检索结果-内蒙古大学图书馆

fine-grained access control Method for Blockchain Data Sharing based on Cloud Platform Big Data

INTERNATIONAL JOURNAL OF ADVANCED COMPUTER SCIENCE AND APPLICATIONS 2022年第10期13卷 24-31页

作者： Qiu, Yu Sun, Biying Dang, Qian Du, Chunhui Li, Na State Grid Gansu Elect Power Co Internet Div Lanzhou Peoples R China

Blockchain technology has the advantages of decentralization, de-trust, and non-tampering, which breaks through the limitations of traditional centralized technology, so it has gradually become the key technology of power data security storage and privacy protection. In the existing smart grid framework, the grid operator is a centralized key distribution organization, which is responsible for sending all the secret credentials, so it is easy to have a single point of failure, resulting in a large number of personal information losses. To solve the problems of inflexible access control in smart grid data-sharing framework and considering the limitation of multi-party cooperation among grid operators and efficiency, an attribute-based access control scheme supporting privacy preservation in smart grid is constructed in this paper. A fine-grained access control scheme supporting privacy protection is designed and extended to the smart grid system, which enables the system to achieve fine-grained access control of power data. A decryption test algorithm is added before the decryption algorithm. Finally, through performance analysis and comparison with other schemes, it is verified that the performance of this system is 7% higher than the traditional method, and the storage cost is 9.5% lower, which reflects the superiority of the system. Full optimization of the access policy is achieved. It is proved that the scheme is more efficient to implement the coordination and cooperation of multiple authorized agencies in the system initialization.

关键词： Power grid data blockchain technology data sharing fine-grained access control game strategy ciphertext key

来源：评论

学校读者我要写书评

暂无评论

FACOS: Enabling Privacy Protection Through fine-grained access control With On-Chain and Off-Chain System

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2024年 19卷 7060-7074页

作者： Liu, Chao Hou, Cankun Jiang, Tianyu Ning, Jianting Qiao, Hui Wu, Yusen Wuhan Univ Sch Cyber Sci & Engn Wuhan 430072 Peoples R China Tsinghua Univ Dept Informat Technol Yangtze Delta Reg Inst Jiaxing 314006 Peoples R China Fujian Prov Key Lab Data Intens Comp Quanzhou 362000 Peoples R China Key Lab Intelligent Comp & Informat Proc Quanzhou 362000 Peoples R China Fujian Normal Univ Coll Comp & Cyber Secur Fuzhou 350007 Peoples R China Ocean Univ China Coll Engn Qingdao 266100 Peoples R China Yugong Technol Co Ltd Res & Dev Ctr Hangzhou 310000 Peoples R China Univ Miami Dept Comp Sci Miami FL 33146 USA

Data-driven landscape across finance, government, and healthcare, the continuous generation of information demands robust solutions for secure storage, efficient dissemination, and fine-grained access control. Blockchain technology emerges as a significant tool, offering decentralized storage while upholding the tenets of data security and accessibility. However, on-chain and off-chain strategies are still confronted with issues such as untrusted off-chain data storage, absence of data ownership, limited access control policy for clients, and a deficiency in data privacy and auditability. To solve these challenges, we propose a permissioned blockchain-based privacy-preserving fine-grained access control on-chain and off-chain system, namely FACOS. We applied three fine-grained access control solutions and comprehensively analyzed them in different aspects, which provides an intuitive perspective for system designers and clients to choose the appropriate access control method for their systems. Compared to similar work that only stores encrypted data in centralized or non-fault-tolerant IPFS systems, we enhanced off-chain data storage security and robustness by utilizing a highly efficient and secure asynchronous Byzantine fault tolerance (BFT) protocol in the off-chain environment. As each of the clients needs to be verified and authorized before accessing the data, we involved the Trusted Execution Environment (TEE)-based solution to verify the credentials of clients. Additionally, our evaluation results demonstrated that our system (https://***/cliu717/AsynchronousStorage) offers better scalability and practicality than other state-of-the-art designs. We deployed our system on Alibaba Cloud and Tencent Cloud and conducted multiple evaluations. The results indicate that it takes about 2.79 seconds for a client to execute the protocol for uploading and about 0.96 seconds for downloading. Compared to other decentralized systems, our system exhibits efficient l

关键词： access control Blockchains Encryption Security Data privacy Memory Government Blockchain privacy and security data sharing fault tolerance fine-grained access control

来源：评论

学校读者我要写书评

暂无评论

Key-Policy Attribute-Based Encryption With Switchable Attributes for fine-grained access control of Encrypted Data

