检索结果-内蒙古大学图书馆

A group key-policy attribute-based encryption with partial outsourcing decryption in wireless sensor networks

SECURITY AND COMMUNICATION NETWORKS 2016年第17期9卷 4138-4150页

作者： Wang, Qihua Yu, Chang Wu Li, Fagen Wang, Huaqun Cao, Lijie Dalian Ocean Univ Dept Informat Engn Dalian 116023 Peoples R China Univ Elect Sci & Technol China Sch Comp Sci & Engn Chengdu 611731 Peoples R China Chung Hua Univ Dept Comp Sci & Informat Engn Hsinchu 300 Taiwan Nanjing Univ Posts & Telecommun Coll Comp Nanjing 210003 Jiangsu Peoples R China

Outsourcing decryption that enables the authorized users to obtain the original data without decryption computation is crucially important for wireless sensor networks in public data center. The existing outsourcing decryption schemes have been designed based on key-policy attribute-based encryption. The security of outsourcing decryption cannot be guaranteed, because the data center is not loyal, and existing schemes have high computational complexity and energy consumption. In this work, a novel partially outsourcing decryption scheme is proposed to guarantee data security and computational efficiency for resource-constrained sensor nodes and terminal equipments. According to the attributes of cluster nodes in the proposed scheme, the encryption secret key is encrypted based on group key-policy attribute-based encryption and sent to data center, and authorized users who satisfy the attributes of the ciphertext can obtain the secret key to decrypt the ciphertext. Furthermore, in order to reduce the decryption overhead for users, the authorized users can simply decrypt the transformation ciphertext that is partially decrypted by the data center using token key. Compared with the previous decryption schemes, the proposed scheme efficiently decrypts ciphertext and enhances security of the data. The simulation results also indicate that the proposed scheme is efficient in terms of energy consumption and computation by comparing to previous work. Copyright (C) 2016 John Wiley & Sons, Ltd.

关键词： attribute-based encryption wireless sensor networks outsourcing decryption access control

来源：评论

学校读者我要写书评

暂无评论

Generic and Efficient Constructions of attribute-based encryption with Verifiable Outsourced Decryption

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2016年第5期13卷 533-546页

作者： Mao, Xianping Lai, Junzuo Mei, Qixiang Chen, Kefei Weng, Jian Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai 200240 Peoples R China Jinan Univ Dept Comp Sci Guangzhou 510632 Guangdong Peoples R China Guangdong Ocean Univ Coll Informat Zhanjiang 524088 Peoples R China Hangzhou Normal Univ Sch Sci Hangzhou 310036 Zhejiang Peoples R China

attribute-based encryption (ABE) provides a mechanism for complex access control over encrypted data. However in most ABE systems, the ciphertext size and the decryption overhead, which grow with the complexity of the access policy, are becoming critical barriers in applications running on resource-limited devices. Outsourcing decryption of ABE ciphertexts to a powerful third party is a reasonable manner to solve this problem. Since the third party is usually believed to be untrusted, the security requirements of ABE with outsourced decryption should include privacy and verifiability. Namely, any adversary including the third party should learn nothing about the encrypted message, and the correctness of the outsourced decryption is supposed to be verified efficiently. We propose generic constructions of CPA-secure and RCCA-secure ABE systems with verifiable outsourced decryption from CPA-secure ABE with outsourced decryption, respectively. We also instantiate our CPA-secure construction in the standard model and then show an implementation of this instantiation. The experimental results show that, compared with the existing scheme, our CPA-secure construction has more compact ciphertext and less computational costs. Moreover, the techniques involved in the RCCA-secure construction can be applied in generally constructing CCA-secure ABE, which we believe to be of independent interest.

