Cloud based data sharing with fine-grained proxy re-encryption

Yang, Yanjiang; Zhu, Hehua; Lu, Haibing; Weng, Jian; Zhang, Youcheng; Choo, Kim‐Kwang Raymond

doi:10.1016/j.pmcj.2015.06.017

Cited by 83 publications

(31 citation statements)

References 35 publications

(65 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Liu et al [17] proposed a time-based proxy re-encryption scheme, which allowed the cloud to automatically re-encrypt the ciphertexts based on time . Yang et al [28] presented a conditional proxy re-encryption scheme to achieve cloud-enabled user revocation. However, these previous schemes focused on how to revoke a specific user from the system rather than on updating of the attribute-based access policy in the ciphertext.…”

Section: Accepted Manuscriptmentioning

confidence: 99%

Dynamic access policy in cloud-based personal health record (PHR) systems

Liu

Peng

et al. 2017

Information Sciences

View full text Add to dashboard Cite

With the development of cloud computing, an increasing number of users are using cloud-based personal health record (PHR) systems. The PHR is closely tied to patient privacy, and thus existing studies suggest encrypting PHRs before outsourcing. Comparison-based encryption (CBE) was the first to implement time comparison in an attribute-based access policy by means of the forward and backward derivation functions. However, CBE cannot be directly applied to cloud-based PHR environments for the following reasons: First, the cost of encryption grows linearly with the number of attributes in the access policy. Second, policy updating incurs high communication and computation costs for the data owner. To efficiently implement a dynamic access policy for PHRs in clouds, we first propose a hierarchical comparisonbased encryption (HCBE) scheme that incorporates an attribute hierarchy into CBE. The HCBE scheme encrypts a ciphertext with a small number of generalized attributes at a higher level rather than many specific attributes at a lower level, greatly improving the encryption performance. Using the HCBE scheme as a foundation, we then develop a dynamic policy updating (DPU) scheme by utilizing the proxy re-encryption (PRE) technique. The DPU scheme can avoid the transmission of ciphertexts and minimize the computation overhead on the data owner by delegating the policy updating operations to the cloud. Extensive experiments have been conducted using

show abstract

Section: Accepted Manuscriptmentioning

confidence: 99%

Dynamic access policy in cloud-based personal health record (PHR) systems

Liu

Peng

et al. 2017

Information Sciences

View full text Add to dashboard Cite

show abstract

“…Access Control allows one application to trust the identity of another application [29]. While a robust authentication technique is a compulsory requirement for any cloud project, access control cannot secure data at rest and in transit [30,31], and it is not satisfactory enough to achieve privacy for PHRs [32]. Encryption methods are definitely a better choice for protecting data at rest, as well as the choice for protecting data in transit [30].…”

Section: Related Workmentioning

confidence: 99%

Security and privacy preserving approaches in the eHealth clouds with disaster recovery plan

Sahi

Lai

2016

Computers in Biology and Medicine

View full text Add to dashboard Cite

“…To achieve finegrained data sharing in a cloud environment, one could deploy schemes such as ciphertext-policy attribute-based conditional proxy re-encryption [26] and online/offline attribute-based proxy http://dx.doi.org/10.1016/j.future.2016.04.017 0167-739X/ re-encryption [18]. In this special issue, Canard and Devigne [4] demonstrate how existing proxy re-encryption schemes can be modified in order for users to dynamically manage a tree structure for their shared document.…”

Section: Data Sharingmentioning

confidence: 99%