An efficient signcryption for data access control in cloud computing

Li, Fagen; Liu, Bo; Hong, Jiaojiao

doi:10.1007/s00607-017-0548-7

Cited by 36 publications

(13 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Similarly, in [10], authors propose an identity-based signcryption scheme with efficient revocation access control for big data, leveraging a centralized PKG for key distribution between users and the analytical system. In [11], authors propose an identity based signcryption scheme with proxy reencryption access control, also relying on a centralized PKG between users and cloud. Authors in [12], propose to use a trusted third-party system between users, data owners and cloud storage to distribute keys, handle encryption and decryption, as well as authentication.…”

Section: Related Workmentioning

confidence: 99%

Towards An Efficient Key Management and Authentication Strategy for Combined Fog-to-Cloud Continuum Systems

Kahvazadeh¹,

Masip-Bruin²,

Díaz³

et al. 2018

2018 3rd Cloudification of the Internet of Things (CIoT)

View full text Add to dashboard Cite

Fog-to-cloud systems have emerged as a novel concept intended to improve service performance by considering fog and cloud resources in a coordinated way. In such a heterogeneous scenario, security provisioning becomes necessary, hence novel security solutions must be designed to handle the highly distributed fog-to-cloud nature. In the security area, key distribution and authentication are referred to as two critical pillars for a successful security deployment. Unfortunately, traditional centralized key distribution and authentication approaches do not meet the particularities brought by a Fog-tocloud system due to its distributed nature. In this paper, we propose a novel distributed key management and authentication (DKMA) strategy to make Fog-to-cloud systems as secure as possible. The paper ends up presenting some results assessing the benefits of the proposed strategy in terms of traffic and delay reduction.

show abstract

Section: Related Workmentioning

confidence: 99%

Towards An Efficient Key Management and Authentication Strategy for Combined Fog-to-Cloud Continuum Systems

Kahvazadeh¹,

Masip-Bruin²,

Díaz³

et al. 2018

2018 3rd Cloudification of the Internet of Things (CIoT)

View full text Add to dashboard Cite

show abstract

“…Another application of signcryption technique can be seen in cloud applications to address security challenges . The design of signcryption schemes for sharing the data via public clouds has a more favorable advantage in terms of both data origin mutual authentication, unlinkability between any arbitrary sessions, and efficient in terms of computation as well as communication costs. The applications of signcryption are also observed in the Internet of Things to address the challenges of security .…”

Section: Introductionmentioning

confidence: 99%

Understanding signcryption security in standard model

Dharminder

Mishra

2020

Security and Privacy

View full text Add to dashboard Cite

Signcryption is an advanced technique that combines both signature and encryption in one step which costs lower than any ordinary signature-then-encryption technique. Many ID-based signcryption () techniques have been constructed, but they are considered secure in the random Oracle (RO) model, where the proofs in this environment are criticized as it always depends on the assumption that Oracle is truly random. This assumption of RO is not possible in reality. Therefore, many of the ID-based signcryptions were proposed in the widely accepted standard model. As signcryption schemes have much important application, the verification of their correctness, security, and performance are required. In this article, we have discussed two important security features in the standard model under decision bilinear Diffie-Hellman (DBDH) and computational Diffie-Hellman(CDH) assumptions, namely, (a) indistinguishable against chosen cipher text attack and (b) indistinguishable against chosen-plaintext attack. To understand the security of existing schemes, we present cryptanalysis, which illustrates weak security.The study on performance is also performed to analyze the communication and computational efficiency. The study of performance and security analysis helps us to understand the requirement of signcryption scheme in standard model. K E Y W O R D Sauthentication, elliptic curve, security, signcryption, standard model

show abstract

“…At IMACC'13, Nakano et al [6] presented two generic constructions of signcryption in the standard model. At 2017, Li et al [7] proposed a signcryption for cloud computing. At PQCrypto' 18 [8] proposed lattice-based signcryption without random oracles.…”

Section: Introductionmentioning

confidence: 99%

On the RCCA Security of Hybrid Signcryption for Internet of Things

Dai

Wang

Chang

et al. 2018

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

With the rapid development of the Internet of Things (IoT), a lot of sensitive information in our daily lives are now digitalized and open to remote access. The provision of security and privacy of such data would incur comprehensive cryptographic services and has raised wide concern. Hybrid signcryption schemes could achieve various kinds of cryptographic services (e.g., confidentiality, authenticity, and integrity) with much lower cost than the combination of separate traditional cryptographic schemes with each providing a single cryptographic service. Thus, hybrid signcryption schemes are very suitable for IoT environments where resources are generally very constrained (e.g., lightweight sensors and mobile phones). To ensure that the overall hybrid signcryption scheme provides adequate cryptographic service (e.g., confidentiality, integrity, and authentication), its parts of KEM (key encryption mechanism) and DEM (data encryption mechanism) must satisfy some security requirements. Chosen-ciphertext attack (CCA) security has been widely accepted as the golden standard requirement for general encryption schemes. However, CCA security appears too strong in some conditions. Accordingly, Canetti et al. (CRYPTO 2003) proposed the notion of replayable CCA security (RCCA) for encryption schemes, which is a strictly weaker security notion than CCA security and naturally more efficient. This new security notion has proved to be sufficient for most existing applications of CCA security, e.g., encrypted password authentication. This is particularly promising for IoT environments, where security is demanding, yet resources are constrained. In this paper, we examine the RCCA security of the well-known SKEM+DEM style hybrid signcryption scheme by Dent at ISC 2005. Meanwhile, we also examine the RCCA security of the Tag-SKEM+DEM style hybrid signcryption scheme by Bjorstad and Dent at PKC 2006. We rigorously prove that a hybrid signcryption scheme can achieve RCCA security if both its SKEM part and its DEM part satisfy some security assumptions.

show abstract

An efficient signcryption for data access control in cloud computing

Cited by 36 publications

References 24 publications

Towards An Efficient Key Management and Authentication Strategy for Combined Fog-to-Cloud Continuum Systems

Towards An Efficient Key Management and Authentication Strategy for Combined Fog-to-Cloud Continuum Systems

Understanding signcryption security in standard model

On the RCCA Security of Hybrid Signcryption for Internet of Things

Contact Info

Product

Resources

About