Dynamic Keys Based Sensitive Information System

Abstract

Protecting sensitive information systems from security threats such as unauthorised access, information eavesdropping and information interfering, is significant. Most of the natural approaches employ strong authentication or cryptography systems to protect critical data. But those approaches do not stress on the potential amount of risks associated with sensitive information, especially the vulnerability from compromising of long term cryptographic keys and the lack of fine gained access control. Therefore, in this paper, a dynamic key theory based secure sensitive information system is proposed, which integrates dynamic keys with raw data to protect sensitive information; and the system also uses the keys to secure communication and enhance access control. A formal analysis is provided to verify the security of the proposed work. It shows that the proposed system guarantees critical information data security and access control flexibility. In addition, by using two sets of dynamic keys, fraud detection and prevention is achieved in the proposed system.

The Design and Implementation of a Sensitive Information System

“…This system extends dynamic key generation techniques [1] into multilevel group management system to enhance the security and also rekeying complexity simultaneously. Our future work will focus on the extensive file encryption, operation performance of ECC in SIS.…”

“…Information exchanges between users in same or different subgroup will be imposed with extra users' individual keys (k 0ijn , i,j,n = 0,1,2,…) besides subgroup management. Following is the details of this mechanism, in which techniques from [1] about dynamic key in SIS is used. sg recovers I .…”

“…To reduce storage of files in system, files are shared by authorized users. To achieve files being accessed inside or outside of a group, and among different users, dynamic key technique [1] is going to be applied and extended into our design as Dynamic Key Based SIS [1] shows its basic algorithm currently without file access among groups and users in different groups.…”

“…Dynamic Keys Based SIS [1] is designed to encrypt raw data and communicate among users inside system using one time dynamic data keys and dynamic communication keys respectively. The purpose is to enhance security by reencrypting data after being accessed, and update communication keys after being used as well.…”

“…Those IDs are considered as user's seeds used for DKG. First dynamic data key (DDK) and dynamic communication key (DCK) are generated by applying one-way hash function on the seeds [1] seperatly. Next dynamic key is generated based on the seed concatenated with previous dynamic key using oneway hash function again.…”