检索结果-内蒙古大学图书馆

Provably secure attribute-based encryption with attribute revocation and grant function using proxy re-encryption and attribute key for updating

引用

HUMAN-CENTRIC COMPUTING AND INFORMATION SCIENCES 2015年第1期5卷 1页

作者： Naruse, Takeru Mohri, Masami Shiraishi, Yoshiaki Nagoya Inst Technol Nagoya Aichi Japan Gifu Univ Informat & Multimedia Ctr Gifu Japan Kobe Univ Dept Elect & Elect Engn Kobe Hyogo 657 Japan

ciphertext-policy attribute-based encryption (CP-ABE) is suitable for data access control on a cloud storage system. In CP-ABE, the data owner encrypts data under the access structure over attributes and a set of attributes assigned to users is embedded in user's secret key. A user is able to decrypt if his attributes satisfy the ciphertext's access structure. In CP-ABE, processes of user's attribute revocation and grant are concentrated on the authority and the data owner. In this paper, we propose a ciphertext-policy attribute-based encryption scheme delegating attribute revocation processes to Cloud Server by proxy re-encryption. The proposed scheme does not require generations of new secret key when granting attributes to a user and supports any Linear Secret Sharing Schemes (LSSS) access structure. We prove that the proposed scheme is secure against attack by unauthorized users and Cloud Server.

关键词： Cryptographic cloud storage ciphertext-policy attribute-based encryption attribute revocation and grant Proxy re-encryption

来源：评论

学校读者我要写书评

暂无评论

Achieving Flexible and Self-Contained Data Protection in Cloud Computing

引用

IEEE ACCESS 2017年 5卷 1510-1523页

作者： Lang, Bo Wang, Jinmiao Liu, Yanxi Beihang Univ State Key Lab Software Dev Environm Beijing 100191 Peoples R China

For enterprise systems running on public clouds in which the servers are outside the control domain of the enterprise, access control that was traditionally executed by reference monitors deployed on the system servers can no longer be trusted. Hence, a self-contained security scheme is regarded as an effective way for protecting outsourced data. However, building such a scheme that can implement the access control policy of the enterprise has become an important challenge. In this paper, we propose a self-contained data protection mechanism called RBAC-CPABE by integrating role-based access control (RBAC), which is widely employed in enterprise systems, with the ciphertext-policy attribute-based encryption (CP-ABE). First, we present a data-centric RBAC (DC-RBAC) model that supports the specification of fine-grained access policy for each data object to enhance RBAC's access control capabilities. Then, we fuse DC-RBAC and CP-ABE by expressing DC-RBAC policies with the CP-ABE access tree and encrypt data using CP-ABE. Because CP-ABE enforces both access control and decryption, access authorization can be achieved by the data itself. A security analysis and experimental results indicate that RBAC-CPABE maintains the security and efficiency properties of the CP-ABE scheme on which it is based, but substantially improves the access control capability. Finally, we present an implemented framework for RBAC-CPABE to protect privacy and enforce access control for data stored in the cloud.

关键词： Role-based access control ciphertext-policy attribute-based encryption self-contained data protection cloud computing

来源：评论

学校读者我要写书评

暂无评论

CryptCloud⁺: Secure and Expressive Data Access Control for Cloud Storage

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2021年第1期14卷 111-124页

作者： Ning, Jianting Cao, Zhenfu Dong, Xiaolei Liang, Kaitai Wei, Lifei Choo, Kim-Kwang Raymond Natl Univ Singapore Dept Comp Sci Singapore 119077 Singapore East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China Univ Surrey Dept Comp Sci Guildford GU2 7XH Surrey England Shanghai Ocean Univ Sch Informat Technol Shanghai 201306 Peoples R China Univ Texas San Antonio Dept Informat Syst & Cyber Secur San Antonio TX 78249 USA

Secure cloud storage, which is an emerging cloud service, is designed to protect the confidentiality of outsourced data but also to provide flexible data access for cloud users whose data is out of physical control. ciphertext-policy attribute-based encryption (CP-ABE) is regarded as one of the most promising techniques that may be leveraged to secure the guarantee of the service. However, the use of CP-ABE may yield an inevitable security breach which is known as the misuse of access credential (i.e., decryption rights), due to the intrinsic "all-or-nothing" decryption feature of CP-ABE. In this paper, we investigate the two main cases of access credential misuse: one is on the semi-trusted authority side, and the other is on the side of cloud user. To mitigate the misuse, we propose the first accountable authority and revocable CP-ABE based cloud storage system with white-box traceability and auditing, referred to as CryptCloud(+). We also present the security analysis and further demonstrate the utility of our system via experiments.

