检索结果-内蒙古大学图书馆

19th International Conference on Information Security and Cryptology (Inscrypt)

作者： Luo, Chao Shi, Jiaoli Xie, Minchen Hu, Chao Wang, Lihua Mei, Zhuolin Yao, Shimao Li, Hui Jiujiang Univ Sch Comp & Big Data Sci Jiujiang 332005 Jiangxi Peoples R China Jiujiang Key Lab Network & Informat Secur Jiujiang 332005 Jiangxi Peoples R China Jiujiang Univ Inst Informat Secur Jiujiang 332005 Jiangxi Peoples R China Peking Univ Shenzhen Grad Sch Shenzhen Peoples R China

ISBN: (纸本)9789819709410;9789819709427

Traditional CP-ABE (ciphertext-policy attribute-based encryption) schemes require the access policy to be uploaded to the cloud along with the ciphertext, but access policies often also involve some private information, which can lead to privacy leakage. Moreover, the decryption cost of the traditional CPABE scheme is too high, which is not suitable for source-limited end devices, such as medical monitoring terminals. To achieve policy hiding, decryption lightening, and high expressiveness of access policy all at the same time, we present a new CP-ABE scheme, in which a PBF (Path Bloom Filter) is designed based on ROBDD (Reduced Ordered Binary Decision Diagram). The ROBDD, as the access structure, can provide more vital and more flexible expressiveness. Then the PBF can hide the access policy, reduce the decryption cost, and accelerate the decryption speed. Analysis and simulation study show that our proposed scheme is secure under Decisional q-BDHE assumption and superior to previous schemes concerning computational cost.

关键词： ciphertext-policy attribute-based encryption policy Hiding Reduced Ordered Bifurcated Decision Diagrams Path Bloom Filter

来源：评论

学校读者我要写书评

暂无评论

RL-ABE: A Revocable Lattice attribute based encryption Scheme based on R-LWE Problem in Cloud Storage

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2022年第2期15卷 1026-1035页

作者： Zhao, Siyu Jiang, Rui Bhargava, Bharat Southeast Univ Sch Informat Sci & Engn Nanjing 210096 Jiangsu Peoples R China Southeast Univ Sch Cyber Sci & Engn Nanjing 210096 Jiangsu Peoples R China Purdue Univ Dept Comp Sci W Lafayette IN 47907 USA

In this article, we propose a revocable lattice-based CP-ABE (ciphertext-policy attribute-based encryption) scheme (RL-ABE), which is suitable to be applied in the cloud storage. The RL-ABE scheme can resist quantum algorithm attack and ensure fine-grained access control to the users' rights in achieving shared data. In addition, our scheme can realize attribute revocation, which can expediently renew users' attributes to grant or revoke their access rights. Then, we formally prove the security of our scheme based on the hardness of Ring Learning with Error problem(R-LWE) to resist quantum algorithm attack, and prove our scheme can solve security threatens to withstand collusion attacks. Finally, the performance analysis shows the high efficiency of our scheme compared with other related schemes.

关键词： Lattices encryption Resists Cloud computing Access control Permission ciphertext-policy attribute-based encryption attribute revocation lattice-based cryptosystem ring learning with error problem

来源：评论

学校读者我要写书评

暂无评论

Reliable policy Updating Under Efficient policy Hidden Fine-Grained Access Control Framework for Cloud Data Sharing

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2022年第6期15卷 3485-3498页

作者： Ying, Zuobin Jiang, Wenjie Liu, Ximeng Xu, Shengmin Deng, Robert H. City Univ Macau Inst Data Sci Macau 999078 Peoples R China Anhui Univ Sch Comp Sci & Technol Hefei 230601 Peoples R China Fuzhou Univ Sch Math & Comp Sci Fujian Prov Key Lab Informat Secur Network Syst Fuzhou 350117 Peoples R China Singapore Management Univ Sch Informat Syst Singapore 188065 Singapore Singapore Management Univ Secure Mobile Ctr Sch Informat Syst Singapore 178902 Singapore

ciphertext-policy attribute-based encryption (CP-ABE) is one of the potent encryption paradigms in protecting data confidentiality in the cloud data sharing scenario. However, the access policy of the traditional CP-ABE is in plaintext form that reveals significant sensitive information of data owners and data visitors. To mitigate this problem, two approaches have been proposed in the literature. One is partially hidden, where the attributes in the access policy are divided into two parts: the plaintext attribute names and the hidden attribute values. The other approach fully hides the attributes in the access policy which, unfortunately, hinders efficient and correct decryption as well as dynamic policy-updating. In this article, we design a security-enhanced attribute Cuckoo Filter (se-ACF) to hide the access policy and propose a new CP-ABE system, called Privacy-Preserving policy Updating ABE (3PU-ABE), which effectively integrates policy hiding and policy updating. We conduct rigorous security analysis and performance evaluation of 3PU-ABE. The results indicate that 3PU-ABE completely hides the access policy without affecting the decryption, and entails better policy updating efficiency than similar works.

