检索结果-内蒙古大学图书馆

Cloud assisted semi-static secure accountable authority identity-based broadcast encryption featuring public traceability without random oracles

引用

ANNALS OF TELECOMMUNICATIONS 2023年第1-2期78卷 79-90页

作者： Singh, Amit Kumar Acharya, Kamalesh Dutta, Ratna IIT Kharagpur Dept Math Kharagpur 721302 W Bengal India Vellore Inst Technol Sch Adv Sci Div Math Chennai 600127 Tamil Nadu India

Cloud computing has gained widespread popularity in the industry and academia and rapidly becomes an integral part of our everyday life. It offers several benefits including reduced cost on technical support for data backups, saving electric power and maintenance cost. These encourage the major industry players like Google, IBM, Microsoft to invest into cloud storage with the goal to extend the spectrum of cloud-based services from open public to closed private. One of the crucial challenges in cloud computing is the security of outsourced data. Sharing sensitive data among multiple users under the same domain in a secure and efficient way requires technical solutions. identity-based broadcast encryption (IBBE) is an important building block in cryptography. This is a one to many encryption that broadcasts a message to many identities. In this paper, we address the key escrow problem of IBBE. As private key generator (PKG) generates secret keys for users, it has the capability to decrypt the ciphertext and recover the message. The accountable authority IBBE was introduced to give accountability in IBBE, where white-box A-IBBE can differentiate the creator of a given pirated private key between the PKG and suspected user and black-box A-IBBE can further trace the creator of a decoder box. In our construction, we have established the secret key by using zero-knowledge proof between the user and PKG. The decryption key is held by the user only. This restricts PKG to re-distribute keys maliciously and solves the key escrow problem. Inspired by the work of Zhao et al., we develop an accountable authority identity-based broadcast encryption scheme (A-IBBE). Our construction is the first publicly traceable weak black-box A-IBBE scheme secure against the indistinguishability under chosen-identity and chosen-plaintext attack in the standard model. We support the conjectured security of our candidate by analysis and prove its security without using any random oracle under the

关键词： Bilinear paring identity-based broadcast encryption Semi-static Weak black-box accountability

来源：评论

学校读者我要写书评

暂无评论

KeyD: Secure Key-Deduplication with identity-based broadcast encryption

引用

IEEE TRANSACTIONS ON CLOUD COMPUTING 2021年第2期9卷 670-681页

作者： Liu, Ling Zhang, Yuqing Li, Xuejun Xidian Univ Sch Cyber Engn Xian 710071 Peoples R China Grad Univ Chinese Acad Sci Natl Comp Network Intrus Protect Ctr Beijing 100049 Peoples R China

Deduplication, which can save storage cost by enabling us to store only one copy of identical data, becomes unprecedentedly significant with the dramatic increase in data stored in the cloud. For the purpose of ensuring data confidentiality, they are usually encrypted before outsourced. Traditional encryption will inevitably result in multiple different ciphertexts produced from the same plaintext by different users' secret keys, which hinders data deduplication. Convergent encryption makes deduplication possible since it naturally encrypts the same plaintexts into the same ciphertexts. One attendant problem is how to reliably and effectively manage a huge number of convergent keys. Several deduplication schemes have been proposed to deal with the convergent key management problem. However, they either need to introduce key management servers or require interaction between data owners. In this paper, we design a novel client-side deduplication protocol named KeyD without such an independent key management server by utilizing the identity-based broadcast encryption (IBBE) technique. Users only interact with the cloud service provider (CSP) during the process of data upload and download. Security analysis demonstrates that KeyD ensures data confidentiality and convergent key security, and well protects the ownership privacy simultaneously. A thorough and detailed performance comparison shows that our scheme makes a better tradeoff among the storage cost, communication and computation overhead.

关键词： Data deduplication convergent encryption convergent key management identity-based broadcast encryption

来源：评论

学校读者我要写书评

暂无评论

identity-based broadcast encryption with Outsourced Partial Decryption for Hybrid Security Models in Edge Computing 19

Identity-Based Broadcast Encryption with Outsourced Partial ...

