检索结果-内蒙古大学图书馆

Two Practical attribute-based encryption Schemes for Privacy-Preserving Mobile Location-Sharing Applications

IEEE INTERNET OF THINGS JOURNAL 2025年第5期12卷 5148-5159页

作者： Chen, Zhenhua Li, Ni Huang, Luqi Jia, Xingxing Wang, Yilei Wang, Hao Su, Jing Xian Univ Sci & Technol Sch Comp Sci & Technol Xian 710054 Peoples R China Guilin Univ Elect Technol Guangxi Key Lab Cryptog & Informat Secur Guilin 541004 Peoples R China Jinan Univ Coll Cyber Secur Guangzhou 510632 Peoples R China Univ Wollongong Sch Comp & Informat Technol Wollongong NSW 2522 Australia Lanzhou Univ Sch Math & Stat Lanzhou 730000 Peoples R China Qufu Normal Univ Sch Comp Sci Rizhao 276827 Peoples R China Shandong Normal Univ Sch Informat Sci & Engn Jinan 250061 Peoples R China

Location sharing, as an essential component of mobile applications, helps mobile users share location information and enhance their community connections. However, users may be reluctant to share their locations with personal privacy concerns, as anyone including location server who knows these locations can infer much sensitive information about users through analyzing these locations' information plus their background knowledge. Therefore, it poses a natural question for mobile location-sharing applications how to share users' locations without any breach of their privacy. To answer this question, in this article, we describe two practical attribute-based encryption schemes served privacy-preserving mobile location-sharing applications. Our proposals are quite suitable for such a mobile application-location sharing with common interests since in our designs users' interests are also taken into consideration as well as location information. In particular, our two schemes have a higher performance in the sense that in our first construction both ciphertexts and private keys are of constant size simultaneously, and our second construction is an extension of the first that provides a tradeoff between ciphertext size and public-key size. Therefore, the two schemes we designed in this work are quite practical in mobile applications which are often equipped with limited transmission or storage resources. Finally, we offer a formal security proof under a well-defined security model, followed by an experimental evaluation and a theoretical performance comparison.

关键词： Servers Privacy Mobile applications Security Public key encryption Computer science Nickel Internet of Things Costs attribute-based encryption location sharing mobile applications privacy-preserving

来源：评论

学校读者我要写书评

暂无评论

Levelled attribute-based encryption for hierarchical access control

引用

COMPUTER STANDARDS & INTERFACES 2025年 93卷

作者： Le, Huy Quoc Le, Phi Thuong Trinh, Sy Tuan Susilo, Willy Trinh, Viet Cuong Tan Tao Univ Sch Informat Technol Tan Tao Univ Ave Duc Hoa 82700 Long An Provinc Vietnam Hong Duc Univ Fac Informat & Commun Technol Dong Ve Ward Quang Trung St Thanh Hoa City 40130 Thanh Hoa Provi Vietnam Univ Wollongong Sch Informat Technol & Comp Northfields Ave Wollongong NSW 2522 Australia

attribute-based encryption (ABE) is an important primitive to address the problem of flexible one-to-many encryption. attribute-based encryption has found many practical applications such as cloud storage systems, file sharing systems, e-Health, pay-TV systems, social networks, etc. However, in almost existing ABE schemes, the efficiency depends heavily on the number of attributes involved in the secret key and the ciphertext. This makes hierarchical access control in ABE, where attributes need to be hierarchically organized, could be inefficient. This paper introduces a novel concept of Levelled attribute-based encryption (Levelled ABE) as a solution to address the inefficiencies of standard ABE for hierarchical access control systems, where scalability and key management are critical. Levelled ABE presents a hierarchical attribute framework where attributes are organized into classes, and each attribute is assigned a level number within its class. By introducing this hierarchical structure, Levelled ABE enables finer-grained access control, scalability and more efficient key management. As a proof of concept, this paper also proposes two concrete constructions of Levelled ABE, one for key-policy and the other for ciphertext-policy. These constructions are comparable to existing ABE schemes. The security of the proposed constructions is proved in the generic group model.