关键词： ciphertext-policy attribute-based encryption cloud data sharing privacy preserving policy updating policy hiding

来源：评论

学校读者我要写书评

暂无评论

Security-Aware Information Dissemination With Fine-Grained Access Control in Cooperative Multi-RSU of VANETs

引用

IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS 2022年第3期23卷 2170-2179页

作者： Liu, Xuejiao Chen, Wei Xia, Yingjie Hangzhou Normal Univ Sch Informat Sci & Engn Hangzhou 311121 Peoples R China Zhejiang Univ Coll Comp Sci Hangzhou 310027 Peoples R China Hangzhou Yuantiao Technol Co Hangzhou 310000 Peoples R China

Securing information dissemination is extremely important for various vehicular ad hoc networks (VANETs) applications. However, most of the applications require disseminating the critical information only to the authorized vehicles through V2I (Vehicle to Infrastructure) communications. Moreover, V2I communications usually suffer from incomplete information to vehicles in one RSU's transmission range. Therefore, it is an even challenging task that how to ensure reliable dissemination of encrypted data to the recipient vehicles in multi-RSU settings. We propose a security-aware information dissemination scheme with fine-grained access control in cooperative multi-RSU of VANETs. Our proposed scheme uses ciphertext-policy attribute-based encryption (CP-ABE) to ensure confidential communication in a broadcasting way, which ensures that only the vehicles that satisfy the access control policy can have the ability to access the information;and we employ proxy re-encryption in the communication protocol to make sure the moving vehicles in high-speed can get the whole encrypted information. Performance analysis shows that our scheme can enable fine-grained access control for the broadcasted information, and make sure the vehicles receive reliable information in the whole disseminating process. And our scheme is applicable and efficient in various scenarios of information dissemination, especially in cooperative multi-RSU of VANETs.

关键词： Reliability encryption Access control Protocols Task analysis Data dissemination Roads Vehicular ad hoc networks (VANETs) information dissemination ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

A Secure Image-Video Retrieval Scheme with attribute-based encryption and Multi-feature Fusion in Smart Grid

A Secure Image-Video Retrieval Scheme with Attribute-Based E...

引用

4th International Conference on Science of Cyber Security (SciSec)

作者： Dang, Qian Zhao, Bo Sun, Biying Qiu, Yu Du, Chunhui State Grid Gansu Informat & Telecommun Co Lanzhou 730050 Peoples R China State Grid Gansu Elect Power Co Lanzhou 730000 Peoples R China

ISBN: (纸本)9789811977688;9789811977695

With the continuous development of smart grid, massive sensitive videos of power grid are stored in semi-trusted cloud servers, which leads to various security threats. And the existing secure video retrieval solutions are difficult to achieve both high retrieval rate and accuracy. We propose a novel secure video retrieval scheme in smart grid based on image content, by utilizing symmetric searchable encryption technology with attribute-based encryption and multi-feature fusion. Fine-grained access control is achieved for sensitive video data to eliminate illegal authorized access. This scheme converts the video into a keyframe set and transforms the difficult video secure retrieval problem to the more mature image secure retrieval region, which can effectively reduce the overhead of video secure retrieval and improve the retrieval accuracy. Security analysis demonstrates that the proposed scheme can preserve the privacy of data, resist known ciphertext attacks, known background attacks and collusion attacks. The experimental results indicate that the proposed scheme has the best balance between retrieval efficiency and retrieval accuracy among the three comparison schemes. The proposed scheme is feasible in the smart grid application scenario.

