检索结果-内蒙古大学图书馆

13th International Conference on Information Security Practice and Experience (ISPEC) / 3rd International Symposium on Security and Privacy in Social Networks and Big Data (SocialSec)

作者： Zhang, Xiao Wu, Faguo Yao, Wang Wang, Zhao Wang, Wenhua Beihang Univ Sch Math & Syst Sci Beijing 100191 Peoples R China Beihang Univ Ecole Cent Pekin Sino French Engineer Sch Beijing Peoples R China Minist Educ Key Lab Math Informat & Behav Semant Beijing Peoples R China Beihang Univ Beijing Adv Innovat Ctr Big Data & Brain Comp Beijing Peoples R China AVIC Econ & Technol Res Estab Beijing Peoples R China

Ciphertext-policy attribute-based encryption (CP-ABE) is regarded as one of the most suitable technologies for data access control in cloud storage system. It gives data owners direct and flexible control on access policies. However, there still exists practicality concerns in CP-ABE applications, for example, the key escrow problem, user revocability, and large ciphertext size. Considering these problems, we propose a multi-authority attribute-based encryption scheme with constant-size ciphertexts and user revocation for threshold access policy in this paper. The security proof shows that the proposed scheme is selectively secure under the augmented multi-sequence of exponents decisional Diffie-Hellman assumption, and it also achieves forward security, backward security, and collusion-resistance.

关键词： ciphertext-policy attribute-based encryption multi-authority attribute-based encryption threshold access policy user revocation

来源：评论

学校读者我要写书评

暂无评论

multi-authority attribute-based encryption Resilient against Auxiliary-Input Leakage

引用

电脑学刊 2020年第1期31卷 134-147页

作者： Hai-Ying Ma Zhan-Jun Wang Jin-Hua Wang Zhi-Jin Guan

The existing multi-authority attribute-based encryption (ABE) schemes cannot tolerate the secret key leakages under a variety of side-channel attacks. We integrate the auxiliary-input leakage model with dual system encryption technique, and reasonably design the generations of secret key and ciphertext, then propose a multi-authority attribute-based encryption resilient against auxiliary-input leakage. based on the modified Goldreich-Levin theorem and the subgroup decision problem assumptions, we prove our scheme to be fully secure even if the adversary can obtain the leakages on attribute-based private keys with the auxiliary input functions. Compared with the relative leakage-resilient ABE schemes, our scheme not only achieves numeric unbounded leakages on the attribute-based private key of users, but also support the multi-authority application scenarios. Therefore, our scheme can effectively resist a larger possible class of potential attackers in the decentralizing multi-authority ABE systems.

关键词： auxiliary-input leakage model dual system encryption multi-authority attribute-based encryption subgroup decision problem assumptions

来源：评论

学校读者我要写书评

暂无评论

Accountable and Revocable Large Universe Decentralized multi-authority attribute-based encryption for Cloud-Aided IoT

引用

IEEE ACCESS 2021年 9卷 123786-123804页

作者： Huang, Kaiqing Dongguan Polytech Modern Ind Innovat Practice Ctr Dongguan 523808 Peoples R China South China Normal Univ Sch Math Sci Guangzhou 510631 Peoples R China

The data collected, stored, shared, and accessed across different platforms in the dynamic IoT is mostly confidential and privacy-sensitive. Data security and access control issues urgently need to be addressed. multi-authority attribute-based encryption (MA-ABE) is seen as a potential solution for addressing data access control security concerns in the dynamic IoT since it allows for dynamic access control over encrypted data. However, the existing key abuse problem is severely destroying the security access control of MA-ABE. The existing accountable attribute-based encryption schemes only support small attributes (users) universe and single authority. Moreover, they do not support revocation. Some schemes are inefficient since they are constructed in the composite order bilinear group. In this article, the author proposes the first accountable and revocable large universe decentralized multi-authority attribute-based encryption scheme with outsourcing decryption based on prime order bilinear groups. The proposed scheme allows for the dynamic capacity expansion of attributes, users, and authorities. An audit mechanism is given to judge if the suspicious key was leaked by a malicious user or by authorities and to determine the identity of the leaker. The malicious user who divulges key can be punished by user-attribute revocation. The revocation mechanism is resistant to collusion attacks undertaken by revoked users and non-revoked users. Meanwhile, it satisfies the requirements of forward and backward security. The proposed scheme is static security in the random oracle model under the q-DPBDHE2 assumption. To save resources, the outsourced decryption module is optional for users with restricted resources. According to the results of the performance analysis, it is suited for large-scale cross-domain cooperation in the dynamic cloud-aided IoT.

