检索结果-内蒙古大学图书馆

Secure access privilege delegation using attribute-based encryption

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2023年第5期22卷 1261-1276页

作者： Panda, Suryakanta Mondal, Samrat Das, Ashok Kumar Susilo, Willy Indian Inst Technol Patna Dept Comp Sci & Engn Bihta India Int Inst Informat Technol Ctr Secur Theory & Algorithm Res Hyderabad India Univ Wollongong Inst Cybersecur & Cryptol Wollongong Australia

attribute-based encryption (ABE) is widely used for a secure and efficient data sharing. The predetermined access policy of ABE shares the data with intended data users. However, ABE is not preferable in many applications that require collaboration among data users. In such applications, an authorized data user may be interested to collaborate with another data user who does not adhere to the access policy. Fixed access policy of ABE does not allow an authorized data user (who satisfies the access policy) to collaborate or share the data with any unauthorized data user (who fails to satisfy the access policy). Thus, due to the static and predefined access policy, data collaboration in ABE is significantly challenging. In this work, we attempt to address this important issue of ABE through proxy re-encryption mechanism. We have formally proved the security of our proposed system. Moreover, we have demonstrated that the proposed system permits revocation of delegation rights.

关键词： attribute-based encryption Proxy re-encryption Cryptographic access control Secure access delegation

来源：评论

学校读者我要写书评

暂无评论

White-Box Traceable Ciphertext-Policy attribute-based encryption Supporting Any Monotone Access Structures

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2013年第1期8卷 76-88页

作者： Liu, Zhen Cao, Zhenfu Wong, Duncan S. Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai 200240 Peoples R China City Univ Hong Kong Dept Comp Sci Kowloon Hong Kong Peoples R China

In a ciphertext-policy attribute-based encryption (CP-ABE) system, decryption keys are defined over attributes shared by multiple users. Given a decryption key, it may not be always possible to trace to the original key owner. As a decryption privilege could be possessed by multiple users who own the same set of attributes, malicious users might be tempted to leak their decryption privileges to some third parties, for financial gain as an example, without the risk of being caught. This problem severely limits the applications of CP-ABE. Several traceable CP-ABE (T-CP-ABE) systems have been proposed to address this problem, but the expressiveness of policies in those systems is limited where only AND gate with wildcard is currently supported. In this paper we propose a new T-CP-ABE system that supports policies expressed in any monotone access structures. Also, the proposed system is as efficient and secure as one of the best (non-traceable) CP-ABE systems currently available, that is, this work adds traceability to an existing expressive, efficient, and secure CP-ABE scheme without weakening its security or setting any particular trade-off on its performance.

关键词： attribute-based encryption ciphertext-policy traceability

来源：评论

学校读者我要写书评

暂无评论

Semantic attribute-based encryption: A framework for combining ABE schemes with semantic technologies

引用

INFORMATION SCIENCES 2022年 616卷 558-576页

作者： Arshad, Hamed Johansen, Christian Owe, Olaf Picazo-Sanchez, Pablo Schneider, Gerardo Univ Oslo Dept Informat Oslo Norway Norwegian Univ Sci & Technol Oslo Norway Chalmers Univ Technol Gothenburg Sweden Univ Gothenburg Dept Comp Sci & Engn Gothenburg Sweden

attribute-based encryption (ABE) is a cryptographic solution to protect resources in a finegrained manner based on a set of public attributes. This is similar to attribute-based access control schemes in the sense that both rely on public attributes and access control policies to grant access to resources. However, ABE schemes do not consider the semantics of attributes provided by users or required by access structures. Such semantics not only improve the functionality by making proper access decisions but also enable cross-domain interoperability by making users from one domain able to access and use resources of other domains. This paper proposes a Semantic ABE (SABE) framework by augmenting a classical Ciphertext-Policy ABE (CP-ABE) scheme with semantic technologies using a generic procedure by which any CP-ABE scheme can be extended to an SABE. The proposed SABE framework is implemented in Java and the source code is publicly available. The experiment results confirm that the performance of the proposed framework is promising. (c) 2022 Elsevier Inc. All rights reserved.