关键词： Smart grid ciphertext-policy attribute-based encryption Image content-based video retrieval Locality-sensitive hash Multi-feature fusion

来源：评论

学校读者我要写书评

暂无评论

CryptCloud⁺: Secure and Expressive Data Access Control for Cloud Storage

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2021年第1期14卷 111-124页

作者： Ning, Jianting Cao, Zhenfu Dong, Xiaolei Liang, Kaitai Wei, Lifei Choo, Kim-Kwang Raymond Natl Univ Singapore Dept Comp Sci Singapore 119077 Singapore East China Normal Univ Shanghai Key Lab Trustworthy Comp Shanghai 200062 Peoples R China Univ Surrey Dept Comp Sci Guildford GU2 7XH Surrey England Shanghai Ocean Univ Sch Informat Technol Shanghai 201306 Peoples R China Univ Texas San Antonio Dept Informat Syst & Cyber Secur San Antonio TX 78249 USA

Secure cloud storage, which is an emerging cloud service, is designed to protect the confidentiality of outsourced data but also to provide flexible data access for cloud users whose data is out of physical control. ciphertext-policy attribute-based encryption (CP-ABE) is regarded as one of the most promising techniques that may be leveraged to secure the guarantee of the service. However, the use of CP-ABE may yield an inevitable security breach which is known as the misuse of access credential (i.e., decryption rights), due to the intrinsic "all-or-nothing" decryption feature of CP-ABE. In this paper, we investigate the two main cases of access credential misuse: one is on the semi-trusted authority side, and the other is on the side of cloud user. To mitigate the misuse, we propose the first accountable authority and revocable CP-ABE based cloud storage system with white-box traceability and auditing, referred to as CryptCloud(+). We also present the security analysis and further demonstrate the utility of our system via experiments.

关键词： Secure cloud storage ciphertext-policy attribute-based encryption access credentials misuse traceability and revocation auditing

来源：评论

学校读者我要写书评

暂无评论

A secure, efficient and verifiable multimedia data sharing scheme in fog networking system

引用

CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS 2021年第1期24卷 225-247页

作者： Tu, Yuanfei Yang, Geng Wang, Jing Su, Qingjian Nanjing Univ Post & Telecommun Coll Comp Sci & Technol Nanjing 210003 Peoples R China Jiangsu Key Lab Big Data Secur & Intelligent Proc Nanjing 210023 Peoples R China Nanjing Tech Univ Coll Comp Sci & Technol Nanjing 211800 Peoples R China

As an emerging and efficient paradigm for multimedia systems, fog networking has attracted widespread attention over the last few years. However, an increasing number of attacks in the current virtualized environments underlines the importance of secure data sharing. Unfortunately, existing multimedia data sharing schemes are not suitable for the networking systems because of the heavy computational operations, latency-sensitive service, and resource-limited devices. Additionally, authenticated and secure communications are crucial issues related to privacy and trust. In this paper, we propose a secure and efficient data sharing scheme with the computation outsourcing capability in a fog networking system by employing ciphertext-policy attribute-based encryption. The scheme supports dynamic policy updating and delegates attribute revocation processes to the cloud and fog by proxy re-encryption. In particular, we build a secure communication protocol for the revocation parameter transmission. We adopt a chaotic map to generate a one-time key, by which the revocation parameters are encrypted. Then, to ensure legal user accessing to the system, we establish a privacy-preserving communication architecture between the user and cloud, which provides authentication. In addition, our scheme provides a verifiable auditing service for the decryption key and shared file, thus ensuring its correctness. Finally, we analyze the security of the scheme, evaluate its performance, and compare it with related works.

关键词： Fog networking system ciphertext-policy attribute-based encryption Security Efficiency Verifiable

来源：评论

学校读者我要写书评

暂无评论

Privacy-Preserving attribute-based Keyword Search in Shared Multi-owner Setting

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2021年第3期18卷 1080-1094页

作者： Miao, Yinbin Liu, Ximeng Choo, Kim-Kwang Raymond Deng, Robert H. Li, Jiguo Li, Hongwei Ma, Jianfeng Xidian Univ Dept Cyber Engn Xian 710071 Peoples R China State Key Lab Cryptol POBox 5159 Beijing 100878 Peoples R China Fuzhou Univ Coll Math & Comp Sci Fuzhou 350117 Peoples R China Fujian Prov Key Lab Informat Secur Network Syst Fuzhou 350117 Peoples R China Univ Texas San Antonio Dept Informat Syst & Cyber Secur San Antonio TX 78249 USA Singapore Management Univ Dept Informat Syst 80 Stamford Rd Singapore Singapore Fujian Normal Univ Coll Math & Informat Fuzhou 350117 Peoples R China Univ Elect Sci & Technol China Dept Comp Sci & Engn Chengdu 610051 Peoples R China

ciphertext-policy attribute-based Keyword Search (CP-ABKS) facilitates search queries and supports fine-grained access control over encrypted data in the cloud. However, prior CP-ABKS schemes were designed to support unshared multi-owner setting, and cannot be directly applied in the shared multi-owner setting (where each record is accredited by a fixed number of data owners), without incurring high computational and storage costs. In addition, due to privacy concerns on access policies, most existing schemes are vulnerable to off-line keyword-guessing attacks if the keyword space is of polynomial size. Furthermore, it is difficult to identify malicious users who leak the secret keys when more than one data user has the same subset of attributes. In this paper, we present a privacy-preserving CP-ABKS system with hidden access policy in Shared Multi-owner setting (basic ABKS-SM system), and demonstrate how it is improved to support malicious user tracing (modified ABKS-SM system). We then prove that the proposed ABKS-SM systems achieve selective security and resist off-line keyword-guessing attack in the generic bilinear group model. We also evaluate their performance using real-world datasets.