关键词： attribute-based encryption outsourced decryption verifiability RCCA

来源：评论

学校读者我要写书评

暂无评论

Privacy-preserving personal health record using multi-authority attribute-based encryption with revocation

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2015年第6期14卷 487-497页

作者： Qian, Huiling Li, Jiguo Zhang, Yichen Han, Jinguang Hohai Univ Coll Comp & Informat Nanjing 211100 Jiangsu Peoples R China Nanjing Univ Finance & Econ Jiangsu Prov Key Lab E Business Nanjing 210003 Jiangsu Peoples R China

Personal health record (PHR) service is an emerging model for health information exchange. In PHR systems, patient's health records and information are maintained by the patient himself through the Web. In reality, PHRs are often outsourced to be stored at the third parties like cloud service providers. However, there have been serious privacy concerns about cloud service as it may expose user's sensitive data like PHRs to those cloud service providers or unauthorized users. Using attribute-based encryption (ABE) to encrypt patient's PHRs in cloud environment, secure and flexible access control can be achieved. Yet, problems like scalability in key management, fine-grained access control, and efficient user revocation remain to be addressed. In this paper, we propose a privacy-preserving PHR, which supports fine-grained access control and efficient revocation. To be specific, our scheme achieves the goals (1) scalable and fine-grained access control for PHRs by using multi-authority ABE scheme, and (2) efficient on-demand user/attribute revocation and dynamic policy update. In our scheme, we consider the situation that multiple data owners exist, and patient's PHRs are encrypted and stored in semi-trust servers. The access structure in our scheme is expressive access tree structure, and the security of our scheme can be reduced to the standard decisional bilinear Diffie-Hellman assumption.

关键词： Personal health records Cloud computing Data privacy Fine-grained access control attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

Efficient Revocable Multi-Authority attribute-based encryption for Cloud Storage

引用

IEEE ACCESS 2021年 9卷 42593-42603页

作者： Ming, Yang He, Baokang Wang, Chenhao Changan Univ Sch Informat Engn Xian 710064 Peoples R China

As is known, attribute-based encryption (ABE) is usually adopted for cloud storage, both for its achievement of fine-grained access control over data, and for its guarantee of data confidentiality. Nevertheless, single-authority attribute-based encryption (SA-ABE) has its obvious drawback in that only one attribute authority can assign the users' attributes, enabling the data to be shared only within the management domain of the attribute authority, while rendering multiple attribute authorities unable to share the data. On the other hand, multi-authority attribute-based encryption (MA-ABE) has its advantages over SA-ABE. It can not only satisfy the need for the fine-grained access control and confidentiality of data, but also make the data shared among different multiple attribute authorities. However, existing MA-ABE schemes are unsuitable for the devices with resources-constraint, because these schemes are all based on expensive bilinear pairing. Moreover, the major challenge of MA-ABE scheme is attribute revocation. So far, many solutions in this respect are not efficient enough. In this paper, on the basis of the elliptic curves cryptography, we propose an efficient revocable multi-authority attribute-based encryption (RMA-ABE) scheme for cloud storage. The security analysis indicates that the proposed scheme satisfies indistinguishable under adaptive chosen plaintext attack assuming hardness of the decisional Diffie-Hellman problem. Compared with the other schemes, the proposed scheme gets its advantages in that it is more economical in computation and storage.

关键词： encryption Cloud computing Outsourcing Elliptic curve cryptography Distributed databases Access control Public key attribute-based encryption multi-authority revocation elliptic curve cryptography cloud storage

来源：评论

学校读者我要写书评

暂无评论

Server-aided revocable attribute-based encryption for cloud computing services

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2020年第14期32卷 e5680-e5680页

作者： Cui, Hui Yuen, Tsz Hon Deng, Robert H. Wang, Guilin Murdoch Univ Discipline Informat Technol Math & Stat Perth WA Australia Univ Hong Kong Dept Comp Sci Hong Kong Peoples R China Singapore Management Univ Singapore Singapore Huawei Int Pte Ltd Singapore Singapore

attribute-based encryption (ABE) has been regarded as a promising solution in cloud computing services to enable scalable access control without compromising the security. Despite of the advantages, efficient user revocation has been a challenge in ABE. One suggestion for user revocation is using the binary tree in the key generation phase of an ABE scheme, which enables a trusted key generation center to periodically distribute the key update information to all nonrevoked users over a public channel. This revocation approach reduces the size of key updates from linear to logarithmic in the number of users. But it requires each user to keep a private key of the logarithmic size, and asks each nonrevoked user to periodically update his/her decryption key for each new time period. To further optimize user revocation in ABE, a server-aided revocable ABE (SR-ABE) scheme has been proposed, in which almost all workloads of users incurred by the user revocation are outsourced to an untrusted server, and each user only needs to store a private key of the constant size. In addition, SR-ABE does not require any secure channel for the key transmission, and a user only needs to perform a small amount of calculations to decrypt a ciphertext. In this paper, we revisit the notion of SR-ABE, and present a generic construction of SR-ABE, which can transform a revocable ABE (RABE) scheme to an SR-ABE scheme. In addition, we give an instantiation of SR-ABE by applying the generic construction on a concrete RABE scheme, and implement an instantiation of SR-ABE and an RABE scheme to evaluate the performance of SR-ABE.