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2024年 19卷 7245-7258页

作者： Luo, Fucai Wang, Haiyan Yan, Xingfu Wu, Jiahui Zhejiang Gongshang Univ Sch Comp Sci & Technol Hangzhou 310018 Peoples R China Peng Cheng Lab Dept New Networks Shenzhen 518000 Peoples R China South China Normal Univ Sch Comp Sci Guangzhou 510006 Peoples R China

fine-grained access control systems facilitate granting differential access rights to a set of users and allow flexibility in specifying the access rights of individual users. As an important fine-grained access control technique, key-policy attribute-based encryption (KP-ABE) has been introduced to achieve fine-grained access control over encrypted data, where each ciphertext is associated with an attribute set such that users satisfying the attribute set can decrypt the ciphertext. In the real-world application scenarios of KP-ABE, various situations such as users leaving the system, compromise of users' private keys, and business requirements frequently occur, necessitating the revocation of decryption rights for large-scale users. To address the user revocation, numerous revocable KP-ABE schemes have been proposed. However, existing revocable KP-ABE schemes are vulnerable to quantum computer attacks. More importantly, existing solutions fail to address the user addition, where users capable of decrypting certain ciphertexts would like to grant decryption rights to others;this is a highly common requirement, such as changes in user decryption permissions and business needs. This paper explores a potentially new avenue of research to address the above issues by introducing a novel cryptographic primitive called key-policy ABE with switchable attributes (KP-ABE-SA). In the KP-ABE-SA system, each ciphertext linked to an attribute set can be transformed into one associated with another (distinct) attribute set, enabling both user revocation and addition. Furthermore, to withstand quantum computer attacks, we construct a KP-ABE-SA scheme based on the Learning with Errors (LWE) assumption, which is widely believed to be quantum-resistant. Finally, we conduct a comprehensive performance evaluation of our LWE-based KP-ABE-SA scheme, and the experimental results show that the proposed LWE-based KP-ABE-SA scheme is efficient and practical.

关键词： Quantum computing Switches Encryption Permission Urban areas Resistance Hospitals fine-grained access control key-policy attribute-based encryption (KP-ABE) lattice-based crypto-graphy user revocation/addition

来源：评论

学校读者我要写书评

暂无评论

Domain-Specific fine-grained access control for Cloud-Edge Collaborative IoT

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2024年 19卷 6499-6513页

作者： Xiao, Meiyan Huang, Qiong Chen, Wenya Lyu, Chuan Susilo, Willy South China Agr Univ Coll Math & Informat Guangzhou 510642 Peoples R China Guangzhou Key Lab Intelligent Agr Guangzhou 510642 Peoples R China Univ Wollongong Sch Comp & Informat Technol Wollongong NSW 2500 Australia

The cloud-edge collaborative data sharing supporting data confidentiality can be realized by adopting outsourced Attribute-Based Encryption (ABE) schemes. Yet, most existing schemes in such kind of scenarios are facing challenges such as vulnerable terminal devices that are easy to be attacked, lack of flexible authorization management methods for a large number of devices, and lack methods to securely specify on-demand data sharing domains. In this paper, we propose a Domain-specific On-demand access control scheme with fully Independent Revocation (DOACIR), which not only realizes a three-layer on-demand data sharing framework for cloud-edge collaborative IoT environments but also allows data uploader to restrict the data sharing domain through a succinct way. The attribute authority and multiple edge servers perform data access authorization collaboratively to improve the data sharing efficiency as well as avoid the key-abuse problem and key-leakage problem. Fully independent user revocation is also realized in DOACIR to flexibly manage terminal devices in IoT. Further, we improve the scheme to support cross-domain data sharing, namely Cross-Domain DOACIR (CD-DOACIR), by improving the encryption phase allowing data uploader to specify any number of sharing domains while the size of ciphertext remains constant. We provide the security proofs of DOACIR and CD-DOACIR, and the experiment results demonstrate the effectiveness and efficiency of our solutions in cloud-edge collaborative on-demand data sharing.