关键词： encryption Access control Internet of Things Outsourcing Licenses Cloud computing Technological innovation Decentralized multi-authority attribute-based encryption accountability user-attribute revocation outsourcing decryption collusion attack

来源：评论

学校读者我要写书评

暂无评论

multi-authority attribute-based encryption scheme with constant-size ciphertexts and user revocation

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2019年第21期31卷

关键词： ciphertext-policy attribute-based encryption multi-authority attribute-based encryption threshold access policy user revocation

来源：评论

学校读者我要写书评

暂无评论

Secure Online/Offline multi-authority attribute-based encryption for Resource-Constrained Devices in Cloud Computing 4

Secure Online/Offline Multi-Authority Attribute-Based Encryp...

引用

IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI)

作者： Shao, Jiaye Zhu, Yanqin Ji, Qijin Soochow Univ Sch Comp Sci & Technol Suzhou Peoples R China

ISBN: (纸本)9781538693803

multi-authority attribute-based encryption (MAABE) is regarded as a promising cryptographic technique to handle the problem of access control for data sharing, because it provides the fine-grained access control over encrypted data. However, most of the existing MA-ABE schemes suffer from the disadvantages of expensive computational cost and weak security. In this paper, we present a novel secure online/offline multi-authority attribute-based encryption scheme for resource constrained devices in cloud computing. The proposed scheme reduces the online computation burden for data owners by completing the preprocessing computation as much as possible during the offline phase. The proposed scheme eliminates a major of computation overhead on the user side by migrating the partial decryption computation to the cloud servers. In order to guarantee data security, a Chameleon hash function is utilized to generate an immediate ciphertext embedded in the offline ciphertext. The proposed scheme is proven secure against adaptively chosen-ciphertext attacks The extensive analytical comparisons and experimental results indicate that the proposed scheme is efficient and very suitable for resource-constrained devices.

关键词： Access Control multi-authority attribute-based encryption Chosen-Ciphertext Security Resource-Constrained Devices Cloud Computing

来源：评论

学校读者我要写书评

暂无评论

Privacy-Preserving Online/Offline and Outsourced multi-authority attribute-based encryption 16

Privacy-Preserving Online/Offline and Outsourced Multi-Autho...

引用

16th IEEE/ACIS International Conference on Computer and Information Science (ICIS)

作者： Shao, Jiaye Zhu, Yanqin Ji, Qijin Soochow Univ Sch Comp Sci & Technol Suzhou Peoples R China

ISBN: (纸本)9781509055074

attribute based encryption(ABE) is an efficient technique that exploits attributes and access policies to achieve fine-grained access control in cloud computing. Besides, outspread ABE schemes with multiple authorities(multi-authority ABE) are more suitable for practical applications than basic single-authority ABE schemes. Nevertheless, existing multi-authority ABE schemes either can't preserve access policies' privacy or sustain expensive computational cost of encryption and decryption phases. In this paper, to tackle the above challenges, we propose an online/offline and outsourced multi-authority ABE scheme with policy protection. Roughly speaking, our main idea is to alleviate the online computation overhead for owners by splitting the encryption algorithm to the online encryption and offline encryption. During the decryption phase, users outsource massive decryption operations to the proxy server via the technique of transformation key. We can demonstrate that our scheme is secure and also protects the privacy of access policies according to security analysis. Furthermore, performance analysis shows that our scheme can lighten the computation burden for both owners and users and is quite appropriate for resource-limited devices in the multi-authority systems.

