检索结果-内蒙古大学图书馆

Puncturable attribute-based encryption From Lattices for Classified Document Sharing

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2024年 19卷 4028-4042页

作者： Yang, Mengxue Wang, Huaqun He, Debiao Nanjing Univ Posts & Telecommun Coll Comp Nanjing 210003 Peoples R China Wuhan Univ Sch Cyber Sci & Engn Wuhan 430072 Peoples R China

The country's governmental agencies bear the responsibility for overseeing and executing a wide range of national policies and initiatives, formulating pivotal determinations aimed at safeguarding national security and fostering long-term progress. Most of the decisions are highly confidential, encrypted and transmitted to diverse administrative regions, sectors, and individuals to facilitate execution. Hence, governmental agencies must formulate fine-grained access policies that support secure one-to-many document sharing. However, if the receivers' keys were exposed, it could result in unauthorized access to document contents, posing a significant threat to national security. When facing keys exposure scenario, addressing the challenge of preventing document content theft while maintaining document archiving for convenient accountability becomes a complex and demanding task. To tackle the above issues, we propose an innovative lattice-based puncturable ciphertext-policy attribute-based encryption scheme. This scheme supports secure one-to-many document sharing, fine-grained access control, and empowers receivers to revoke the decryption capability for specific data according to their own choice after reviewing documents, thereby achieving dual-layer protection for documents. Our scheme has exhibited resilience against quantum attacks, chosen plaintext attacks and collusion attacks.

关键词： attribute-based encryption puncturable encryption lattice data sharing

来源：评论

学校读者我要写书评

暂无评论

Multi-authority attribute-based encryption access control scheme with policy hidden for cloud storage

引用

SOFT COMPUTING 2018年第1期22卷 243-251页

作者： Zhong, Hong Zhu, Wenlong Xu, Yan Cui, Jie Anhui Univ Sch Comp Sci & Technol Hefei Anhui Peoples R China

For realizing the flexible, scalable and fuzzy fine-grained access control, ciphertext policy attribute-based encryption (CP-ABE) scheme has been widely used in the cloud storage system. However, the access structure of CP-ABE scheme is outsourced to the cloud storage server, resulting in the disclosure of access policy privacy. In addition, there are multiple authorities that coexist and each authority is able to issue attributes independently in the cloud storage system. However, existing CP-ABE schemes cannot be directly applied to data access control for multi-authority cloud storage system, due to the inefficiency for user revocation. In this paper, to cope with these challenges, we propose a decentralized multi-authority CP-ABE access control scheme, which is more practical for supporting the user revocation. In addition, this scheme can protect the data privacy and the access policy privacy with policy hidden in the cloud storage system. Here, the access policy that is realized by employing the linear secret sharing scheme. Finally, the security and performance analyses demonstrate that our scheme has high security in terms of access policy privacy and efficiency in terms of computational cost of user revocation.

关键词： attribute-based encryption Fuzzy access policy Policy hidden Cloud storage

来源：评论

学校读者我要写书评

暂无评论

White-Box Traceable Ciphertext-Policy attribute-based encryption Supporting Flexible attributes

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2015年第6期10卷 1274-1288页

作者： Ning, Jianting Dong, Xiaolei Cao, Zhenfu Wei, Lifei Lin, Xiaodong Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai 200240 Peoples R China E China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China Shanghai Ocean Univ Coll Informat Technol Shanghai 201306 Peoples R China Univ Ontario Inst Technol Fac Business & Informat Technol Oshawa ON L1H 7K4 Canada

Ciphertext-policy attribute-based encryption (CP-ABE) enables fine-grained access control to the encrypted data for commercial applications. There has been significant progress in CP-ABE over the recent years because of two properties called traceability and large universe, greatly enriching the commercial applications of CP-ABE. Traceability is the ability of ABE to trace the malicious users or traitors who intentionally leak the partial or modified decryption keys for profits. Nevertheless, due to the nature of CP-ABE, it is difficult to identify the original key owner from an exposed key since the decryption privilege is shared by multiple users who have the same attributes. On the other hand, the property of large universe in ABE enlarges the practical applications by supporting flexible number of attributes. Several systems have been proposed to obtain either of the above properties. However, none of them achieve the two properties simultaneously in practice, which limits the commercial applications of CP-ABE to a certain extent. In this paper, we propose two practical large universe CP-ABE systems supporting white-box traceability. Compared with existing systems, both the two proposed systems have two advantages: 1) the number of attributes is not polynomially bounded and 2) malicious users who leak their decryption keys could be traced. Moreover, another remarkable advantage of the second proposed system is that the storage overhead for traitor tracing is constant, which are suitable for commercial applications.

