检索结果-内蒙古大学图书馆

A new outsourcing conditional proxy re-encryption suitable for mobile cloud environment

CONCURreNCY AND COMPUTATION-PRACTICE & EXPERIENCE 2017年第14期29卷 e3946.1-e3946.16页

作者： Son, Junggab Kim, Donghyun Bhuiyan, Md Zakirul Alam Hussain, Rasheed Oh, Heekuck Kennesaw State Univ Dept Comp Sci Marietta GA 30060 USA Fordham Univ Dept Comp & Informat Sci Bronx NY 10458 USA Innopolis Univ Inst Informat Sci Innopolis Russia Hanyang Univ Dept Comp Sci & Engn Ansan South Korea

The mobile cloud is a highly heterogenous and constantly evolving network of numerous portable devices utilizing the powerful back-end cloud infrastructure to overcome their severe deficiency in computing resource and offer various services such as data sharing. Inherently, in mobile cloud, the risk of user privacy invasion by the cloud operator is high. The conditional proxy re-encryption (CPre) is a useful concept for secure group data sharing via cloud while preserving the privacy of the shared data from any unintended third parties including the cloud operator. Unfortunately, the state-of-art CPre is not particularly designed for mobile cloud environment and therefore imposes heavy burdens to the weak mobile cloud clients. This paper introduces a new CPre scheme, namely the CPre for mobile cloud, which utilizes the back-end cloud to the extreme extent so that the overhead of terminals is drastically reduced. Specifically, our scheme outsources a significant amount of computation overhead caused by the following functions at terminals: (a) re-encryption key generation, (b) condition value change, and (c) decryption, to the cloud. The proposed scheme also allows users to verify the correctness of outsourced computation under refereed delegation of computation model. Our simulation results show CPre for mobile cloud that outperforms its existing alternatives. Copyright (C) 2016 John Wiley & Sons, Ltd.

关键词： cloud computing mobile cloud proxy re-encryption conditional proxy re-encryption outsourcing computation

来源：评论

学校读者我要写书评

暂无评论

conditional proxy broadcast re-encryption with fine grain policy for cloud data sharing

引用

INTERNATIONAL JOURNAL OF EMBEDDED SYSTEMS 2019年第2期11卷 115-124页

作者： Sun, Maosheng Ge, Chunpeng Fang, Liming Wang, Jiandong Nanjing Univ Aeronaut & Astronaut Coll Comp Sci & Technol Nanjing Jiangsu Peoples R China Yangzhou Univ Dept Informat Ctr Yangzhou Jiangsu Peoples R China Jiangsu Univ Technol Dept Comp Engn Changzhou Peoples R China

conditional proxy broadcast re-encryption (CPBre) enables a semi-trusted proxy to convert Alice's ciphertext satisfying a certain condition into a set of users' ciphertext. The proxy, however, cannot learn anything about the underlying plaintext. The traditional CPBre schemes cannot support flexible control on conditions. In this paper, we present a new primitive named conditional proxy broadcast re-encryption with fine grain policy (CPBre-FG). In a CPBre-FG scheme, the re-encryption key is generated with an access tree, and the ciphertext is constructed under a set of descriptive conditions. The proxy can convert a ciphertext if and only if the set of conditions satisfies the access tree. We formalise the notion of CPBre-FG and present an efficient CPBre-FG scheme. Finally, we prove it against chosen-ciphertext attack (CCA) security in the random oracle model.

关键词： conditional proxy re-encryption proxy broadcast re-encryption access policy random oracle model

来源：评论

学校读者我要写书评

暂无评论

conditional proxy Broadcast re-encryption

Conditional Proxy Broadcast Re-Encryption

引用

14th Australasian Conference on Information Security and Privacy

作者： Chu, Cheng-Kang Weng, Jian Chow, Sherman S. M. Zhou, Jianying Deng, Robert H. Singapore Management Univ Sch Informat Syst Singapore Singapore