引用

ACM Asia Conference on Computer and Communications Security (Asia CCS)

作者： Kim, Jongkil Camtepe, Seyit Susilo, Willy Nepal, Surya Baek, Joonsang Univ Wollongong Wollongong NSW Australia CSIRO Data61 Marsfield Australia

ISBN: (纸本)9781450367523

Each layer of nodes and communication networks in edge computing, from cloud to the end device (i.e, often considered as resource-constrained IoT devices), exhibits a different level of trust for each stakeholder - e.g., edge nodes may not be fully trusted by IoT devices and the cloud. Moreover, asymmetric nature of resources between layers makes it hard to establish a balance between security and performance - e.g., lightweight cryptography may degrade security level against untrusted nodes while heavyweight ones may not be feasible for the light-weight end devices. An advanced encryption scheme such as the identity-based broadcast encryption (IBBE) is a popular technique to reduce storage and communication overhead. However, IBBE requires heavy computation to the end devices and still does not fully satisfy the security requirements that exist in the layers of edge computing. This paper presents a new IBBE with outsourced partial decryption for hybrid security models that each layer in edge computing requires. It balances the computational overhead based on asymmetric nature that nodes in each layer have. Particularly, with new schemes, the ciphertext can be transformed from its initial format. The cloud encrypts their data for multiple end devices and store them in the edge nodes, but those interim nodes can blindly transform the ciphertext from the cloud into a form which (i) is decryptable by only an authorized end device, and (ii) imposes smaller decryption and data transmission burden to end devices, regardless of the number of recipients. Our security analysis shows that new schemes are selectively and adaptively secure. We implement our solution and show that new schemes reduce the communication overhead from an edge node to end devices and the computation overhead on the end devices, compared to the original IBBE schemes.

关键词： identity-based encryption identity-based broadcast encryption Outsourced decryption Edge computing

来源：评论

学校读者我要写书评

暂无评论

identity-based broadcast encryption with continuous leakage resilience

引用

INFORMATION SCIENCES 2018年 429卷 177-193页

作者： Li, Jiguo Yu, Qihong Zhang, Yichen Hohai Univ Coll Comp & Informat Nanjing 211100 Jiangsu Peoples R China Suqian Coll Sch Comp Sci Suqian 223800 Peoples R China

identity-based broadcast encryption (IBBE) is an important type of broadcast encryption. In the paper, we put forward the formal definition and security model of IBBE with leakage resilience. Furthermore, we propose an IBBE scheme with continuous leakage-resilience. The presented scheme is resilient to private key leakage. By refreshing the private key, our scheme can resist continuous private key leakage. based on dual system encryption technique, we prove the security of the proposed scheme under subgroup decisional assumptions. We give the specific performance analysis of leakage-resilience. The relative leakage ratio can amount to 1/3. (C) 2017 Elsevier Inc. All rights reserved.

关键词： identity-based broadcast encryption Private key leakage Dual system encryption

来源：评论

学校读者我要写书评

暂无评论

Anonymous identity-based broadcast encryption technology for smart city information system

引用

PERSONAL AND UBIQUITOUS COMPUTING 2017年第5期21卷 841-853页

作者： He, Kai Weng, Jian Mao, Yijun Yuan, Huaqiang DongGuan Univ Technol Sch Comp & Network Secur Dongguan Guangdong Peoples R China Jinan Univ Dept Comp Sci Guangzhou Guangdong Peoples R China Shenzhen Univ Guangdong Prov Big Data Collaborat Innovat Ctr Shenzhen Peoples R China South China Univ Agr Sch Math & Informat Guangzhou Guangdong Peoples R China

A smart city can utilize information and communication technologies to minimize energy, waste, and resource consumption and attain high-efficiency services, so it directly improves the life quality of all residents. However, it also brings about some security and privacy challenges. For instance, once the ubiquitous network in the smart city is attacked, all of the sensitive information and residents' identities will be revealed. In many application scenarios, the anonymity of residents is a desirable security property. After all, nobody wants to be traced for his daily activity or personal habits. In this paper, we propose a generic identity-based broadcast encryption scheme which can satisfy information's confidentiality and users' anonymity simultaneously under chosen-ciphertext attacks. What is different from our previous work which was published in ACISP 2016 is that we present the proof of confidentiality and focus on the application environment. The generic IBBE construction has a desirable property that its public parameter size and private key size are constant as well as its decryption cost is independent of the number of receivers. Thus, no matter from which point of views, the construction is very appropriate for smart city information system.

