A DFA-Based Functional Proxy Re-Encryption Scheme for Secure Public Cloud Data Sharing

Liang, Kaitai; Au, Man Ho; Liu, Joseph K.; Susilo, Willy; Wong, Duncan S.; Yang, Guomin; Phuong, Tran Viet Xuan; Xie, Qi

doi:10.1109/tifs.2014.2346023

Cited by 95 publications

(39 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This PRE scheme allows a ciphertext in PKI-based systems to be converted into a ciphertext for an identity in IBE system, although it does not support the broadcasting mechanism in encryption. Liang [23] deployed the concept of PRE to achieve revocability in identity-based setting and further generalized the concept of PRE into any DFA-based functional setting [21]. Shao [34] extended the concept of IBPRE to that of anonymous IBPRE (AIBPRE) and proposed an AIBPRE scheme to achieve the anonymity of recipients.…”

Section: Related Workmentioning

confidence: 99%

Asymmetric Cross-cryptosystem Re-encryption Applicable to Efficient and Secure Mobile Access to Outsourced Data

Deng

Qin

et al. 2015

Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

With the increasing development of pervasive computing and wireless bandwidth communication, more mobile devices are used to access sensitive data stored in remote servers. In such applications, a practical issue emerges such as how to exploit the sufficient resource of a server so that the file owners can enforce fine-grained access control over the remotely stored files, while enable resource-limited mobile devices to easily access the protected data, especially if the storage server maintained by a third party is untrusted. This challenge mainly arises from the asymmetric capacity among the participants, i.e., the capacity limited mobile devices and the resource abundant server (and file owners equipped with fixed computers). To meet the security requirements in mobile access to sensitive data, we propose a new encryption paradigm, referred to as asymmetric cross-cryptosystem reencryption (ACCRE) by leveraging the asymmetric capacity of the participants. In ACCRE, relatively light-weight identity-based encryption (IBE) is deployed in mobile devices, while resource-consuming but versatile identity-based broadcast encryption (IBBE) is deployed in servers and fixed computers of the file owners. The core of ACCRE is a novel ciphertext conversion mechanism that allows an authorized proxy to convert a complicated IBBE ciphertext into a simple IBE ciphertext affordable to mobile devices, without leaking any sensitive information to the proxy. Following this paradigm, we propose an efficient ACCRE scheme with its security formally reduced to the security of the underlying IBE and IBBE schemes. Thorough theoretical analyses and extensive experiments confirm that the scheme takes Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from permissions@acm.org. ASIA CCS'very small cost for mobile devices to access encrypted data and is practical to secure mobile computing applications.

show abstract

Section: Related Workmentioning

confidence: 99%

Asymmetric Cross-cryptosystem Re-encryption Applicable to Efficient and Secure Mobile Access to Outsourced Data

Deng

Qin

et al. 2015

Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…Afterwards, many PRE schemes have been proposed, such as [2], [3], [11], [18], [25], [20], [23], [26], [21].…”

Section: B Related Workmentioning

confidence: 99%

Privacy-Preserving Ciphertext Multi-Sharing Control for Big Data Storage

Liang

Susilo

Liu

2015

IEEE Trans.Inform.Forensic Secur.

Self Cite

View full text Add to dashboard Cite

The need of secure big data storage service is more desirable than ever to date. The basic requirement of the service is to guarantee the confidentiality of the data. However, the anonymity of the service clients, one of the most essential aspects of privacy, should be considered simultaneously. Moreover, the service also should provide practical and fine-grained encrypted data sharing such that a data owner is allowed to share a ciphertext of data among others under some specified conditions. This paper, for the first time, proposes a privacy-preserving ciphertext multi-sharing mechanism to achieve the above properties. It combines the merits of proxy re-encryption with anonymous technique in which a ciphertext can be securely and conditionally shared multiple times without leaking both the knowledge of underlying message and the identity information of ciphertext senders/recipients. Furthermore, this paper shows that the new primitive is secure against chosen-ciphertext attacks in the standard model. Abstract-The need of secure big data storage service is more desirable than ever to date. The basic requirement of the service is to guarantee the confidentiality of the data. However, the anonymity of the service clients, one of the most essential aspects of privacy, should be considered at the same time. Moreover, the service also should provide practical and finegrained encrypted data sharing so that a data owner is allowed to share a ciphertext of data among others based on his/her wish, under some pre-defined conditions. This paper, for the first time, proposes a privacy-preserving ciphertext multi-sharing mechanism to achieve the above properties simultaneously. It combines the merits of proxy re-encryption with anonymous technique in which a ciphertext can be securely and conditionally shared multiple times without leaking both the knowledge of underlying plaintext and the identity information of ciphertext senders/recipients. Furthermore, the paper shows that the new primitive is secure against chosen-ciphertext attacks in the standard model under the Decisional P Bilinear Diffie-Hellman assumption. Disciplines Engineering | Science and Technology Studies

show abstract

“…Due to its transformation property, PRE schemes can be used in many applications,including simplification of key distribution [1], key escrow [2], distributed file systems [3], [4], multicast [5], anonymous communication [6], DFA-based FPRE system [7], and cloud computation [8], [9]. Recently, the research of cloud email system has become more and more popular in business and organizations as it allows an enterprise to rent the cloud SaaS service to build an email system with less costs and maintenance efforts.…”

Section: Introductionmentioning

confidence: 99%

Identity Based Proxy Re-Encryption Scheme (IBPRE+) for Secure Cloud Data Sharing

Wang

Xhafa

Zheng³

et al. 2016

2016 International Conference on Intelligent Networking and Collaborative Systems (INCoS)

View full text Add to dashboard Cite

A DFA-Based Functional Proxy Re-Encryption Scheme for Secure Public Cloud Data Sharing

Cited by 95 publications

References 19 publications

Asymmetric Cross-cryptosystem Re-encryption Applicable to Efficient and Secure Mobile Access to Outsourced Data

Asymmetric Cross-cryptosystem Re-encryption Applicable to Efficient and Secure Mobile Access to Outsourced Data

Privacy-Preserving Ciphertext Multi-Sharing Control for Big Data Storage

Identity Based Proxy Re-Encryption Scheme (IBPRE+) for Secure Cloud Data Sharing

Contact Info

Product

Resources

About