CloudRAID as an enterprise cloud storage broker solution, such as complicated key management, absence of role-based hierarchical access control, and lack of administrative oversight. In this paper we tackle these challenges and propose an enterprise version of CloudRAID called CloudRAID for Business (CfB). We combine CloudRAID with ciphertext-policy attribute-based encryption (CP-ABE) and implement administrative oversight for monitoring activities in CfB system and multiple CSPs. Our evaluation of CfB demonstrates that it offers robust security measures through fine-grained role-based access control, scalable key management for multi-user-and-device scenarios, reduces complexity of file sharing revocation, file-level security, and administrative oversight.

关键词： Key management scalability ciphertext-policy attribute-based encryption role-based access control

来源：评论

学校读者我要写书评

暂无评论

CP-ABE Scheme Satisfying Constant-size Keys based on ECC 17

CP-ABE Scheme Satisfying Constant-size Keys based on ECC

引用

17th International Joint Conference on E-Business and Telecommunications (SECRYPT)

作者： Raj, Nishant Pais, Alwyn Roshan Natl Inst Technol Karnataka Dept Comp Sci & Engn Surathkal Karnataka India

ISBN: (纸本)9789897584466

Cloud-based applications, especially on IoT devices, is one of the desired fields to apply ciphertext-policy attribute-based encryption (CP-ABE). Most of the IoT devices are with the low-end configuration;hence, they need better time and computation efficient algorithms. There are existing algorithms, but none of the systems are based on conventional cryptosystems as well as secure at the same time. Here, we propose a CP-ABE scheme based on the elliptic curve cryptosystem with a constant-size secret key, which is capable of addressing the collusion attack security issue.

关键词： ciphertext-policy attribute-based encryption Elliptic Curve based Cryptography Cloud Computing Security Constant-size Secret Key

来源：评论

学校读者我要写书评

暂无评论

An enhanced traceable CP-ABE scheme against various types of privilege leakage in cloud storage

引用

JOURNAL OF SYSTEMS ARCHITECTURE 2023年第1期136卷

作者： He, Xu Li, Lixiang Peng, Haipeng Beijing Univ Posts & Telecommun Informat Secur Ctr State Key Lab Networking & Switching Technol Beijing 100876 Peoples R China Beijing Univ Posts & Telecommun Natl Engn Lab Disaster Backup & Recovery Beijing 100876 Peoples R China

Cloud storage can save not only local storage costs but also provide data-sharing services. ciphertext-policy attribute-based encryption (CP-ABE) can work as the underlying engine for cloud storage since it supports one -to-many encryption and fine-grained access control. To prevent users from disclosing their access permissions, we can apply traceable CP-ABE systems. There are two kinds of traceability: white-box traceability and black-box traceability. White-box traceability is simple and efficient, but it cannot support black-box tracing;black-box traceability supports white-box tracing, but its operations are usually cumbersome. So, these two kinds of traceability are unable (or unsuitable) to solve each other's problems. However, in cloud storage applications, users may leak their privileges in various ways, which means the underlying CP-ABE system should have multiple traceability. Unfortunately, the current traceable CP-ABE schemes only support single traceability. Therefore, we propose a novel CP-ABE scheme with enhanced traceability. It intertwines white -box and black-box traceability together securely and efficiently, which makes it more targeted and simpler to solve distinct tracing problems than previous schemes. Moreover, the proposed scheme has scalability, flexible policy expressiveness, and certain advantages in computing performance.

关键词： Cloud storage Privilege leakage ciphertext-policy attribute-based encryption Black-box traceability White-box traceability

来源：评论

学校读者我要写书评

暂无评论

Secure and Efficient Conjunctive Keyword Search Scheme without Secure Channel

引用

KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS 2019年第5期13卷 2718-2731页

作者： Wang, Jianhua Zhao, Zhiyuan Sun, Lei Zhu, Zhiqiang Zhengzhou Informat Sci & Technol Inst Zhengzhou 450001 Henan Peoples R China

Conjunctive keyword search encryption is an important technique for protecting sensitive data that is outsourced to cloud servers. However, the process of searching outsourced data may facilitate the leakage of sensitive data. Thus, an efficient data search approach with high security is critical. To solve this problem, an efficient conjunctive keyword search scheme based on ciphertext-policy attribute-based encryption is proposed for cloud storage environment. This paper proposes an efficient mechanism for removing the secure channel and resisting off-line keyword-guessing attacks. The storage overhead and the computational complexity are regardless of the number of keywords. This scheme is proved adaptively secure based on the decisional bilinear Diffie-Hellman assumption in the standard model. Finally, the results of theoretical analysis and experimental simulation show that the proposed scheme has advantages in security, storage overhead and efficiency, and it is more suitable for practical applications.

关键词： ciphertext-policy attribute-based encryption Conjunctive keyword search Secure channel Keyword-guessing attacks Search policy

来源：评论

学校读者我要写书评

暂无评论

Poly-ABE: A traceable and revocable fully hidden policy CP-ABE scheme for integrated demand response in multi-energy systems

引用

JOURNAL OF SYSTEMS ARCHITECTURE 2023年 143卷

作者： Xue, Jingting Shi, Lingjie Zhang, Wenzheng Li, Wenyi Zhang, Xiaojun Zhou, Yu Southwest Petr Univ Sch Comp Sci Res Ctr Cyber Secur Chengdu 610500 Peoples R China 30th Res Inst China Elect Sci & Technol Grp Corp Key Lab Confidential Commun Chengdu 610041 Peoples R China

Demand response is a crucial measure in multi-energy systems (MESs) that encourages energy service providers (ESPs) to engage with energy users (EUs). In the energy internet, EUs can match their energy source requirements through integrated demand response (IDR). However, such permissionless retrieval of energy data compromises the privacy of ESPs and exposes the energy consumption data of EUs. To address this, we propose a traceable, revocable fully hidden policy CP-ABE scheme called Poly-ABE for a data-driven IDR model in MESs, which allows registered EUs to request data and ESPs to authorize data decryption. Poly-ABE features fine-grained access policies using a matrix, coupled with hidden vector encryption to fully hide the policies. Matrix policies offer flexible and complex authorization rules with lower cost. Moreover, Poly-ABE constructs a decryption permission binary tree (DPBT) to identify the attribute permissions of EUs. If malicious behavior is detected, the DPBT is used to determine a minimum set of tree nodes to pinpoint malicious nodes. We rigorously demonstrate that Poly-ABE is selectively secure against selective access policy and chosen plaintext attacks. The experimental results substantiate the feasibility of Poly-ABE, highlighting its pre-authentication, traceability, revocation, and update capabilities.

关键词： ciphertext-policy attribute-based encryption (CP-ABE) Fully hidden policy Decryption permission revocation Multi-energy system Data-driven IDR

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：