关键词： Secure cloud storage ciphertext-policy attribute-based encryption access credentials misuse traceability and revocation auditing

来源：评论

学校读者我要写书评

暂无评论

RL-ABE: A Revocable Lattice attribute based encryption Scheme based on R-LWE Problem in Cloud Storage

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2022年第2期15卷 1026-1035页

作者： Zhao, Siyu Jiang, Rui Bhargava, Bharat Southeast Univ Sch Informat Sci & Engn Nanjing 210096 Jiangsu Peoples R China Southeast Univ Sch Cyber Sci & Engn Nanjing 210096 Jiangsu Peoples R China Purdue Univ Dept Comp Sci W Lafayette IN 47907 USA

In this article, we propose a revocable lattice-based CP-ABE (ciphertext-policy attribute-based encryption) scheme (RL-ABE), which is suitable to be applied in the cloud storage. The RL-ABE scheme can resist quantum algorithm attack and ensure fine-grained access control to the users' rights in achieving shared data. In addition, our scheme can realize attribute revocation, which can expediently renew users' attributes to grant or revoke their access rights. Then, we formally prove the security of our scheme based on the hardness of Ring Learning with Error problem(R-LWE) to resist quantum algorithm attack, and prove our scheme can solve security threatens to withstand collusion attacks. Finally, the performance analysis shows the high efficiency of our scheme compared with other related schemes.

关键词： Lattices encryption Resists Cloud computing Access control Permission ciphertext-policy attribute-based encryption attribute revocation lattice-based cryptosystem ring learning with error problem

来源：评论

学校读者我要写书评

暂无评论

attribute-based Keyword Search over Hierarchical Data in Cloud Computing

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2020年第6期13卷 985-998页

作者： Miao, Yinbin Ma, Jianfeng Liu, Ximeng Li, Xinghua Jiang, Qi Zhang, Junwei Xidian Univ Dept Cyber Engn Xian 710071 Peoples R China Singapore Management Univ Dept Informat Syst 80 Stamford Rd Singapore 188065 Singapore

Searchable encryption (SE) has been a promising technology which allows users to perform search queries over encrypted data. However, the most of existing SE schemes cannot deal with the shared records that have hierarchical structures. In this paper, we devise a basic cryptographic primitive called as attribute-based keyword search over hierarchical data (ABKS-HD) scheme by using the ciphertext-policy attribute-based encryption (CP-ABE) technique, but this basic scheme cannot satisfy all the desirable requirements of cloud systems. The facts that the single keyword search will yield many irrelevant search results and the revoked users can access the unauthorized data with the old or outdated secret keys make this basic scheme not scale well in practice. To this end, we also propose two improved schemes (ABKS-HD-I, ABKS-HD-II) for the sake of supporting multi-keyword search and user revocation, respectively. In contrast with the state-of-the-art attribute-based keyword search (ABKS) schemes, the computation overhead of our schemes almost linearly increases with the number of users' attributes rather than the number of attributes in systems. Formal security analysis proves that our schemes are secure against both chosen-plaintext attack (CPA) and chosen-keyword attack (CKA) in the random oracle model. Furthermore, empirical study using a real-world dataset shows that our schemes are feasible and efficient in practical applications.