ISBN: (纸本)9783642026195

A proxy re-encryption (Pre) scheme supports the delegation of decryption rights via a proxy, who makes the ciphertexts decryptable by the delegatee. Pre is useful in various applications such as encrypted email forwarding. In this paper, we introduce a more generatized notion of conditional proxy broadcast re-encryption (CPBre). A CPBre scheme allows Alice to generate a re-encryption key for some condition specified during the encryption, such that the re-encryption power of the proxy is restricted to that condition only. This enables a more fine-grained delegation of decryption right. Moreover, Alice can delegate decryption rights to a set of users at a time. That is, Alice's ciphertexts can be re-broadcasted. This saves a lot of computation and communication cost. We propose a basic CPBre scheme secure against chosen-plaintext attacks, and its extension which is secure against replayable chosen-ciphertext attacks (RCCA). Both schemes are unidirectional and proved secure in the standard model. Finally, we show that it is easy to get a unidirectional RCCA-secure identity-based proxy re-encryption from our RCCA-secure CPBre construction.

关键词： proxy re-encryption conditional proxy re-encryption broadcast encryption hierarchical identity-coupling broadcast encryption

来源：评论

学校读者我要写书评

暂无评论

Secure Data Group Sharing and conditional Dissemination with Multi-Owner in Cloud Computing

引用

IEEE TRANSACTIONS ON CLOUD COMPUTING 2021年第4期9卷 1607-1618页

作者： Huang, Qinlong Yang, Yixian Yue, Wei He, Yue Beijing Univ Posts & Telecommun Sch Cyberspace Secur Beijing 100876 Peoples R China Beijing Univ Posts & Telecommun Natl Engn Lab Disaster Backup & Recovery Beijing 100876 Peoples R China

With the rapid development of cloud services, huge volume of data is shared via cloud computing. Although cryptographic techniques have been utilized to provide data confidentiality in cloud computing, current mechanisms cannot enforce privacy concerns over ciphertext associated with multiple owners, which makes co-owners unable to appropriately control whether data disseminators can actually disseminate their data. In this paper, we propose a secure data group sharing and conditional dissemination scheme with multi-owner in cloud computing, in which data owner can share private data with a group of users via the cloud in a secure way, and data disseminator can disseminate the data to a new group of users if the attributes satisfy the access policies in the ciphertext. We further present a multiparty access control mechanism over the disseminated ciphertext, in which the data co-owners can append new access policies to the ciphertext due to their privacy preferences. Moreover, three policy aggregation strategies, including full permit, owner priority and majority permit, are provided to solve the privacy conflicts problem caused by different access policies. The security analysis and experimental results show our scheme is practical and efficient for secure data sharing with multi-owner in cloud computing.

关键词： Data sharing cloud computing conditional proxy re-encryption attribute-based encryption privacy conflict

来源：评论

学校读者我要写书评

暂无评论

Secure Identity-Based Data Sharing and Profile Matching for Mobile Healthcare Social Networks in Cloud Computing

引用

IEEE ACCESS 2018年 6卷 36584-36594页

作者： Huang, Qinlong Yue, Wei He, Yue Yang, Yixian Beijing Univ Posts & Telecommun Sch Cyberspace Secur Beijing 100876 Peoples R China

Cloud computing and social networks are changing the way of healthcare by providing real-time data sharing in a cost-effective manner. However, data security issue is one of the main obstacles to the wide application of mobile healthcare social networks (MHSNs), since health information is considered to be highly sensitive. In this paper, we introduce a secure data sharing and profile matching scheme for the MHSN in cloud computing. The patients can outsource their encrypted health records to cloud storage with an identity-based broadcast encryption technique, and share them with a group of doctors in a secure and efficient manner. We then present an attribute-based conditional data re-encryption construction which permits the doctors who satisfy the pre-defined conditions in the ciphertext to authorize the cloud platform to convert a ciphertext into a new ciphertext of an identity-based encryption scheme for specialist without leaking any sensitive information. Furthermore, we provide a profile matching mechanism in the MHSN based on identity-based encryption with an equality test, which helps patients to find friends in a privacy-preserving way and achieves flexible authorization on the encrypted health records with resisting the keywords guessing attack. Moreover, this mechanism reduces the computation cost on the patient side. The security analysis and experimental evaluation show that our scheme is practical for protecting the data security and privacy in the MHSN.