关键词： Servers Cloud computing Collaboration Encryption Internet of Things Outsourcing Computer architecture attribute-based encryption edge computing fine-grained access control on-demand data sharing

来源：评论

学校读者我要写书评

暂无评论

Accountable attribute-based authentication with fine-grained access control and its application to crowdsourcing

引用

Frontiers of Computer Science 2023年第1期17卷 205-218页

作者： Peng LI Junzuo LAI Yongdong WU College of Information Science and Technology Jinan UniversityGuangzhou 510632China

We introduce a new notion called accountable attribute-based authentication with fine-grained access control (AccABA), which achieves (i) fine-grained access control that prevents ineligible users from authenticating;(ii) anonymity such that no one can recognize the identity of a user;(iii) public accountability, i.e., as long as a user authenticates two different messages, the corresponding authentications will be easily identified and linked, and anyone can reveal the user’s identity without any help from a trusted third party. Then, we formalize the security requirements in terms of unforgeability, anonymity, linkability and traceability, and give a generic construction to fulfill these requirements. Based on AccABA, we further present the first attribute-based, fair, anonymous and publicly traceable crowdsourcing scheme on blockchain, which is designed to filter qualified workers to participate in tasks, and ensures the fairness of the competition between workers, and finally balances the tension between anonymity and accountability.

关键词： fine-grained access control anonymous authentication accountability fairness crowdsourcing blockchain

来源：评论

学校读者我要写书评

暂无评论

fine-grained access control for Power Mobile Service Based on PA Network Under Zero-Trust Framework 8th

Fine-Grained Access Control for Power Mobile Service Based o...

引用

8th International Conference on Artificial Intelligence and Security (ICAIS)

作者： Li, Yong Chen, Lu Li, Nige Lu, Ziang Dai, Zaojian Wu, Fan Global Energy Interconnect Res Inst Inst Informat & Commun Nanjing 210003 Peoples R China State Grid Key Lab Informat & Network Secur Nanjing 210003 Peoples R China Tuskegee Univ Comp Sci Dept Tuskegee AL 36088 USA

ISBN: (纸本)9783031067914;9783031067907

In the power mobile interconnection scenario, the traditional rolebased access control (RBAC) is no longer applicable due to the large number of mobile terminals and resource services, complex and diverse access requirements, and data security. In this paper, a fine-grained access control system based on Planner-Analyst network is designed under the framework of Zero Trust, and the hierarchical model that based on perception layer, edge layer, network layer, control layer and application layer is constructed. When the access information is generated, the Planner network classifies the access subject into a role through the control method of role attribute fusion, in which the role has a horizontal permission span, the Analyst network generates the access security probability index according to the access subject information, which has the depth of authority in the vertical sense In the end, the access controller controls the access of the request from the access subject according to the pre-set permission threshold, The contribution of this paper is to propose a new type of zero-trust system architecture based on existing research, which has better stability and higher security in structure and function, but its disadvantage is that the total calculation is large.

关键词： fine-grained access control Zero-trust framework Power mobile interconnection services Planner-Analyst network Variable cache module

来源：评论

学校读者我要写书评

暂无评论

A fine-grained access control Mechanism Based on Search Trees 22

A Fine-Grained Access Control Mechanism Based on Search Tree...

引用

IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) / BigDataSE Conference / CSE Conference / EUC Conference / ISCI Conference

作者： Zou, Xianxia Zheng, Cenyu Lin, Haodong Du, Like Xu, Weiwu He, Chong Jinan Univ Coll Informat Sci & Technol Guangzhou Peoples R China

ISBN: (纸本)9798350381993;9798350382006

The security of cloud-based databases is a crucial topic in current research. The primary solutions are focused on access control and data encryption. A central challenge these solutions face is navigating the balance between system security and operational efficiency. However, individualized data privacy requires fine-grained data protection at columns/rows or individual elements. In existing fine-grained resource or policy protection methods, resource access predominantly uses a traversal method, leading to a linear growth in time overhead. In response to these issues, this paper presents a fine-grained access control mechanism based on search trees. This mechanism provides element-level resource protection and accelerates policy search using an index tree, thereby reducing the time overhead of the fine-grained access control system. Experimental results demonstrate that this mechanism achieves element-level resource protection while maintaining low-performance overhead.

关键词： Database Security Resource Protection fine-grained access control Search Trees

来源：评论

学校读者我要写书评

暂无评论

A Lightweight fine-grained access control Scheme with Forward Security for Mobile Crowdsourcing 2

A Lightweight Fine-Grained Access Control Scheme with Forwar...