关键词： Cloud computing Keyword search Logic gates encryption Servers Searchable encryption hierarchical structures ciphertext-policy attribute-based encryption chosen-plaintext attack chosen-keyword attack

来源：评论

学校读者我要写书评

暂无评论

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

引用

IEEE JOURNAL OF BIOMEDICAL AND HEALTH INFORMATICS 2024年第6期28卷 3269-3278页

作者： Liang, Xiyu Liu, Yali Ning, Jianting Jiangsu Normal Univ Coll Comp Sci & Technol Xuzhou 221116 Peoples R China Guilin Univ Elect Technol Guangxi Key Lab Cryptog & Informat Secur Guilin 541004 Peoples R China Fujian Normal Univ Coll Comp & Cyber Secur Fujian Prov Key Lab Network Secur & Cryptol Fuzhou 350117 Peoples R China Chinese Acad Sci Inst Informat Engn State Key Lab Informat Secur Beijing 100093 Peoples R China

IoT and 5G-enabled smart healthcare allows medical practitioners to diagnose patients from any location via electronic health records (EHRs) by wireless body area network (WBAN) devices. Privacy, including the medical practitioner's identity and the patient's EHR, can easily be leaked from hospitals or cloud servers, and secret keys used to access EHRs must be revoked after diagnosis. In response to the challenges associated with user authentication and secret key revocation, this paper proposes an access control scheme with privacy-preserving authentication and flexible revocation for smart healthcare using attribute-based encryption (ABE), named PAFR-ABE, which provides access control to prevent malicious users from decrypting EHRs. Meanwhile, PAFR-ABE ensures privacy-preserving authentication for users during secret key generation, which safeguards users' identities and prevents unauthorized requests for secret keys. In addition, PAFR-ABE achieves flexible revocation and recovery of secret keys, which eliminates the need to update secret keys for unrevoked users. Security analysis indicates that PAFR-ABE meets the security requirements of an access control scheme for smart healthcare, especially in terms of forward security and backward security. Performance analysis shows that PAFR-ABE is efficient in the key generation and revocation algorithms compared with typical access control schemes.

关键词： Medical services Access control Authentication Security Hospitals Servers encryption attribute revocation ciphertext-policy attribute-based encryption privacy-preserving authentication smart healthcare

来源：评论

学校读者我要写书评

暂无评论

A secure, efficient and verifiable multimedia data sharing scheme in fog networking system

引用

CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS 2021年第1期24卷 225-247页

作者： Tu, Yuanfei Yang, Geng Wang, Jing Su, Qingjian Nanjing Univ Post & Telecommun Coll Comp Sci & Technol Nanjing 210003 Peoples R China Jiangsu Key Lab Big Data Secur & Intelligent Proc Nanjing 210023 Peoples R China Nanjing Tech Univ Coll Comp Sci & Technol Nanjing 211800 Peoples R China

As an emerging and efficient paradigm for multimedia systems, fog networking has attracted widespread attention over the last few years. However, an increasing number of attacks in the current virtualized environments underlines the importance of secure data sharing. Unfortunately, existing multimedia data sharing schemes are not suitable for the networking systems because of the heavy computational operations, latency-sensitive service, and resource-limited devices. Additionally, authenticated and secure communications are crucial issues related to privacy and trust. In this paper, we propose a secure and efficient data sharing scheme with the computation outsourcing capability in a fog networking system by employing ciphertext-policy attribute-based encryption. The scheme supports dynamic policy updating and delegates attribute revocation processes to the cloud and fog by proxy re-encryption. In particular, we build a secure communication protocol for the revocation parameter transmission. We adopt a chaotic map to generate a one-time key, by which the revocation parameters are encrypted. Then, to ensure legal user accessing to the system, we establish a privacy-preserving communication architecture between the user and cloud, which provides authentication. In addition, our scheme provides a verifiable auditing service for the decryption key and shared file, thus ensuring its correctness. Finally, we analyze the security of the scheme, evaluate its performance, and compare it with related works.

关键词： Fog networking system ciphertext-policy attribute-based encryption Security Efficiency Verifiable

