Combinatorial repairability for threshold schemes

Stinson, Douglas R.; Wei, Ruizhong

doi:10.1007/s10623-017-0336-6

Cited by 13 publications

(18 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The master secret can be created from some or all of the SSs [36]. In this scheme, t specifies the minimum number of keys/secrets that allow reconfiguring MS [37,38]. This scheme consists of two phases: Generation and Reconstruction.…”

Section: Overview Of Security and Privacy Techniques In Ehr Systemsmentioning

confidence: 99%

PAX: Using Pseudonymization and Anonymization to Protect Patients’ Identities and Data in the Healthcare System

Al-Zubaidie

Zhang

2019

IJERPH

View full text Add to dashboard Cite

Electronic health record (EHR) systems are extremely useful for managing patients' data and are widely disseminated in the health sector. The main problem with these systems is how to maintain the privacy of sensitive patient information. Due to not fully protecting the records from unauthorised users, EHR systems fail to provide privacy for protected health information. Weak security measures also allow authorised users to exceed their specific privileges to access medical records. Thus, some of the systems are not a trustworthy source and are undesirable for patients and healthcare providers. Therefore, an authorisation system that provides privacy when accessing patients' data is required to address these security issues. Specifically, security and privacy precautions should be raised for specific categories of users, doctor advisors, physician researchers, emergency doctors, and patients' relatives. Presently, these users can break into the electronic systems and even violate patients' privacy because of the privileges granted to them or the inadequate security and privacy mechanisms of these systems. To address the security and privacy problems associated with specific users, we develop the Pseudonymization and Anonymization with the XACML (PAX) modular system, which depends on client and server applications. It provides a security solution to the privacy issues and the problem of safe-access decisions for patients' data in the EHR. The~results of theoretical and experimental security analysis prove that PAX provides security features in preserving the privacy of healthcare users and is safe against known attacks.

show abstract

Section: Overview Of Security and Privacy Techniques In Ehr Systemsmentioning

confidence: 99%

PAX: Using Pseudonymization and Anonymization to Protect Patients’ Identities and Data in the Healthcare System

Al-Zubaidie

Zhang

2019

IJERPH

View full text Add to dashboard Cite

show abstract

“…The paper [8] provides several constructions for combinatorial RTS. Different distribution designs are studied and analyzed according to various metrics.…”

Section: Repairing a Sharementioning

confidence: 99%

“…Stinson and Wei [8] examined several types of BIBDs with λ = 1 for use as distribution designs in combinatorial RTS. They studied the thresholds of these RTS as well as their efficiency with respect to storage, communication complexity and computational complexity.…”

Section: Using Bibds As Distribution Designsmentioning

confidence: 99%

See 1 more Smart Citation

A network reliability approach to the analysis of combinatorial repairable threshold schemes

Kacsmar¹,

Stinson²

2019

Advances in Mathematics of Communications

View full text Add to dashboard Cite

A repairable threshold scheme (which we abbreviate to RTS ) is a (τ, n)-threshold scheme in which a subset of players can "repair" another player's share in the event that their share has been lost or corrupted. This will take place without the participation of the dealer who set up the scheme. The repairing protocol should not compromise the (unconditional) security of the threshold scheme. Combinatorial repairable threshold schemes (or combinatorial RTS ) were recently introduced by Stinson and Wei [8]. In these schemes, "multiple shares" are distributed to each player, as defined by a suitable combinatorial design called the distribution design. In this paper, we study the reliability of these combinatorial repairable threshold schemes in a setting where players may not be available to take part in a repair of a given player's share. Using techniques from network reliability theory, we consider the probability of existence of an available repair set, as well as the expected number of available repair sets, for various types of distribution designs. * D.R. Stinson's Research is supported by NSERC discovery grant RGPIN-03882.Corollary 3.4. A 3-(v, k, 1)-design can be used as a distribution design to produce an RTS with threshold τ if k ≥ τ (τ − 1) + 1.Remark 3.5. In order to obtain τ = 3, we require k ≥ 7 in Corollary 3.4; to obtain τ = 4, we require k ≥ 13, etc. ReliabilityIn our analysis, to compute the reliability metrics for repair sets, we employ the use of cutsets from network reliability theory (see Colbourn [2] for basic results and terminology relating to network reliability). When using BIBDs as distribution designs, we were able to easily compute reliability formulas in Section 2 without the use of this methodology because the sets C j were disjoint. However, it is advantageous to use cutsets to analyze the reliability of the RTS constructed using distribution designs with t ≥ 3.In this section, for brevity, we will conflate the notion of players and blocks and express all our arguments in terms of blocks of the distribution design (X, B).Definition 3.6. A cutset for a block B is a minimal subset of blocks B ′ such that a repair is not possible if all the blocks in B ′ are not available. A cutset fails if every block in the cutset is not available.Lemma 3.7. Let B = {x 1 , . . . , x k } be a block in the distribution design. Then the sets C j , for 1 ≤ j ≤ k, are the cutsets. Example 3.8. Here are the blocks in an 3-(8, 4, 1)-design: A 1 = {1, 2, 3, 4} A 2 = {5, 6, 7, 8} B 1 = {1, 2, 5, 6} B 2 = {1, 2, 7, 8} B 3 = {1, 3, 5, 7} B 4 = {1, 3, 6, 8} B 5 = {1, 4, 5, 8} B 6 = {1, 4, 6, 7} B 7 = {3, 4, 7, 8} B 8 = {3, 4, 5, 6} B 9 = {2, 4, 6, 8} B 10 = {2, 4, 5, 7} B 11 = {2, 3, 6, 7} B 12 = {2, 3, 5, 8} Suppose A 1 wants to repair their share. Then, the relevant cutsets are

show abstract

“…-Secondly, it presents mechanisms for key reshare and share repair in case some of the original shares of the key are lost or compromised. For repairing lost shares, we use a repairable threshold scheme proposed in a recent paper by Stinson and Wei in [8]. -Thirdly, it proposes a secret share generation mechanism for devices with no memory applying fuzzy extractors to behaviometric information captured by the device sensors, improving the usability of the authentication protocol.…”

Section: Introductionmentioning

confidence: 99%

Collaborative Authentication Using Threshold Cryptography

Abidin

Aly

Mustafa

2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

We propose a collaborative authentication protocol where multiple user devices (e.g., a smartphone, a smartwatch and a wristband) collaborate to authenticate the user to a third party service provider. Our protocol uses a threshold signature scheme as the main building block. The use of threshold signatures minimises the security threats in that the user devices only store shares of the signing key (i.e., the private key) and the private key is never reconstructed. For user devices that do not have secure storage capability (e.g., some wearables), we propose to use fuzzy extractors to generate their secret shares using behaviometric information when needed, so that there is no need for them to store any secret material. We discuss how to reshare the private key without reconstructing it in case a new device is added and how to repair shares that are lost due to device loss or damage. Our implementation results demonstrate the feasibility of the protocol.

show abstract

Combinatorial repairability for threshold schemes

Cited by 13 publications

References 8 publications

PAX: Using Pseudonymization and Anonymization to Protect Patients’ Identities and Data in the Healthcare System

PAX: Using Pseudonymization and Anonymization to Protect Patients’ Identities and Data in the Healthcare System

A network reliability approach to the analysis of combinatorial repairable threshold schemes

Collaborative Authentication Using Threshold Cryptography

Contact Info

Product

Resources

About