关键词： attribute-based encryption ciphertext-policy large universe white-box traceablity commercial applications

来源：评论

学校读者我要写书评

暂无评论

A semantic model based on ensemble learning and attribute-based encryption to increase security of smart buildings in fog computing

引用

JOURNAL OF SUPERCOMPUTING 2024年第18期80卷 26614-26657页

作者： Rezapour, Ronita Asghari, Parvaneh Javadi, Hamid Haj Seyyed Ghanbari, Shamsollah Islamic Azad Univ Qom Branch Dept Comp Engn Qom Iran Islamic Azad Univ Cent Tehran Branch Dept Comp Engn Tehran Iran Shahed Univ Dept Comp Engn Tehran Iran Islamic Azad Univ Ashtian Branch Dept Comp Engn Ashtian Iran

Fog computing is a revolutionary technology that, by expanding the cloud computing paradigm to the network edge, brings a significant achievement in the resource-constrained IoT applications in intelligent environments. However, security matters still challenge the extensive deployment of fog computing infrastructure. Ciphertext policy attribute-based encryption prepares a solution for data sharing and security preservation issues in fog-enhanced intelligent environments. Nevertheless, the lack of an effective mechanism to moderate the execution time of CP-ABE schemes due to the diversity of attributes used in secret key and access structure, as well as ensuring data security, practically restricts the deployment of such schemes. In this regard, a collaborative semantic model, including an outsourced CP-ABE scheme with the attribute revocation ability, together with an impressive AES algorithm relying on an ensemble learning system, was proposed in this study. The ensemble learning model uses multiple classifiers, including the GMDH, SVM, and KNN, to specify attributes corresponding to CP-ABE. The Dragonfly algorithm with a semantic leveling method generates outstanding and practical feature subsets. The experimental results on five smart building datasets indicate that the recommended model performs more accurately than existing methods. Also, the encryption, decryption, and attribute revocation execution time are significantly modified with the average time of 1.95, 2.11, and 14.64 ms, respectively, compared to existing works and conducted the scheme's security.

关键词： attribute-based encryption Ensemble learning Fog computing Smart buildings GMDH

来源：评论

学校读者我要写书评

暂无评论

Ciphertext-policy hierarchical attribute-based encryption with short ciphertexts

引用

INFORMATION SCIENCES 2014年 275卷 370-384页

作者： Deng, Hua Wu, Qianhong Qin, Bo Domingo-Ferrer, Josep Zhang, Lei Liu, Jianwei Shi, Wenchang Wuhan Univ Sch Comp Wuhan 430072 Peoples R China Beihang Univ Sch Elect & Informat Engn Beijing 100191 Peoples R China Renmin Univ China Sch Informat Beijing Peoples R China Univ Rovira & Virgili Dept Comp Engn & Math Catalonia Spain E China Normal Univ Inst Software Engn Shanghai 200062 Peoples R China

attribute-based encryption (ABE) systems allow encrypting to uncertain receivers by means of an access policy specifying the attributes that the intended receivers should possess. ABE promises to deliver fine-grained access control of encrypted data. However, when data are encrypted using an ABE scheme, key management is difficult if there is a large number of users from various backgrounds. In this paper, we elaborate on ABE and propose a new versatile cryptosystem referred to as ciphertext-policy hierarchical ABE (CP-HABE). In a CP-HABE scheme, the attributes are organized in a matrix and the users having higher-level attributes can delegate their access rights to the users at a lower level. These features enable a CP-HABE system to host a large number of users from different organizations by delegating keys, e.g., enabling efficient data sharing among hierarchically organized large groups. We construct a CP-HABE scheme with short ciphertexts. The scheme is proven secure in the standard model under non-interactive assumptions. (C) 2014 Elsevier Inc. All rights reserved.