来源：评论

学校读者我要写书评

暂无评论

Secure and Efficient attribute-based encryption with Keyword Search

引用

COMPUTER JOURNAL 2018年第8期61卷 1133-1142页

作者： Wang, Haijiang Dong, Xiaolei Cao, Zhenfu Li, Dongmei Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai Peoples R China East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai Peoples R China

attribute-based encryption with keyword search (ABKS) is a system that supports keyword search and access control. By inheriting from attribute-based encryption technology, most current ABKS schemes incur large computation costs in encryption phase and keyword search phase. In a typical implementation, the size of ciphertext is proportional to the number of attributes associated with the access policy, so that the keyword search time and the decryption time are proportional to the number of attributes used in the access policy. To deal with the above problem, we present a new ciphertext-policy attribute-based encryption with fast keyword search scheme. Our scheme preserves the fine-grained access control inherited from the ABE system while supporting hidden policy and fast keyword search. In particular, the proposed scheme can efficiently support AND-gate access policy with multiple attribute values. Moreover, our scheme features multi-value-independent which have constant computation costs compared with the existing ABKS schemes. With the "aggregation" technique, the keyword search phase only needs three pairings, which is a great advantage over previous ABKS schemes. We offer rigorous security proof of our scheme, and the performance analysis demonstrates the efficiency of our scheme.

关键词： ciphertext-policy attribute-based encryption searchable encryption multi-value independent fast keyword search

来源：评论

学校读者我要写书评

暂无评论

Designing quantum-secure attribute-based encryption

引用

CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS 2024年第9期27卷 13075-13091页

作者： Rao, Y. Sreenivasa Srivastava, Vikas Mohanty, Tapaswini Debnath, Sumit Kumar Natl Inst Technol Warangal Dept Math Warangal Telangana India Natl Inst Technol Jamshedpur Dept Math Jamshedpur Jharkhand India

In the last couple of decades, attribute-based encryption (ABE) has been a promising encryption technique to realize fine-grained access control over encrypted data. ABE has appealing functionalities such as (i) access control through encryption and (ii) encrypting a message to a group of recipients without knowing their actual identities. However, the existing state-of-the-art ABEs are based on number-theoretic hardness assumptions. These designs are not secure against attacks by quantum algorithms such as Shor algorithm. Moreover, existing Post-Quantum Cryptography (PQC)-based ABEs fail to provide long-term security. Therefore, there is a need for quantum secure ABE that can withstand quantum attacks and provides long-term security. In this work, for the first time, we introduce the notion of a quantum-secure ABE (qABE) framework that preserves the classical ABE's functionalities and resists quantum attacks. Next, we provide a generic construction of qABE which is able to transform any existing ABE into qABE scheme. Thereafter, we illustrate a concrete construction of a quantum ABE based on our generic transformation qABE and the Waters' ciphertext-policy ABE scheme.

关键词： attribute-based encryption Quantum-secure attribute-based encryption Quantum one-time pad ciphertext-policy attribute-based encryption Post-quantum cryptography

来源：评论

学校读者我要写书评

暂无评论

ABAKA: A novel attribute-based k-anonymous collaborative solution for LBSs

引用

COMPUTER COMMUNICATIONS 2016年 85卷 1-13页

作者： Dargahi, Tooska Ambrosin, Moreno Conti, Mauro Asokan, N. Islamic Azad Univ West Tehran Branch Dept Comp Engn Tehran Iran Univ Padua Dept Math Padua Italy Aalto Univ Dept Comp Sci Helsinki Finland Univ Helsinki Helsinki Finland

The increasing use of mobile devices, along with advances in telecommunication systems, increased the popularity of Location-based Services (LBSs). In LBSs, users share their exact location with a potentially untrusted Location-based Service Provider (LBSP). In such a scenario, user privacy becomes a major concern: the knowledge about user location may lead to her identification as well as a continuous tracing of her position. Researchers proposed several approaches to preserve users' location privacy. They also showed that hiding the location of an LBS user is not enough to guarantee her privacy, i.e., user's profile attributes or background knowledge of an attacker may reveal the user's identity. In this paper we propose ABAKA, a novel collaborative approach that provides identity privacy for LBS users considering users' profile attributes. In particular, our solution guarantees p-sensitive k-anonymity for the user that sends an LBS request to the LBSP. ABAKA computes a cloaked area by collaborative multi-hop forwarding of the LBS query, and using ciphertext-policy attribute-based encryption (CP-ABE). We ran a thorough set of experiments to evaluate our solution: the results confirm the feasibility and efficiency of our proposal. (C) 2016 Elsevier B.V. All rights reserved.

关键词： Location-based services Privacy k-anonymity p-sensitivity ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：