关键词： access control attribute-based encryption cloud computing outsourced computation revocation

来源：评论

学校读者我要写书评

暂无评论

Secure Federated Cloud Storage Protection Strategy Using Hybrid Heuristic attribute-based encryption With Permissioned Blockchain

引用

IEEE ACCESS 2024年 12卷 117154-117169页

作者： Kathole, Atul B. Vhatkar, Kapil Netaji Goyal, Ankur Kaushik, Shivkant Mirge, Amita Sanjiv Jain, Prince Soliman, Mohamed S. Islam, Mohammad Tariqul Dr DY Patil Inst Technol Dept Comp Engn Pune 411018 India Symbiosis Int Symbiosis Inst Technol Dept Comp Sci & Engn Pune 412115 Maharashtra India Greater Noida Inst Technol GNIOT Dept Comp Sci & Engn AI & DS Greater Noida 201310 Uttar Pradesh India Pimpri Chinchwad Coll Engn Dept IT Pune 411044 Maharashtra India Parul Univ Parul Inst Technol Dept Mechatron Engn Vadodara 391760 Gujarat India Taif Univ Coll Engn Dept Elect Engn Taif 21944 Saudi Arabia UKM Fac Engn & Built Environm Dept Elect Elect & Syst Engn Bangi 43600 Selangor Malaysia

The rapid growth of the Internet of Medical Things (IoMT) has introduced significant security and privacy challenges in managing and protecting medical data. This paper proposes a secure federated cloud storage system designed to address these challenges using a hybrid heuristic attribute-based encryption (ABE) scheme integrated with a permissioned Blockchain. The proposed system enhances data confidentiality and integrity by first collecting medical information and then encrypting it with ABE using an optimal key generated by the Hybrid Mexican Axolotl with Energy Valley Optimizer (HMO-EVO). The encrypted data is securely stored in a permissioned blockchain, ensuring robust access control and protection against data breaches. For effective healthcare monitoring, the system employs federated learning with a Multi-scale Bi-Long Short-Term Memory and Gated Recurrent Unit (MBiLSTM-GRU) to predict diseases accurately. This federated approach allows for decentralized training of deep learning models, preserving patient data privacy while leveraging collective learning. Experimental results show that the proposed system outperforms conventional methods in terms of security, efficiency, and predictive accuracy. This research offers a comprehensive framework for secure medical data management, combining the strengths of federated learning and blockchain technology to address the critical issues of data ownership, regulatory compliance, and privacy in IoMT networks.

关键词： Cloud computing Security Blockchains Monitoring Secure storage Diseases Medical services Biomedical monitoring Internet of Medical Things attribute-based encryption blockchain technology federated learning health monitoring IoMT security optimal key generation

来源：评论

学校读者我要写书评

暂无评论

Fast, compact, and expressive attribute-based encryption

引用

DESIGNS CODES AND CRYPTOGRAPHY 2021年第11期89卷 2577-2626页

作者： Tomida, Junichi Kawahara, Yuto Nishimaki, Ryo NTT Secure Platform Labs Tokyo Japan

attribute-based encryption (ABE) is an advanced cryptographic tool and useful to build various types of access control systems. Toward the goal of making ABE more practical, we propose key-policy (KP) and ciphertext-policy (CP) ABE schemes, which first support unbounded sizes of attribute sets and policies with negation and multi-use of attributes, allow fast decryption, and are adaptively secure under a standard assumption, simultaneously. Our schemes are more expressive than previous schemes and efficient enough. To achieve the adaptive security along with the other properties, we refine the technique introduced by Kowalczyk and Wee (Eurocrypt'19) so that we can apply the technique more expressive ABE schemes. Furthermore, we also present a new proof technique that allows us to remove redundant elements used in their ABE schemes. We implement our schemes in 128-bit security level and present their benchmarks for an ordinary personal computer and smartphones. They show that all algorithms run in one second with the personal computer when they handle any policy or attribute set with one hundred attributes.