关键词： attribute-based encryption Semantic technologies Security Interoperability Privacy Access control Ontology

来源：评论

学校读者我要写书评

暂无评论

Comments on "Verifiable and Exculpable Outsourced attribute-based encryption for Access Control in Cloud Computing"

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2017年第4期14卷 461-462页

作者： Xiong, Hu Sun, Jianfei Univ Elect Sci & Technol China Sch Informat & Software Engn Chengdu 610051 Peoples R China

Recently in IEEE Transactions on Dependable and Secure Computing (TDSC) (doi: 10.1109/TDSC.2015.2499755), Ma et al. proposed a new construction of attribute-based encryption (ABE) which can outsource the complicated encryption task to encryption Service Provider (ESP) in a verifiable manner. Despite the authors claimed that the results of the outsourced encryption can be checked by the user, we show that Ma et al.'s proposal fails to provide the verifiability property for outsourced encryption, the most essential security goal that a verifiable computation scheme should achieve. Specifically, by giving concrete attacks, we demonstrate that the ESP can return forged intermediate ciphertext to the user without being detected.

关键词： attribute-based encryption outsourced computation verifiability

来源：评论

学校读者我要写书评

暂无评论

attribute-based encryption in the Generic Group Model: Automated Proofs and New Constructions 17

Attribute-Based Encryption in the Generic Group Model: Autom...

引用

24th ACM-SIGSAC Conference on Computer and Communications Security (ACM CCS)

作者： Ambrona, Miguel Barthe, Gilles Gay, Romain Wee, Hoeteck IMDEA Software Inst Madrid Spain Univ Politecn Madrid Madrid Spain ENS Paris France CNRS Paris France

ISBN: (纸本)9781450349468

attribute-based encryption (ABE) is a cryptographic primitive which supports fine-grained access control on encrypted data, making it an appealing building block for many applications. In this paper, we propose, implement, and evaluate fully automated methods for proving security of ABE in the Generic Bilinear Group Model (Boneh, Boyen, and Goh, 2005, Boyen, 2008), an idealized model which admits simpler and more effcient constructions, and can also be used to find attacks. Our method is applicable to Rational-Fraction Induced ABE, a large class of ABE that contains most of the schemes from the literature, and relies on a Master Theorem, which reduces security in the GGM to a (new) notion of symbolic security, which is amenable to automated verification using constraint-based techniques. We relate our notion of symbolic security for Rational-Fraction Induced ABE to prior notions for Pair Encodings. Finally, we present several applications, including automated proofs for new schemes.

关键词： automated proofs symbolic security attribute-based encryption generic group model

来源：评论

学校读者我要写书评

暂无评论

A Hybrid attribute-based encryption Technique Supporting Expressive Policies and Dynamic attributes

引用

INFORMATION SECURITY JOURNAL 2012年第6期21卷 297-305页

作者： Weber, Stefan G. Ctr Adv Secur Res CASED Mornewegstr32 D-64293 Darmstadt Germany

This article proposes a novel hybrid attribute-based encryption technique. It is attribute-based, as it allows encrypting under logical combinations of attributes, that is, properties that users satisfy. It is hybrid, as it combines ciphertextpolicy attribute-based encryption (CP-ABE) with location-based encryption (LBE) on the level of symmetric keys. It supports encryption under expressive policies, since it can efficiently handle dynamic attributes with continuous values, such as location.

关键词： attribute-based encryption cryptography secure communication

来源：评论

学校读者我要写书评

暂无评论

Decentralized ciphertext-policy attribute-based encryption schemes for lightweight devices

引用

COMPUTER COMMUNICATIONS 2019年 145卷 113-125页

作者： Malluhi, Q. M. Shikfa, A. Tran, V. D. Trinh, V. C. Qatar Univ Coll Engn Doha Qatar Hanoi Univ Sci & Technol Hanoi Vietnam Hong Duc Univ Thanh Hoa Vietnam

In a traditional attribute-based encryption (ABE) system, there is only one central authority who generates and hence knows the secret keys of all users, this problem is known as the key escrow problem. An ABE scheme which can deal with the aforementioned problem is so-called a decentralized (or multi-authority) ABE scheme. There have been several efforts to propose decentralized ABE schemes in the literature, and these schemes can enjoy some interesting properties such as fine-grained access control and full security. However, all of them suffer from two main weaknesses that are large secret key size and slow decryption time. These weaknesses are obviously not desirable for lightweight device applications such as Internet of Things applications. In this paper, we propose two decentralized ciphertext-policy attribute-based encryption schemes. Our proposed schemes have some nice properties such as constant-size secret key, fast decryption, optimized ciphertext size and fine-grained access control. Our schemes, as a result, could be seen as a solution for lightweight device applications. For completeness, we implement our schemes and give some concrete benchmarks.