关键词： multi-authority attribute-based encryption Online/Offline encryption Outsourced Decryption Policy Privacy

来源：评论

学校读者我要写书评

暂无评论

Revocable Large Universe Decentralized multi-authority attribute-based encryption Without Key Abuse for Cloud-Aided IoT

引用

IEEE ACCESS 2021年 9卷 151713-151728页

作者： Huang, Kaiqing South China Normal Univ Sch Math Sci Guangzhou 510631 Peoples R China Dongguan Polytech Modern Ind Innovat Practice Ctr Dongguan 523808 Peoples R China

Data confidentiality and access control are the key technologies of secure Internet of things (IoT) since the circulated application data on multiple different domains in IoT are generally confidential and privacy-sensitive. Large universe multi-authority attribute-based encryption (MA-ABE) is considered a promising technique to protect data confidentiality and achieve fine-grained access control for large-scale cross-domain applications. However, MA-ABE is facing the severe key abuse problem. Much research is devoted to using audit technologies and trace technologies to determine who should be responsible for the misused key which has a certain deterrent effect and prevents the key abuse to a certain extent. But they can't solve the key abuse problem, since users still can leak the key and the leaked keys can still decrypt the ciphertext correctly. Moreover, they also cannot solve the key escrow problem. In this article, the author proposes the first revocable large universe decentralized MA-ABE without key abuse based on prime order bilinear groups. The proposed scheme allows for the dynamic capacity expansion of attributes, users, and authorities. It is not only static security in the random oracle model under the q-DPBDHE2 assumption but also secure against key abuse attacks launched by any party. Only the secret key owner can successfully decrypt the ciphertext with the secret key. The data user is unable to generate the available key different from her/his legal key by using her/his legal key. Neither CSP nor authority can generate the available decryption key or decrypt the ciphertext (even if the access policy is satisfied by the attributes it controls) using the keys it controls. An efficient user-attribute revocation mechanism is given and only a few operations are needed when decryption in the proposed scheme. The performance analysis results indicate that the proposed scheme is more efficient and suitable for the IoT.

关键词： encryption Access control Law Internet of Things Outsourcing Cloud computing Performance analysis Decentralized multi-authority attribute-based encryption key abuse user-attribute revocation outsourcing decryption

来源：评论

学校读者我要写书评

暂无评论

A revocable and outsourced multi-authority attribute-based encryption scheme in fog computing

引用

COMPUTER NETWORKS 2021年 195卷 108196-108196页

作者： Tu, Shanshan Waqas, Muhammad Huang, Fengming Abbas, Ghulam Abbas, Ziaul Haq Beijing Univ Technol Fac Informat Technol Engn Res Ctr Intelligent Percept & Autonomous Con Beijing 100124 Peoples R China Ghulam Ishaq Khan Inst Engn Sci & Technol Fac Comp Sci & Engn Topi 23460 Pakistan Ghulam Ishaq Khan Inst Engn Sci & Technol Fac Elect Engn Topi 23460 Pakistan

Fog computing is a revolutionary technology for the next generation to bridge the gap between cloud data centers and end-users. Fog computing is not a counterfeit for cloud computing but a persuasive counterpart. It also accredits by utilizing the network edge while still rendering the possibility to interact with the cloud. Nevertheless, the features of fog computing are encountering several security challenges. The security of end-users and/or fog servers brings a significant dilemma in implementing fog computing. Moreover, in conventional cloud computing, the attribute-based encryption (ABE) technology is not appropriate for end users due to restricted computing resources, i.e., limited resources, high end-to-end delay, and transmission capability. Hence, the revocation and outsourcing mechanisms become inappropriate between end-users and cloud servers. In this regard, this paper recommends a multi-authority attribute-based encryption (MA-ABE) technique to support revocation and outsource the attributes to fog computation. We present an attribute revocation scheme based on cipher-text attribute-based encryption by introducing the attribute group keys. In this process, the secret keys are dynamically altered and realized the requirement of immediate attribute revocations. Hence, we provide the complete encryption and decryption process for end-users and fog servers based on multi-authority, attribute revocation, and outsourcing computation, while most of the existing scheme lack to incorporate all these parameters. Our scheme also outsources the complicated encryption and decryption tasks to the fog server that significantly improves the overall computation efficiency compared to the state-of-the-art work.