关键词： attribute-based encryption Standard assumption Non-monotone Unbounded Multi-use Random oracle model

来源：评论

学校读者我要写书评

暂无评论

Fully outsourced and fully verifiable attribute-based encryption for cloud data sharing

引用

CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS 2024年第8期27卷 10437-10453页

作者： Zhao, Xiaolong Huang, Zhenjie Minnan Normal Univ Fujian Key Lab Granular Comp & Applicat Zhangzhou 363000 Fujian Peoples R China Minnan Normal Univ Sch Math & Stat Zhangzhou 363000 Fujian Peoples R China

Verifiable outsourced attribute-based encryption (VO-ABE) enables one-to-many data sharing and fine-grained access control under lower trust, making it suitable for cloud or edge systems involving resource-constrained devices. There is no fully outsourced and fully verifiable attribute-based encryption scheme or key-policy VO-ABE scheme. Moreover, the previous VO-ABE schemes require multiple rounds of interaction or high verification costs to support verifiable outsourced key generation and verifiable outsourced encryption. To address these issues, in this paper, we propose an effective key-policy fully outsourced and fully verifiable attribute-based encryption scheme supporting verifiable outsourced key generation, encryption, and decryption simultaneously. We formally define two new properties: outsourced key generation verifiability and outsourced encryption verifiability. Analysis and simulation show that the proposed scheme performs well and is practical. All local computational overheads of the proposed scheme are constant and do not increase with the number of attributes or the complexity of access structures.

关键词： attribute-based encryption Cloud data sharing Fully outsourced Fully verifiable Key-policy

来源：评论

学校读者我要写书评

暂无评论

MedSBA: a novel and secure scheme to share medical data based on blockchain technology and attribute-based encryption

引用

JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING 2020年第11期11卷 4613-4641页

作者： Pournaghi, Seyed Morteza Bayat, Majid Farjami, Yaghoub Univ Qom Dept Comp Engn Qom Iran Shahed Univ Dept Comp Engn Tehran Iran

The development of Electronic Information Technology has made the Electronic Medical Record a commonly used approach to recording and categorizing medical patient data in databases of different hospitals and medical entities so that controlling the shared data is not possible for patients at all. The importance of medical data as possessions of people and the system leads us to be concerned about its security, privacy, and accessibility. How to store and controlling access to medical information is of the most important challenges in the electronic health area. The present paper provides a new, secure, and efficient scheme based on blockchain technology and attribute-based encryption entitled "MedSBA" to record and store medical data, indicating that our proposed scheme protects user privacy and allows fine-grain access control of medical patient data based on General Data Protection Regulation (GDPR). Private blockchains are used in MedSBA to improve the right to revoke instant access which is of the attribute-based encryption challenges. The security and functionality of our proposed scheme are proved within a formal model and based on BAN logic, respectively;simulating the MedSBA scheme in the OPNET software as well as examining its computational complexity and storage indicates the efficiency of the present scheme.

关键词： e-Health Blockchain technology attribute-based encryption Security BAN logic OPNET

来源：评论

学校读者我要写书评

暂无评论

ON THE FEASIBILITY OF attribute-based encryption ON INTERNET OF THINGS DEVICES

引用

IEEE MICRO 2016年第6期36卷 25-35页

作者： Ambrosin, Moreno Anzanpour, Arman Conti, Mauro Dargahi, Tooska Moosavi, Sanaz Rahimi Rahmani, Amir M. Liljeberg, Pasi Univ Padua Comp Sci I-35100 Padua Italy Univ Turku IoT Hlth Grp SF-20500 Turku Finland Univ Padua Dept Math I-35100 Padua Italy CNIT Parma Italy Univ Turku Dept Informat Technol SF-20500 Turku Finland Univ Turku Embedded Parallel & Distributed Comp SF-20500 Turku Finland Univ Turku Embedded Comp Architectures SF-20500 Turku Finland

attribute-based encryption (abe) could be an effective cryptographic tool for the secure management of internet of things (iot) devices, but its feasibility in the iot has been under-investigated thus far. This article explores such feasibility for well-known iot platforms, namely, intel galileo gen 2, intel edison, raspberry pi 1 model b, and raspberry pi zero, and concludes that adopting abe in the iot is indeed feasible.

关键词： ABE attribute-based encryption feasibility Internet of Things IoT performance

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：