关键词： Ciphertext-policy attribute-based encryption Decentralized Multi-authority Fast decryption Lightweight devices

来源：评论

学校读者我要写书评

暂无评论

Expressive ciphertext-policy attribute-based encryption with direct user revocation

引用

INTERNATIONAL JOURNAL OF EMBEDDED SYSTEMS 2017年第6期9卷 495-504页

作者： Bai, Cuicui Zhang, Yinghui Ma, Hua Liu, Zhenhua Xidian Univ Sch Math & Stat Xian 710071 Shaanxi Peoples R China Xian Univ Posts & Telecommun Natl Engn Lab Wireless Secur Xian 710121 Shaanxi Peoples R China State Key Lab Cryptol POB 5159 Beijing 100878 Peoples R China Chinese Acad Sci Inst Informat Engn State Key Lab Informat Secur Beijing 100093 Peoples R China

attribute-based encryption enables fine-grained access control on sensitive data with a specific user set. However, traditional ABE schemes cannot satisfy practical requirements of data sharing applications where users may leave or join a system frequently. In this paper, a ciphertext-policy ABE scheme with direct user revocation (DUR-CP-ABE) is proposed. In DUR-CP-ABE, both the private key and the ciphertext contain partial components associated with a user identity and a revocation list, respectively. A user can decrypt a ciphertext if and only if he/she is not in the revocation list and his/her attribute set satisfies the access policy, simultaneously. In addition, whenever revocation events occur, only ciphertext components associated with the revocation list need to be updated. Finally, the DUR-CP-ABE scheme is proved selectively secure under the decisional q-bilinear Diffie-Hellman exponent assumption in the standard model. Compared with the existing revocation-related schemes, the new scheme can achieve high efficiency and ensure the expression ability of access structure.

关键词： attribute-based encryption ABE user revocation access control data sharing

来源：评论

学校读者我要写书评

暂无评论

Privacy Preserving System for Integrated Broadcast-broadband Services using attribute-based encryption

引用

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS 2015年第3期61卷 328-335页

作者： Ohtake, Go Ogawa, Kazuto Safavi-Naini, Reihaneh NHK Japan Broadcasting Corp Sci & Technol Res Labs Tokyo Japan Univ Calgary Dept Comp Sci Calgary AB T2N 1N4 Canada

A number of integrated broadcast-broadband services have recently been launched which allow the viewers to receive the content via the airwaves together with additional information about the content via the Internet. By providing personal preferences viewers can expect more attractive and personalized services. Viewers would be only willing to share their information with providers that they trust. On the other hand, the viewers would like to distribute their preferences as wide as possible so that they can enjoy more interesting and diverse services. In this paper, a privacy preserving system for integrated broadcast-broadband service is proposed. The system allows viewers to share their personal information with service providers that satisfy certain criteria (possess certain attributes). An implementation of the system using a previously proposed attribute-based encryption scheme is given and the computation cost of the system is examined in practice. Using the system, a viewer can safely receive personalized services from a large number of service providers.

关键词： integrated broadcast-broadband service privacy preserving attribute-based encryption viewing history

来源：评论

学校读者我要写书评

暂无评论

Designing cloud-based electronic health record system with attribute-based encryption

引用

MULTIMEDIA TOOLS AND APPLICATIONS 2015年第10期74卷 3441-3458页

作者： Xhafa, Fatos Li, Jingwei Zhao, Gansen Li, Jin Chen, Xiaofeng Wong, Duncan S. Univ Politecn Cataluna Dept Llenguatges & Sistemes Informat Barcelona Spain Nankai Univ Coll Informat Tech Sci Tianjin 300071 Peoples R China S China Normal Univ Sch Comp Sci Guangzhou Guangdong Peoples R China Guangzhou Univ Sch Comp Sci Guangzhou Guangdong Peoples R China Xidian Univ State Key Lab Integrated Serv Networks ISN Xian Peoples R China City Univ Hong Kong Dept Comp Sci Kowloon Hong Kong Peoples R China

With the development of cloud computing, electronic health record (EHR) system has appeared in the form of patient-centric, in which patients store their personal health records (PHRs) at a remote cloud server and selectively share them with physicians for convenient medical care. Although the newly emerged form has many advantages over traditional client-server model, it inevitably introduces patients' concerns on the privacy of their PHRs due to the fact that cloud servers are very likely to be in a different trusted domain from that of the patients. In this paper, aiming at allowing for efficient storing and sharing PHRs and also eliminating patients' worries about PHR privacy, we design a secure cloud-based EHR system, which guarantees security and privacy of medical data stored in the cloud, relying on cryptographic primitive but not the full trust over cloud servers. based on our proposed basic EHR system, we provide several extensions including adding searchability, supporting revocation functionality and enabling efficient local decryption, which fills the gap between theoretical proposal and practical application.

关键词： Electronic health record attribute-based encryption Cloud computing

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：