关键词： Cloud storage Access control attribute-based encryption Ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

White-Box Traceable Ciphertext-Policy attribute-based encryption Supporting Any Monotone Access Structures

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2013年第1期8卷 76-88页

作者： Liu, Zhen Cao, Zhenfu Wong, Duncan S. Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai 200240 Peoples R China City Univ Hong Kong Dept Comp Sci Kowloon Hong Kong Peoples R China

In a ciphertext-policy attribute-based encryption (CP-ABE) system, decryption keys are defined over attributes shared by multiple users. Given a decryption key, it may not be always possible to trace to the original key owner. As a decryption privilege could be possessed by multiple users who own the same set of attributes, malicious users might be tempted to leak their decryption privileges to some third parties, for financial gain as an example, without the risk of being caught. This problem severely limits the applications of CP-ABE. Several traceable CP-ABE (T-CP-ABE) systems have been proposed to address this problem, but the expressiveness of policies in those systems is limited where only AND gate with wildcard is currently supported. In this paper we propose a new T-CP-ABE system that supports policies expressed in any monotone access structures. Also, the proposed system is as efficient and secure as one of the best (non-traceable) CP-ABE systems currently available, that is, this work adds traceability to an existing expressive, efficient, and secure CP-ABE scheme without weakening its security or setting any particular trade-off on its performance.

关键词： attribute-based encryption ciphertext-policy traceability

来源：评论

学校读者我要写书评

暂无评论

Blind attribute-based encryption and oblivious transfer with fine-grained access control

引用

DESIGNS CODES AND CRYPTOGRAPHY 2016年第2期81卷 179-223页

作者： Rial, Alfredo IBM Res Zurich Ruschlikon Switzerland

We propose two constructions of oblivious transfer with access control (OTAC), i.e., oblivious transfer schemes in which a receiver can obtain a message only if her attributes, which are certified by a credential issuer, satisfy the access control policy of that message. The receiver remains anonymous towards the sender and the receiver's attributes are not disclosed to the sender. Our constructions are based on any ciphertext policy attribute based encryption (CPABE) scheme that fulfills the committing and key separation properties, which we define. We also provide a committing CPABE with key separation scheme that supports any policy described by a monotone access structure, which, in comparison to previous work, allows our OTAC construction to support efficiently a wider variety of access control policies. In our constructions, a receiver obtains from the sender a CPABE secret key for her attributes by using a blind key extraction with access control protocol. We provide a blind key extraction with access control protocol for any committing CPABE with key separation scheme. Previous work only provided ad-hoc constructions of blind key extraction protocols. Our generic protocol works in a hybrid model that employs novel ideal functionalities for oblivious transfer and for anonymous attribute authentication. We propose constructions that realize those novel ideal functionalities and analyze the overall efficiency of our OTAC constructions.

关键词： Oblivious transfer attribute-based encryption Access control Blind key extraction Cryptographic protocols Privacy

来源：评论

学校读者我要写书评

暂无评论

Semantic attribute-based encryption: A framework for combining ABE schemes with semantic technologies

引用

INFORMATION SCIENCES 2022年 616卷 558-576页

作者： Arshad, Hamed Johansen, Christian Owe, Olaf Picazo-Sanchez, Pablo Schneider, Gerardo Univ Oslo Dept Informat Oslo Norway Norwegian Univ Sci & Technol Oslo Norway Chalmers Univ Technol Gothenburg Sweden Univ Gothenburg Dept Comp Sci & Engn Gothenburg Sweden

attribute-based encryption (ABE) is a cryptographic solution to protect resources in a finegrained manner based on a set of public attributes. This is similar to attribute-based access control schemes in the sense that both rely on public attributes and access control policies to grant access to resources. However, ABE schemes do not consider the semantics of attributes provided by users or required by access structures. Such semantics not only improve the functionality by making proper access decisions but also enable cross-domain interoperability by making users from one domain able to access and use resources of other domains. This paper proposes a Semantic ABE (SABE) framework by augmenting a classical Ciphertext-Policy ABE (CP-ABE) scheme with semantic technologies using a generic procedure by which any CP-ABE scheme can be extended to an SABE. The proposed SABE framework is implemented in Java and the source code is publicly available. The experiment results confirm that the performance of the proposed framework is promising. (c) 2022 Elsevier Inc. All rights reserved.