关键词： Levelled attribute-based encryption Hierarchical attribute Key-policy Ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

GPABE: GPU-based Parallelization Framework for attribute-based encryption Schemes

引用

IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS 2025年第3期36卷 520-536页

作者： Xu, Wenhan Ma, Hui Zhang, Rui Li, Jianhao Chinese Acad Sci Inst Informat Engn IIE State Key Lab Cyberspace Secur Def Beijing 100093 Peoples R China Univ Chinese Acad Sci Sch Cybersecur Beijing 100049 Peoples R China

attribute-based encryption (ABE) has emerged as a new paradigm for access control in cloud computing. However, despite the many promising features of ABE, its deployment in real-world systems is still limited, partially due to the expensive cost of its underlying mathematical operations, which often grow linearly with the size and complexity of the system's security policies. This becomes particularly challenging in data-intensive applications, where multiple users may simultaneously access and manipulate large volumes of data, resulting in high levels of con- currency and demand for computing resources, which are too heavy even for high-end servers. Further exacerbating the issues are the functionality and security requirements of a cloud, as they introduce additional computations to both the client and the server. Therefore, in this work, we introduce GPABE, the first GPU-based parallelization framework for ABE to facilitate its batch processing in cloud computing. By analyzing ABE's major computational workload, we identify multiple arithmetic modules that are common in the design of pairing-based ABEs. based on the analysis, we further propose to decompose the ABE algorithm into computation graph, which can be efficiently implemented on the GPU platform. Our graph representation bridges the gap between ABE's high-level design and their low-level implementation on GPUs, and is applicable to a variety of popular schemes in the realm of ABE. We then implement GPABE as a heterogeneous computing server, with several optimization techniques to improve its throughput. Finally, we evaluate the GPU implementation of several ABE schemes using GPABE. The results show a speedup of least 51.0x and at most 253.6x for the throughput of ABE algorithms, compared to their state-of-the-art CPU implementations, which preliminarily demonstrated the effectiveness of GPABE.

关键词： Graphics processing units Parallel processing Servers encryption Optimization Arithmetic Security Instruction sets Costs Cloud computing attribute-based encryption cloud computing data encryption parallel processing computation graph GPU

来源：评论

学校读者我要写书评

暂无评论

TSR-ABE: Traceable and Server-Aided Revocable Ciphertext-Policy attribute-based encryption Under Static Assumptions

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2025年 20卷 955-967页

作者： Meng, Fei Cheng, Leixiao Shandong Univ Sch Cyber Sci & Technol Qingdao 266237 Peoples R China Shandong Univ Sch Cyber Sci & Technol Qingdao 266237 Peoples R China

The cloud server is a versatile platform for data storage, with users increasingly uploading personal data to public servers to circumvent costly local storage. However, the server is not entirely honest, as it may potentially compromise user data privacy. Ciphertext-policy attribute-based encryption (CP-ABE) is a highly flexible cryptographic technique for ensuring access control over encrypted data in cloud storage applications. To prevent unauthorized access, traceability and revocability are two necessary requirements for CP-ABE system. Nevertheless, existing white-box traceable and revocable CP-ABE schemes suffer from several imitations: 1) Whether direct revocation or indirect revocation is applied, neither type of the revocation mode is well compatible with the trace function. 2) Moreover, all of the previous white-box traceable CP-ABE schemes rely on non-static assumptions to prove traceability. Ideally, a scheme provably secure under static complexity assumptions is preferable. To deal with these issues, we propose a novel traceable and server-aided revocable CP-ABE (TSR-ABE) scheme based on static assumptions. Specifically, our revocation mode works well with the trace function, and we prove the adaptive chosen-plaintext attack security and traceability of our scheme via the well-known dual system encryption methodology. Compared with many previous traceable CP-ABE schemes, regardless of whether they support revocation or not, we remove the need to introduce an additional l-SDH assumption to prove the traceability of the scheme. In addition, our scheme is more practical due to its lower private key size, lower decryption costs and lower tracing costs. As a result, we strengthen current research from the perspective of both security and efficiency.

关键词： Servers Cloud computing Glass box encryption Vectors Costs Complexity theory Access control Outsourcing Generators attribute-based encryption traceability revocability server-aided static assumption

来源：评论

学校读者我要写书评

暂无评论

An efficient ciphertext-policy weighted attribute-based encryption with collaborative access for cloud storage

引用

COMPUTER STANDARDS & INTERFACES 2025年 91卷

作者： Li, Ximing Wang, Hao Ma, Sha South China Agr Univ Coll Math & Informat Guangzhou 510000 Guangdong Peoples R China

The encryption of user data is crucial when employing cloud storage services to guarantee the security of these data stored on cloud servers. attribute -based encryption (ABE) scheme is considered a powerful encryption technique that offers flexible and fine-grained access control capabilities. Further, the multi-user collaborative access ABE scheme additionally supports users to acquire access authorization through collaborative works. However, the existing multi-user collaborative access ABE schemes do not consider the different weights of collaboration users. Therefore, using these schemes for weighted multi-user collaborative access results in either redundant attributes or unsuccessful construction of the access control structure. For this, we proposes the special attribute policy (SAP) problem about weighted multi-user collaborative access, and presents an efficient ciphertext-policy weighted attribute -based encryption with collaborative access scheme (CP-WABECA), which can provide efficient collaborative access control for multiple users with different weights. In detail, this scheme utilizes a novel weighted access tree to prevent attribute repetition, thereby eliminating redundant attributes and addressing the issue of constructing access control structures. We prove our scheme is resistant against chosen plaintext attack. The experimental results demonstrate that our scheme has significant computational efficiency advantages compared to related works, without increasing storage or communication overhead. Therefore, the CP-WABE-CA scheme can provide an efficient flexible weighted collaborative access control mechanisms for cloud storage.