引用

2nd International Conference on Mobile Internet, Cloud Computing and Information Security (MICCIS)

作者： Hong, Keyong Wang, Tao Wang, Zhichao Wang, Jintang Shaanxi Normal Univ Sch Comp Sci Xian Peoples R China

ISBN: (纸本)9798350389913;9798350389906

As a service model that leverages large-scale terminal users on mobile devices to collaboratively complete tasks, mobile crowdsourcing services have significant advantages in promoting distributed collaboration and improving task completion efficiency. However, they also present challenges such as task privacy, task assignment and scheduling, and fine-grained access control. The existing cryptographic schemes for mobile crowdsourcing services have not adequately addressed these issues. Therefore, this paper proposes a forward secure attribute-based keyword search scheme tailored for mobile crowdsourcing services, effectively achieving fine-grained access control, fine-grained ciphertext retrieval, forward security, and data outsourcing confidentiality. Security analysis demonstrates that the scheme can withstand the chosen plaintext attacks and also satisfies index privacy and trapdoor unlinkability. Theoretical comparisons and simulation results confirm that the proposed scheme exhibits superior practicality and efficiency compared to related approaches, making it well-suited for mobile crowdsourcing services.

关键词： Mobile Crowdsourcing Services Attribute-based Keyword Search fine-grained access control Forward Security Data Outsource

来源：评论

学校读者我要写书评

暂无评论

A distributed privacy-preserving data aggregation scheme for smart grid with fine-grained access control

引用

JOURNAL OF INFORMATION SECURITY AND APPLICATIONS 2022年 66卷

作者： Zhang, Wenzheng Liu, Shiyun Xia, Zhe Sci & Technol Commun Secur Lab Chengdu Peoples R China Wuhan Univ Technol Sch Comp Sci & Artificial Intelligence Wuhan Peoples R China Guizhou Univ Guizhou Key Lab Publ Big Data Guiyang Peoples R China

Smart grid integrates smart meters and modern communication technologies with the traditional electricity grid. It not only improves efficiency in power resource management, but also enhances reliability of the grid. However, the power consumption data may reveal users' privacy, e.g. their living habits, and its authenticity is also important for accurate billing. Although a number of privacy preserving data aggregation schemes for smart grid have been proposed in the literature, most of them still suffer some limitations. For example, a single party is normally required to decrypt the aggregated data and this party could be a single point of failure in the system. Moreover, once the aggregated data is decrypted, no access control is imposed and it is available to the public. In order to address the above problems, we introduce a distributed privacy-preserving data aggregation scheme for smart grid with fine-grained access control. In the proposed scheme, homomorphic encryption is employed to ensure user privacy, digital signature is used to ensure data authenticity, distributed proxy re-encryption is used to achieve fine-grained access control of the aggregated data, and zero-knowledge proof is used to ensure that the proxy servers perform their tasks properly. Security analyses prove that the proposed scheme achieves the desirable security properties. In particular, it does not suffer single point of failure and the aggregated data can only be accessed by the designated recipient. Efficiency analyses also demonstrate that it is practical for real-world applications.

关键词： Data aggregation Privacy preservation fine-grained access control

来源：评论

学校读者我要写书评

暂无评论

The Queen's Guard: A Secure Enforcement of fine-grained access control In Distributed Data Analytics Platforms 23

The Queen's Guard: A Secure Enforcement of Fine-grained Acce...

引用

39th Annual Computer Security Applications Conference (ACSAC)

作者： Shaon, Fahad Rahaman, Sazzadur Kantarcioglu, Murat Data Secur Technol Dallas TX 75252 USA Univ Arizona Tucson AZ USA

ISBN: (纸本)9798400708862

Distributed data analytics platforms (i.e., Apache Spark, Hadoop) provide high-level APIs to programmatically write analytics tasks that are run distributedly in multiple computing nodes. The design of these frameworks was primarily motivated by performance and usability. Thus, the security takes a back seat. Consequently, they do not inherently support fine-grained access control or offer any plugin mechanism to enable it, making them risky to be used in multi-tier organizational settings. There have been attempts to build "add-on" solutions to enable fine-grained access control for distributed data analytics platforms. In this paper, first, we show that straightforward enforcement of "add-on" access control is insecure under adversarial code execution. Specifically, we show that an attacker can abuse platform-provided APIs to evade access controls without leaving any traces. Second, we designed a two-layered (i.e., proactive and reactive) defense system to protect against API abuses. On submission of a user code, our proactive security layer statically screens it to find potential attack signatures prior to its execution. The reactive security layer employs code instrumentation-based runtime checks and sandboxed execution to throttle any exploits at runtime. Next, we propose a new fine-grained access control framework with an enhanced policy language that supports map and filter primitives. Finally, we build a system named SECUREDL with our new access control framework and defense system on top of Apache Spark, which ensures secure access control policy enforcement under adversaries capable of executing code. To the best of our knowledge, this is the first fine-grained attribute-based access control framework for distributed data analytics platforms that is secure against platform API abuse attacks. Performance evaluation showed that the overhead due to added security is low.

关键词： Apache Spark Security Distributed Systems Security fine-grained access control Program Analysis

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：