关键词： ciphertext-policy attribute-based encryption shared multi-owner setting hidden access policy user tracing off-line keyword-guessing attack

来源：评论

学校读者我要写书评

暂无评论

Blockchain-Assisted Collaborative Service Recommendation Scheme With Data Sharing

引用

IEEE ACCESS 2021年 9卷 40871-40883页

作者： Yan, Biwei Dong, Anming Chai, Baobao Han, Yubing Zhou, Guanglin Zhao, Fangxin Qufu Normal Univ Sch Math Sci Qufu 273165 Shandong Peoples R China Qilu Univ Technol Shandong Acad Sci Sch Comp Sci & Technol Jinan 250353 Peoples R China

With the rapid development of cloud computing, a large number of web services have been emerging quickly, which brings a heavy burden for users to choose the services they preferred. In order to suggest web services for users, recommendation algorithms are needed and many of them have been investigated recently. However, most of the existing recommendation schemes are based on centralized historical data, which may lead to single point of failure. Generally, the data contains a lot of sensitive information that cloud may expose the privacy of users, which makes most cloud platforms reluctant to share their own data. In order to solve the above issues, the secure data sharing among cloud platforms is necessary for better recommendation, which can maximize the profits. In this paper, we propose a blockchain-assisted collaborative service recommendation scheme (BC -SRDS). Specifically, we adopt the ciphertext-policy attribute-based encryption (CP-ABE) algorithm to encrypt the data, which ensures the data confidentiality and realizes secure data sharing. Then, we utilize the blockchain to share data, such that the DoS attack, DDoS attack and single point of failure can be avoided. Meanwhile, the data integrity, tampering-proof of data are guaranteed through the blockchain. And we use locality-sensitive hashing algorithm to recommend the services for users. Finally, it is proved through the security analysis that BC -SRDS is capable of achieving data confidentiality, data integrity and tampering-proof. A series of experiments show that BC -SRDS achieves better recommendation accuracy compared with the existing schemes.

关键词： Collaborative service recommendation blockchain data sharing ciphertext-policy attribute-based encryption

来源：评论

学校读者我要写书评

暂无评论

Fine-grained encryption for Secure Research Data Sharing 35

Fine-grained Encryption for Secure Research Data Sharing

引用

35th IEEE International Symposium on Computer-based Medical Systems (CBMS)

作者： Reis, Lucio H. A. de Oliveira, Marcela T. Olabarriaga, Silvia D. Univ Amsterdam Epidemiol & Data Sci Amsterdam UMC Locat Amsterdam Netherlands Univ Amsterdam Biomed Engn & Phys Amsterdam UMC Locat Amsterdam Netherlands Amsterdam Publ Hlth & Methodol Amsterdam Netherlands

ISBN: (数字)9781665467704

ISBN: (纸本)9781665467704

Research data sharing requires provision of adequate security. The requirements for data privacy are extremely demanding for medical data that is reused for research purposes. To address these requirements, the research institutions must implement adequate security measurements, and this demands large effort and costs to do it properly. The usage of adequate access controls and data encryption are key approaches to effectively protect research data confidentiality;however, the management of the encryption keys is challenging. There are novel mechanisms that can be explored for managing access to the encryption keys and encrypted files. These mechanisms guarantee that data are accessed by authorised users and that auditing is possible. In this paper we explore these mechanisms to implement a secure research medical data sharing system. In the proposed system, the research data are stored on a secure cloud system. The data are partitioned into subsets, each one encrypted with a unique key. After the authorisation process, researchers are given rights to use one or more of the keys and to selectively access and decrypt parts of the dataset. Our proposed solution offers automated fine-grain access control to research data, saving time and work usually made manually. Moreover, it maximises and fortifies users' trust in data sharing through secure clouds solutions. We present an initial evaluation and conclude with a discussion about the limitations, open research questions and future work around this challenging topic.

关键词： Research Data attribute-based Access Control ciphertext-policy attribute-based encryption Symmetric Searchable encryption Security Privacy Data Reuse

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：