关键词： Mobile fog computing multi-authority attribute-based encryption attribute revocation

来源：评论

学校读者我要写书评

暂无评论

A survey on multi-authority and decentralized attribute-based encryption

引用

JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING 2022年第1期13卷 515-533页

作者： Oberko, Prince Silas Kwesi Obeng, Victor-Hillary Kofi Setornyo Xiong, Hu Univ Elect Sci & Technol China Sch Informat & Software Engn Chengdu 610054 Peoples R China

The introduction of attribute-based encryption (ABE) targets to achieve the implementation of single-to-numerous encryption;however, the sole authority challenge and the issue of distributed management of attributes are bottlenecks to its realization. multi-authority attribute-based encryption (MA-ABE) where various attribute authorities (which may be independent of each other) control different attribute universe and are involved in the administration of attribute keys for decryption provides the necessary platform to undertake the implementation of fine-grained access regulation over shared data while achieving single-to-numerous encryption. In recent years, research into MA-ABE has seen rapid advancement, and we believe that it is a suitable solution to thwarting the key escrow problem as well as the problem of distributed management of attributes. This paper offers a thorough survey and examines the state-of-the-art of some traditional ABE as well as multi-authority attribute-based encryption schemes over the past decade. Furthermore, the survey gives detailed insights on some essential techniques as well as some classic concretely constructed algorithms. Moreover, we discuss an extension (the different directions) of MA-ABE and its progress since its inception. We also provide design principles of MA-ABE and also show comparisons between existing works on areas as security, performance, and functionality. This paper also discusses several interesting open problems. As far as we can tell, no comparable survey on MA-ABE exists in literature so far.

关键词： attribute-based encryption multi-authority attribute-based encryption Privacy preserving Survey Taxonomy

来源：评论

学校读者我要写书评

暂无评论

A decentralized multi-authority ciphertext-policy attribute-based encryption with mediated obfuscation

引用

SOFT COMPUTING 2020年第3期24卷 1869-1882页

作者： Li, Jiguo Hu, Shengzhou Zhang, Yichen Han, Jinguang Fujian Normal Univ Coll Math & Informat Fuzhou 350117 Fujian Peoples R China Hohai Univ Coll Comp & Informat Nanjing 211100 Jiangsu Peoples R China Fujian Normal Univ Fujian Prov Key Lab Network Secur & Cryptol Fujian Peoples R China Gannan Normal Univ Math & Comp Sci Dept Ganzhou 341000 Jiangxi Peoples R China Nanjing Univ Finance & Econ Jiangsu Prov Key Lab E Business Nanjing 210003 Peoples R China

To ensure security and obtain fine-grained data access control policies in many management domains, multi-authority attribute-based encryption (MA-ABE) schemes were presented and have been applied in cloud storage system. There exist certain scenes where the application domains managed by different attribute authorities (AAs) often change, and hence domain managements require more autonomous and independent. However, most of existing schemes do not support flexible managements. In order to support dynamic managements, we propose a new decentralized ciphertext-policy MA-ABE scheme with mediated obfuscation (MA-DCP-ABE-WMO) where each of AAs works independently without any interaction with other AAs. When issuing a secret key to a user, each of AAs uses his secret to compute a share of the system master secret. Data are encrypted under the public keys of attribute management domains. To resist collusion attack, a common pseudorandom function PRF(center dot) is shared among AAs and is used to randomize each user's global identifier Gid. The randomized Gid is adopted to unify all target messages which need to be reconstructed from different management domains. We first introduce the mediated obfuscation (MO) model into MA-ABE scheme to provide online service and the interaction works among data owner, data user and the mediator. In the MO model, we define a special functional encryption scheme where the function program can be coded into an element of the multiplicative cyclic group. We obfuscate the function by randomly selecting a blinding factor to conduct exponent arithmetic with the base of the function. A special input of the function is constructed to cancel the blinding factor when calling the obfuscated function. It makes other participants know nothing about the inner function program but can evaluate the function program. Furthermore, the MA-DCP-ABE-WMO scheme is proved to be secure. Compared with related schemes, our scheme is suitable to dynamic domain mana

关键词： multi-authority attribute-based encryption Collusion resistance Mediated obfuscation Decentralized Dynamic management

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：