关键词： Cloud storage attribute-based encryption Weighted attribute Collaborative access Access control

来源：评论

学校读者我要写书评

暂无评论

A comprehensive framework for secure keyword search in cloud databases through hybrid attribute-based encryption (HABE)

引用

International Journal of Information Technology (Singapore) 2025年 1-6页

作者： Arundathi, J.V.S. Satyanarayana, K.V.V. Department of Computer Science and Engineering Koneru Lakshmaiah Education Foundation (KLEF) Vaddeswaram Guntur District Andhra Pradesh Guntur India

Efficient keyword search in encrypted databases is critical in cloud computing due to its computational memory and time constraints. Traditional keyword search methods often employ plaintext attributes and policies within the ciphertext policy attribute based encryption (CP-ABE) scheme, which pose security risks. Thus, the given paper introduces a hybrid integrity-based approach that enhances the CP-ABE scheme by incorporating hidden attributes and policy construction. Utilizing a novel non-linear chaotic hash algorithm alongside a hybrid attribute-based encryption (HABE) model, this framework significantly optimizes runtime and search efficiency. Experimental results demonstrate superior keyword search performance in terms of accuracy (95.47%) as compared to conventional models, proving the efficacy of the proposed approach in maintaining data security and integrity in cloud environments. © Bharati Vidyapeeth's Institute of Computer Applications and Management 2025.

关键词： attribute-based encryption Cloud data security Hash functions Keyword search Secret key distribution

来源：评论

学校读者我要写书评

暂无评论

A traceable and revocable decentralized attribute-based encryption scheme with fully hidden access policy for cloud-based smart healthcare

引用

COMPUTER STANDARDS & INTERFACES 2025年 92卷

作者： Dai, Yue Xue, Lulu Yang, Bo Wang, Tao Zhang, Kejia Heilongjiang Univ Sch Math Sci Harbin 150080 Peoples R China Shaanxi Normal Univ Sch Comp Sci Xian 710119 Peoples R China Xidian Univ State Key Lab Integrated Serv Networks Xian 710071 Peoples R China Guizhou Univ State Key Lab Publ Big Data Guiyang 550000 Peoples R China

Smart healthcare is an emerging technology for enabling interaction between patients and medical personnel, medical institutions, and medical devices utilizing advanced Internet of Things (IoT) technologies. It has attracted significant attention from researchers because of the convenience of storing and sharing electronic medical records (EMRs) in the cloud. Given that a patient's EMR contains sensitive individual information, it must be encrypted before uploading it to the cloud. Asa solution for data confidentiality and finegrained access control, the Ciphertext Policy attribute-based encryption (CP-ABE) technique is proposed, which helps manipulate private personal data without explicit authorization. However, most CP-ABE schemes use a centralized mechanism which may lead to performance bottlenecks and single-point-of-failure issues. They will also be at risk of key abuse and privacy breaches in smart healthcare applications. To this end, in this paper, we investigate a traceable and revocable decentralized attribute-based encryption scheme with a fully hidden access policy (TR-HP-DABE). Firstly, to overcome the issues of user privacy leakage and single-point-of-failure, a fully hidden access policy is established for multiple attribute authorities. Secondly, to prevent key abuse, the proposed TR-HP-DABE can achieve the tracking and revocation of malicious users by using Key encryption Key (KEK) trees and updating the partial ciphertext. Furthermore, the online/offline encryption and verifiable outsourced decryption are applied to improve its efficiency in practical smart healthcare. According to our analysis, the security and traceability of TR-HP-DABE can be proved. Finally, the performance evaluation of TR-HP-DABE is more effective than some existing typical ones.