关键词： Smart city identity-based broadcast encryption Anonymity Chosen-ciphertext security

来源：评论

学校读者我要写书评

暂无评论

Recipient Revocable identity-based broadcast encryption How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext 16

Recipient Revocable Identity-Based Broadcast Encryption How ...

引用

11th ACM Asia Conference on Computer and Communications Security (ASIA CCS)

作者： Susilo, Willy Chen, Rongmao Guo, Fuchun Yang, Guomin Mu, Yi Chow, Yang-Wai Univ Wollongong Wollongong NSW 2522 Australia

ISBN: (纸本)9781450342339

In this paper, we present the notion of recipient-revocable identity-based broadcast encryption scheme. In this notion, a content provider will produce encrypted content and send them to a third party (which is a broadcaster). This third party will be able to revoke some identities from the cipher-text. We present a security model to capture these requirements, as well as a concrete construction. The ciphertext consists of k + 3 group elements, assuming that the maximum number of revocation identities is k. That is, the ciphertext size is linear in the maximal size of R, where R is the revocation identity set. However, we say that the additional elements compared to that from an IBBE scheme are only for the revocation but not for decryption. Therefore, the ciphertext sent to the users for decryption will be of constant size (i.e.,3 group elements). Finally, we present the proof of security of our construction.

关键词： identity-based broadcast encryption Recipients Revocation Constant Size

来源：评论

学校读者我要写书评

暂无评论

Anonymous identity-based broadcast encryption with Chosen-Ciphertext Security 16

Anonymous Identity-Based Broadcast Encryption with Chosen-Ci...

引用

11th ACM Asia Conference on Computer and Communications Security (ASIA CCS)

作者： He, Kai Weng, Jian Liu, Jia-Nan Liu, Joseph K. Liu, Wei Deng, Robert H. Jinan Univ Dept Comp Sci Guangzhou 510632 Guangdong Peoples R China Monash Univ Fac Informat Technol Clayton Vic 3800 Australia Singapore Management Univ Sch Informat Syst Singapore 178902 Singapore

ISBN: (纸本)9781450342339

In this paper, we propose the first identity-based broadcast encryption scheme, which can simultaneously achieves confidentiality and full anonymity against adaptive chosen-ciphertext attacks under a standard assumption. In addition, two further desirable features are also provided: one is fully-collusion resistant which means that even if all users outside of receivers S collude they cannot obtain any information about the plaintext. The other one is stateless which means that the users in the system do not need to update their private keys when the other users join or leave the system. In particular, our scheme is highly efficient, where the public parameters size, the private key size and the decryption cost are all independent to the number of the receivers.

关键词： anonymous identity-based broadcast encryption adaptive chosen-ciphertext security weakly robust random oracle model

来源：评论

学校读者我要写书评

暂无评论

Adaptively Secure identity-based broadcast encryption With a Constant-Sized Ciphertext

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2015年第3期10卷 679-693页

作者： Kim, Jongkil Susilo, Willy Au, Man Ho Seberry, Jennifer Univ Wollongong Sch Comp Sci & Software Engn Ctr Comp & Informat Secur Res Wollongong NSW 2522 Australia Hong Kong Polytech Univ Dept Comp Hong Kong Hong Kong Peoples R China

In this paper, we present an adaptively secure identity-based broadcast encryption system featuring constant sized ciphertext in the standard model. The size of the public key and the private keys of our system are both linear in the maximum number of receivers. In addition, our system is fully collusion-resistant and has stateless receivers. Compared with the state-of-the-art, our scheme is well optimized for the broadcast encryption. The computational complexity of decryption of our scheme depends only on the number of receivers, not the maximum number of receivers of the system. Technically, we employ dual system encryption technique and our proposal offers adaptive security under the general subgroup decisional assumption. Our scheme demonstrates that the adaptive security of the schemes utilizing a composite order group can be proven under the general subgroup decisional assumption, while many existing systems working in a composite order group are secure under multiple subgroup decision assumptions. We note that this finding is of an independent interest, which may be useful in other scenarios.