关键词： conditional proxy re-encryption data security encryption health information management profile matching

来源：评论

学校读者我要写书评

暂无评论

Cloud based data sharing with fine-grained proxy re-encryption

引用

PERVASIVE AND MOBILE COMPUTING 2016年 28卷 122-134页

作者： Yang, Yanjiang Zhu, Haiyan Lu, Haibing Weng, Jian Zhang, Youcheng Choo, Kim-Kwang Raymond Inst Infocomm Res Singapore Singapore Beihang Univ Sch Elect & Informat Engn Beijing 100191 Peoples R China Santa Clara Univ Leavey Sch Business Santa Clara CA 95053 USA Jinan Univ Dept Comp Sci Jinan Peoples R China Nanjing Unary Informat Technol Co Ltd Nanjing Jiangsu Peoples R China Univ S Australia Informat Assurance Res Lab Adelaide SA 5001 Australia

conditional proxy re-encryption (CPre) enables fine-grained delegation of decryption rights, and has many real-world applications. In this paper, we present a ciphertext-policy attribute based CPre scheme, together with a formalization of the primitive and its security analysis. We demonstrate the utility of the scheme in a cloud deployment, which achieves fine-grained data sharing. This application implements cloud server-enabled user revocation, offering an alternative yet more efficient solution to the user revocation problem in the context of fine-grained encryption of cloud data. High user-side efficiency is another prominent feature of the application, which makes it possible for users to use resource constrained devices, e.g., mobile phones, to access cloud data. Our evaluations show promising results on the performance of the proposed scheme. (C) 2015 Elsevier B.V. All rights reserved.

关键词： Cloud computing conditional proxy re-encryption User revocation Fine-grained encryption

来源：评论

学校读者我要写书评

暂无评论

A Key-Policy Attribute-Based proxy re-encryption Without Random Oracles

引用

COMPUTER JOURNAL 2016年第7期59卷 970-982页

作者： Ge, Chunpeng Susilo, Willy Wang, Jiandong Huang, Zhiqiu Fang, Liming ren, Yongjun Nanjing Univ Aeronaut & Astronaut Coll Comp Sci & Technol Nanjing Jiangsu Peoples R China Univ Wollongong Sch Comp & Informat Technol CCISR Wollongong NSW Australia Nanjing Univ Informat Sci Sch Comp & Software Nanjing Jiangsu Peoples R China

A conditional proxy re-encryption (CPre) scheme enables the proxy to convert a ciphertext from Alice to Bob, if the ciphertext satisfies one condition set by Alice. To improve the issue of more fine-grained on the condition set, Fang, Wang, Ge and ren proposed a new primitive named Interactive conditional Pre with fine grain policy (ICPre-FG) in 2011, and left an open problem on how to construct CCA-secure ICPre-FG without random oracles. In this paper, we answer this open problem affirmatively by presenting a new construction of CCA-secure key-policy attribute-based Pre (KP-ABPre) without random oracles. In this paper, we enhance the security model of Fang's ICPre-FG scheme by allowing the adversary to make some extra queries, which do not help them win the game trivially. Finally, we present a CCA-secure KP-ABPre without random oracles under the 3-weak decisional bilinear Diffie-Hellman inversion(3-wDBDHI) assumption.

关键词： conditional proxy re-encryption attribute-based proxy re-encryption without random oracles

来源：评论

学校读者我要写书评

暂无评论

A Secure and Fine-Grained Scheme for Data Security in Industrial IoT Platforms for Smart City

引用

IEEE INTERNET OF THINGS JOURNAL 2020年第9期7卷 7982-7990页

作者： Fang, Liming Zhang, Hanyi Li, Minghui Ge, Chunpeng Liu, Liang Liu, Zhe Nanjing Univ Aeronaut & Astronaut Coll Comp Sci & Technol Nanjing 211106 Peoples R China Nanjing Univ Aeronaut & Astronaut State Key Lab Cryptol Nanjing 211106 Peoples R China