关键词： attribute-based encryption Semantic technologies Security Interoperability Privacy Access control Ontology

来源：评论

学校读者我要写书评

暂无评论

Server-aided revocable attribute-based encryption for cloud computing services

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2020年第14期32卷

作者： Cui, Hui Yuen, Tsz Hon Deng, Robert H. Wang, Guilin Murdoch Univ Discipline Informat Technol Math & Stat Perth WA Australia Univ Hong Kong Dept Comp Sci Hong Kong Peoples R China Singapore Management Univ Singapore Singapore Huawei Int Pte Ltd Singapore Singapore

attribute-based encryption (ABE) has been regarded as a promising solution in cloud computing services to enable scalable access control without compromising the security. Despite of the advantages, efficient user revocation has been a challenge in ABE. One suggestion for user revocation is using the binary tree in the key generation phase of an ABE scheme, which enables a trusted key generation center to periodically distribute the key update information to all nonrevoked users over a public channel. This revocation approach reduces the size of key updates from linear to logarithmic in the number of users. But it requires each user to keep a private key of the logarithmic size, and asks each nonrevoked user to periodically update his/her decryption key for each new time period. To further optimize user revocation in ABE, a server-aided revocable ABE (SR-ABE) scheme has been proposed, in which almost all workloads of users incurred by the user revocation are outsourced to an untrusted server, and each user only needs to store a private key of the constant size. In addition, SR-ABE does not require any secure channel for the key transmission, and a user only needs to perform a small amount of calculations to decrypt a ciphertext. In this paper, we revisit the notion of SR-ABE, and present a generic construction of SR-ABE, which can transform a revocable ABE (RABE) scheme to an SR-ABE scheme. In addition, we give an instantiation of SR-ABE by applying the generic construction on a concrete RABE scheme, and implement an instantiation of SR-ABE and an RABE scheme to evaluate the performance of SR-ABE.

关键词： access control attribute-based encryption cloud computing outsourced computation revocation

来源：评论

学校读者我要写书评

暂无评论

Secure Federated Cloud Storage Protection Strategy Using Hybrid Heuristic attribute-based encryption With Permissioned Blockchain

引用

IEEE ACCESS 2024年 12卷 117154-117169页

作者： Kathole, Atul B. Vhatkar, Kapil Netaji Goyal, Ankur Kaushik, Shivkant Mirge, Amita Sanjiv Jain, Prince Soliman, Mohamed S. Islam, Mohammad Tariqul Dr DY Patil Inst Technol Dept Comp Engn Pune 411018 India Symbiosis Int Symbiosis Inst Technol Dept Comp Sci & Engn Pune 412115 Maharashtra India Greater Noida Inst Technol GNIOT Dept Comp Sci & Engn AI & DS Greater Noida 201310 Uttar Pradesh India Pimpri Chinchwad Coll Engn Dept IT Pune 411044 Maharashtra India Parul Univ Parul Inst Technol Dept Mechatron Engn Vadodara 391760 Gujarat India Taif Univ Coll Engn Dept Elect Engn Taif 21944 Saudi Arabia UKM Fac Engn & Built Environm Dept Elect Elect & Syst Engn Bangi 43600 Selangor Malaysia

The rapid growth of the Internet of Medical Things (IoMT) has introduced significant security and privacy challenges in managing and protecting medical data. This paper proposes a secure federated cloud storage system designed to address these challenges using a hybrid heuristic attribute-based encryption (ABE) scheme integrated with a permissioned Blockchain. The proposed system enhances data confidentiality and integrity by first collecting medical information and then encrypting it with ABE using an optimal key generated by the Hybrid Mexican Axolotl with Energy Valley Optimizer (HMO-EVO). The encrypted data is securely stored in a permissioned blockchain, ensuring robust access control and protection against data breaches. For effective healthcare monitoring, the system employs federated learning with a Multi-scale Bi-Long Short-Term Memory and Gated Recurrent Unit (MBiLSTM-GRU) to predict diseases accurately. This federated approach allows for decentralized training of deep learning models, preserving patient data privacy while leveraging collective learning. Experimental results show that the proposed system outperforms conventional methods in terms of security, efficiency, and predictive accuracy. This research offers a comprehensive framework for secure medical data management, combining the strengths of federated learning and blockchain technology to address the critical issues of data ownership, regulatory compliance, and privacy in IoMT networks.

关键词： Cloud computing Security Blockchains Monitoring Secure storage Diseases Medical services Biomedical monitoring Internet of Medical Things attribute-based encryption blockchain technology federated learning health monitoring IoMT security optimal key generation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：