关键词： Cryptography public key broadcast encryption identity-based broadcast encryption

来源：评论

学校读者我要写书评

暂无评论

identity-based broadcast Proxy Re-encryption for Flexible Data Sharing in VANETs

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2023年 18卷 4830-4842页

作者： Zhang, Jing Su, Shuangshuang Zhong, Hong Cui, Jie He, Debiao Anhui Univ Sch Comp Sci & Technol Key Lab Intelligent Comp & Signal Proc Minist Educ Hefei Peoples R China Anhui Univ Sch Comp Sci & Technol Anhui Engn Lab IoT Secur Technol Hefei 230039 Peoples R China Wuhan Univ Sch Cyber Sci & Engn Wuhan 430072 Peoples R China

Data sharing is an integral part of vehicular ad hoc networks (VANETs), which provide drivers with safe and comfortable driving environments. However, when data are shared among multiple vehicles, they must be encrypted multiple times. Some solutions have used identity-based broadcast encryption to solve this problem. However, these schemes have two major limitations. First, the decryption cost is linearly related to the number of data receivers, where the identity of other receivers must be known. Second, only the data sender can forward the data. To address these important deficiencies, we propose an identity-based broadcast proxy re-encryption scheme to realize flexible and efficient data-sharing in VANETs. The data sender generates a fixed ciphertext that can be obtained by newly added vehicles through authorized vehicles. Data receivers can decrypt ciphertext directly without knowing the identities of other receivers, where the decryption overhead is constant. In addition, our scheme can achieve complete anonymous data sharing to protect vehicle privacy. A security proof shows that our scheme has sufficient security, and a performance analysis shows that our scheme performs well. Our proposed scheme is thus suitable for securing VANETs.

关键词： VANETs multi-receiver identity-based broadcast encryption proxy re-encryption Lagrange interpolation polynomial

来源：评论

学校读者我要写书评

暂无评论

Real-Time Lightweight Cloud-based Access Control for Wearable IoT Devices: A Zero Trust Protocol 1

Real-Time Lightweight Cloud-Based Access Control for Wearabl...

引用

1st International Workshop on Security and Privacy of Sensing Systems (Sensors S and P) Part of SenSys Conference

作者： Ejiyeh, Atefeh Mohseni Univ Calif Santa Barbara Santa Barbara CA 93106 USA

ISBN: (纸本)9798400704406

In IoT, smart sensors enable data collection, real-time monitoring, decision-making, and automation, but their proliferation exposes them to cybersecurity threats. Zero Trust Architecture enhances IoT security by challenging conventional trust models and emphasizing continuous trust verification in the overall $875.0 billion IoT market projected by 2025. This paper presents a new Zero-Trust Real-Time Light-weight Access Control Protocol for Cloud-centric Dynamic IoT Sensor Networks. This protocol empowers data owners, referred to as sensor coordinators, to define intricate access policies, blending recipient identifiers and data-related attributes for data encryption. Additionally, the protocol incorporates efficient cryptographic primitives, eliminating the need for reliance on a trusted party. Furthermore, it ensures real-time data access while preserving data confidentiality and user privacy through seamless data upload to the cloud and the offloading of computationally intensive tasks from resource-constrained data owners and sensors. The protocol utilizes Merkle Trees for lightweight, ongoing trust measurement of sensors, ensuring efficient trust assessment by sensor coordinators. Simultaneously, the cloud conducts thorough trust evaluations for network entities including users. Comprehensive security analysis and performance evaluation highlight the protocol's effectiveness in tackling the multifaceted security challenges of IoT ecosystems while ensuring scalability and high availability.

关键词： Attribute-based encryption identity-based broadcast encryption Merkle tree Elliptic-curve Diffie-Hellman

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：