An Expressive “Test-Decrypt-Verify” Attribute-Based Encryption Scheme With Hidden Policy for Smart Medical Cloud

Hu, Gongcheng; Zhang, Leyou; Mu, Yi; Gao, Xiaoxu

doi:10.1109/jsyst.2020.2996216

Cited by 25 publications

(16 citation statements)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although both literature [7] and this paper use a symmetric key to encrypt files, only this paper realizes the update of the symmetric key and its ciphertext and revocation in a complete sense. In addition, literature [2,37] only implemented the function of policy hiding. Our proposed scheme also supports searchable encryption and introduces blockchain to prevent repudiation.…”

Section: Functional Comparisonmentioning

confidence: 99%

“…The most important thing is that our scheme can manage rights in a complete sense in terms of users, user attributes, and file attributes. LSSS N/A [37] LSSS N/A [7] Access ree Ours Access ree…”

Section: Functional Comparisonmentioning

confidence: 99%

“…In terms of performance, this paper compares the proposed scheme with [2,6,7,36,37] in storage overhead and computational overhead from a theoretical perspective.…”

Section: Complexity Evaluation Of Our Cpabe Schemementioning

confidence: 99%

See 2 more Smart Citations

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Lu,

Feng,

Liu

et al. 2024

CMC

View full text Add to dashboard Cite

The Access control scheme is an effective method to protect user data privacy. The access control scheme based on blockchain and ciphertext policy attribute encryption (CP-ABE) can solve the problems of single-point of failure and lack of trust in the centralized system. However, it also brings new problems to the health information in the cloud storage environment, such as attribute leakage, low consensus efficiency, complex permission updates, and so on. This paper proposes an access control scheme with fine-grained attribute revocation, keyword search, and traceability of the attribute private key distribution process. Blockchain technology tracks the authorization of attribute private keys. The credit scoring method improves the Raft protocol in consensus efficiency. Besides, the interplanetary file system (IPFS) addresses the capacity deficit of blockchain. Under the premise of hiding policy, the research proposes a fine-grained access control method based on users, user attributes, and file structure. It optimizes the data-sharing mode. At the same time, Proxy Re-Encryption (PRE) technology is used to update the access rights. The proposed scheme proved to be secure. Comparative analysis and experimental results show that the proposed scheme has higher efficiency and more functions. It can meet the needs of medical institutions.

show abstract

Section: Functional Comparisonmentioning

confidence: 99%

Section: Functional Comparisonmentioning

confidence: 99%

See 1 more Smart Citation

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Lu,

Feng,

Liu

et al. 2024

CMC

View full text Add to dashboard Cite

show abstract

“…In [31], the authors eliminated all redundant attributes in the access policy, and their approach significantly reduced computation overhead. With the same intention, the author of [32] proposed the 'testdecrypt-verify' approach to reduce the computation cost in their CP-ABE scheme. In their scheme, the testing phase is added before the encryption phase, and the new component, Outsourcing Cloud Server, is adopted as an outsource agent to reduce the decryption calculation.…”

Section: Related Workmentioning

confidence: 99%

Towards Virtuous Cloud Data Storage Using Access Policy Hiding in Ciphertext Policy Attribute-Based Encryption

et al. 2021

View full text Add to dashboard Cite

Managing and controlling access to the tremendous data in Cloud storage is very challenging. Due to various entities engaged in the Cloud environment, there is a high possibility of data tampering. Cloud encryption is being employed to control data access while securing Cloud data. The encrypted data are sent to Cloud storage with an access policy defined by the data owner. Only authorized users can decrypt the encrypted data. However, the access policy of the encrypted data is in readable form, which results in privacy leakage. To address this issue, we proposed a reinforcement hiding in access policy over Cloud storage by enhancing the Ciphertext Policy Attribute-based Encryption (CP-ABE) algorithm. Besides the encryption process, the reinforced CP-ABE used logical connective operations to hide the attribute value of data in the access policy. These attributes were converted into scrambled data along with a ciphertext form that provides a better unreadability feature. It means that a two-level concealed tactic is employed to secure data from any unauthorized access during a data transaction. Experimental results revealed that our reinforced CP-ABE had a low computational overhead and consumed low storage costs. Furthermore, a case study on security analysis shows that our approach is secure against a passive attack such as traffic analysis.

show abstract

“…In traditional CP-ABE scheme [3], the data owner (DO) uploads the access policy and ciphertext to the cloud service provider (CSP) for storage. When utilizing the access policy in plaintext, it is possible for unauthorized users and the CSP to observe access policy attributes in ciphertexts [6], which could cause leakage of privacy for DOs and users. In response to the above problems, a partially hidden policy CP-ABE scheme (PHP-CP-ABE) [7] was proposed by researchers.…”

Section: Introductionmentioning

confidence: 99%

A Partially Hidden Policy Attribute-based Encryption Supporting Outsourced Authentication and Attribute Revocation

Fan

et al. 2022

Preprint

View full text Add to dashboard Cite

Ciphertext-Policy Attribute-based Encryption (CP-ABE) has been used as an important access control approach to protect the data security. The data owner uploads the access policy in the form of plaintext to the cloud, potentially disclosing personal information about the data owner. Hidden-Policy CP-ABE schemes have been proposed to partially hide the policy or fully hide the policy. However, such schemes may incur high overhead on identity authentication and user revocation. In this paper, we propose a new partially hidden policy CP-ABE (OAAR-PHP-ABE) to address the low authentication efficiency and lack of support for attribute revocation of existing PHP-CP-ABE schemes. We give the cloud server a portion of the calculation of the encryption parameters to complete during the encryption step. The final ciphertext is encrypted by data owners using the outsourced encrypted ciphertext, which reduces the data owner's computational workload. In the decryption phase, we divide the user's key into two parts: the outsourced decryption key and the user's secret key. The cloud use outsourced decryption keys to help users complete user authentication and partial decryption. Users just need to conduct an exponentiation operation to recover the plaintext after receiving the outsourced decrypted ciphertext, which can significantly reduce users' computational overhead. In addition, a dynamic revocation algorithm for users and attributes in the system is also designed.

show abstract

An Expressive “Test-Decrypt-Verify” Attribute-Based Encryption Scheme With Hidden Policy for Smart Medical Cloud

Cited by 25 publications

References 36 publications

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Towards Virtuous Cloud Data Storage Using Access Policy Hiding in Ciphertext Policy Attribute-Based Encryption

A Partially Hidden Policy Attribute-based Encryption Supporting Outsourced Authentication and Attribute Revocation

Contact Info

Product

Resources

About