With the high popularity of IoT devices, industrial IoT platforms, such as smart factories and oilfield industrial control systems, have become a new trend in the development of smart city. Although various manufacturers pay wide attention to the different functional requirements of IoT platforms, they seldom consider security issues, especially in terms of data security, which has led to a large number of cases of privacy leakage. Some works have been made to provide secure and reliable communication solutions for industrial IoT platforms, unfortunately, as different communication protocols and interaction models are adopted in different scenarios, these solutions are mainly isolated and fragmented. Therefore, it is an urgent challenge to construct a universal cross-platform secure communication scheme for industrial IoT platforms. In this article, we analyze the logic and requirements of different industrial IoT scenarios to abstracts them into a universal model. We summarize the possible attacks on different industrial IoT platforms and design a security scheme to capture these attacks based on the conditional proxy re-encryption primitive. The proposed scheme ensures that data cannot be accessed by an unauthorized user. We also evaluate the security and performance of our scheme, and the experimental results show that our scheme can achieve the functionality and security requirements with low overhead.

关键词： Protocols Control systems Cloud computing Data security conditional proxy re-encryption data security IoT platform smart city services smart industry

来源：评论

学校读者我要写书评

暂无评论

Secure Data Group Sharing and Dissemination with Attribute and Time Conditions in Public Cloud

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2021年第4期14卷 1013-1025页

作者： Huang, Qinlong Yang, Yixian Fu, Jingyi Beijing Univ Posts & Telecommun Sch Cyberspace Secur Beijing 100876 Peoples R China Beijing Univ Posts & Telecommun Natl Engn Lab Disaster Backup & Recovery Beijing 100876 Peoples R China

Cloud computing has become increasingly popular among users and businesses around the world. Although cryptographic techniques can provide data protection for users in public cloud, several issues also remain problematic, such as secure data group dissemination and fine-grained access control of time-sensitive data. In this paper, we propose an identity-based data group sharing and dissemination scheme in public cloud, in which data owner could broadcast encrypted data to a group of receivers at one time by specifying these receivers' identities in a convenient and secure way. In order to achieve secure and flexible data group dissemination, we adopt attribute-based and timed-release conditional proxy re-encryption to guarantee that only data disseminators whose attributes satisfy the access policy of encrypted data can disseminate it to other groups after the releasing time by delegating a re-encryption key to cloud server. The re-encryption conditions are associated with attributes and releasing time, which allows data owner to enforce fine-grained and timed-release access control over disseminated ciphertexts. The theoretical analysis and experimental results show our proposed scheme makes a tradeoff between computational overhead and expressive dissemination conditions.

关键词： Access control Cloud computing Data protection receivers Libraries Outsourcing Cryptography Data dissemination attribute-based encryption conditional proxy re-encryption timed-release encryption cloud computing

来源：评论

学校读者我要写书评

暂无评论

reEDS: An Efficient revocable End-to-End Encrypted Message Distribution System for IoT

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECUre COMPUTING 2024年第5期21卷 4526-4542页

作者： Li, Cui Chen, Rongmao Wang, Yi Xing, Qianqian Wang, Baosheng Natl Univ Def Technol Sch Comp Changsha 410073 Peoples R China Natl Univ Def Technol Sch Informat & Commun Xian 710106 Peoples R China

To address the confidentiality concerns of malicious adversaries that fully compromise the message broker in pub/sub based IoT systems, several researchers use proxy re-encryption (Pre) to realize end-to-end encrypted message distribution (from publisher to subscriber). However, the all-or-nothing share feature of Pre poses a problem that the share cannot be efficiently revoked. The only way for publishers to revoke the access rights of subscribers is to pick a new public-private key pair and re-generate the re-encryption keys for all the remaining subscribers, which hampers the scalability in practice. To realize efficient user revocation, we present reEDS, an efficient revocable end-to-end encrypted message distribution system for IoT. The core of reEDS is a novel proxy-aided identity-based conditional proxy re-encryption (PIB-CPre) scheme. Essentially, we use a binary-tree structure to organize re-encryption keys, so that the update of re-encryption keys is reduced from linear to logarithmic in the number of subscribers. We show that reEDS satisfies confidentiality, efficient immediate revocation, decentralized authorization, and maintains low overhead for publishers and subscribers. The prototype system is implemented and its performance is evaluated. The results show that reEDS is not only easy to deploy over existing message brokers but also highly efficient.

关键词： encryption Public key Protocols Performance evaluation Scalability receivers proxy re-encryption conditional proxy re-encryption decryption rights revocation publish subscribe paradigm internet of Things internet of Things

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：