关键词： Privacy protection attribute-based encryption Fully hidden access policy Online/offline encryption Verifiable outsourced decryption Traceability Revocation

来源：评论

学校读者我要写书评

暂无评论

Verifiable and auditable multi-authority attribute-based encryption

引用

COMPUTER STANDARDS & INTERFACES 2025年 94卷

作者： Wang, Xingwang Zeng, Peng Luo, Jiaying East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China

attribute-based encryption (ABE) is crucial for cloud computing security as it enables fine-grained non- interactive access control and allows efficient and secure data sharing without relying on trusted third parties. Multi-authority ABE (MABE) is an improvement to traditional single-authority ABE because the former can remove the key escrow problem existed in the latter and thus is more appropriate for access control of some special applications. Recently, Zhou et al. proposed an auditable MABE (A-MABE) scheme in which the authorities are categorized into a trusted authority and several attribute authorities. For the confirmation and protection of data ownership, we propose verifiable A-MABE (VA-MABE) schemes in this paper. The additional feature of verifiability is achieved by our newly proposed zero-knowledge proof protocol which enables a data sender (i.e. data owner) to prove the ownership of the encrypted data without leaking sensitive information. Our proposed VA-MABE schemes also afford authorities the flexibility to join or exit the system with a minimal cost. Addressing concerns about centralized audit power, we incorporate technologies that decentralize this role, thereby enhancing the system's resilience.

关键词： attribute-based encryption Multi-authority Verifiability Auditability Access control Zero-knowledge proof

来源：评论

学校读者我要写书评

暂无评论

Location Data Sharing Method based on Blockchain and attribute-based encryption 6th

Location Data Sharing Method Based on Blockchain and Attri...

引用

6th International Conference on Blockchain and Trustworthy Systems, BlockSys 2024

作者： Sun, Xueping Liu, Peng Liao, Bingjie He, Qian State and Local Joint Engineering Research Center for Satellite Navigation and Location Service Guilin University of Electronic Technology Guilin541004 China Guangxi Key Laboratory of Cryptography and Information Security Guilin University of Electronic Technology Guilin541004 China

ISBN: (纸本)9789819614103

With the development of communication technology and the prevalence of mobile smart devices, location-based services have been widely applied in various scenarios. However, the data typically provided by location-based services includes sensitive information such as personal identity, posing a risk of privacy leakage. Due to the limited resources of mobile smart devices, data is typically uploaded to semi-trusted cloud servers for storage and sharing, leading to the possibility of malicious access and abuse of data. To address these issues, we propose a location data sharing method based on blockchain and attribute-based encryption scheme. By combining blockchain technology with ciphertext-policy attribute-based encryption technology, the shared data is authenticated with trust while providing fine-grained access control. The immutability and traceability features of blockchain are utilized to enhance the security of the entire system. Furthermore, local differential privacy is employed to locally perturb the data before sharing, ensuring that individual privacy in location data remains uncompromised by untrusted third parties. Security analysis and performance evaluation indicate that our scheme is superior to the existing solutions. © The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025.

关键词： Access Control attribute-based encryption Blockchain Local Differential Privacy Location-based Service

来源：评论

学校读者我要写书评

暂无评论

Efficient attribute-based Searchable encryption With Policy Hiding Over Personal Health Records

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2025年第2期22卷 1299-1312页

作者： Zhang, Boyu Yang, Wenjie Zhang, Futai Ning, Jianting Fujian Normal Univ Coll Comp & Cyber Secur Fuzhou 350117 Peoples R China Fujian Normal Univ Coll Comp & Cyber Secur Fujian Prov Key Lab Network Secur & Cryptol Fuzhou 350117 Peoples R China Fujian Normal Univ Coll Comp & Cyber Secur Key Lab Analyt Math & Applicat Minist Educ Fuzhou 350007 Peoples R China City Univ Macau Fac Data Sci Macau Peoples R China

Due to the introduction of cloud computing in healthcare services, personal health records (PHRs) have being uploaded to cloud servers in increasing numbers. Since data confidentiality requirements exist, data owners should encrypt their PHRs in advance of transmitting them to a cloud server. attribute-based encryption with keyword search (ABKS) technique ensures that the encrypted PHRs are able to retrieved by other data users whose attributes match access polices granted by data owners. However, access polices are public in most existing ABKS schemes, which can reveal sensitive information contained in PHRs. In this article, we provide an efficient ABKS scheme with policy hiding for PHRs that implements the following features. (1) The fine-grained access control is achieved where data owners can authorize which data users can retrieve encrypted PHRs. (2) The access policy is hidden to safeguard sensitive information from being leaked. (3) The costs of storage and computation do not grow linearly as the number of attributes increases. The security of the presented ABKS scheme is reduced to the truncated q-DABDHE assumption and the DDH assumption. Its performance is also demonstrated by our extensive simulation experiments.

关键词： Cryptography Servers encryption Cloud computing Security Medical services Keyword search Access control attribute-based encryption fast keyword search hidden policy

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：