Enhanced Dual-Policy Attribute-Based Encryption for Secure Data Sharing in the Cloud

Wang, Ti; Zhou, Yongbin; Ma, Hui; Zhang, Rui

doi:10.1155/2022/1867584

Cited by 5 publications

(3 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Mendoza-Cardenas et al [17] intended to evaluate the performance of MQTT with CP-ABE to its adoption in an IoT environment. Wang et al [29] developed a Dual-Policy-Attribute-Based Encryption model (DP-ABE) that allows two access control strategies and ensures high security in cloud scenarios. However, it increases the computational cost and overhead in the network.…”

Section: Imdad Et Al [26]mentioning

confidence: 99%

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

2023

Electronics

View full text Add to dashboard Cite

The Internet of Things (IoT) deployment in emerging markets has increased dramatically, making security a prominent issue in IoT communication. Several protocols are available for IoT communication; among them, Message Queuing Telemetry Transport (MQTT) is pervasive in intelligent applications. However, MQTT is designed for resource-constrained IoT devices and, by default, does not have a security scheme, necessitating an additional security scheme to overcome its weaknesses. The security vulnerabilities in MQTT inherently lead to overhead and poor communication performance. Adding a lightweight security framework for MQTT is essential to overcome these problems in a resource-constrained environment. The conventional MQTT security schemes present a single trusted scheme and perform attribute verification and key generation, which tend to be a bottleneck at the server and pave the way for various security attacks. In addition to that, using the same secret key for an extended period and a flawed key revocation system can affect the security of MQTT. To address these issues, we propose an Improved Ciphertext Policy-Attribute-Based Encryption (ICP-ABE) integrated with a lightweight symmetric encryption scheme, PRESENT, to improve the security of MQTT. In this work, the PRESENT algorithm enables the secure sharing of blind keys among clients. We evaluated a previously proposed ICP-ABE scheme from the perspective of energy consumption and communication overhead. Furthermore, we evaluated the efficiency of the scheme using provable security and formal methods. The simulation results showed that the proposed scheme consumes less energy in standard and attack scenarios than the simple PRESENT, Key Schedule Algorithm (KSA)-PRESENT Secure Message Queue Telemetry Transport (SMQTT), and ECC-RSA frameworks, with a topology of 30 nodes. In general, the proposed lightweight security framework for MQTT addresses the vulnerabilities of MQTT and ensures secure communication in a resource-constrained environment, making it a promising solution for IoT applications in emerging markets.

show abstract

Section: Imdad Et Al [26]mentioning

confidence: 99%

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

2023

Electronics

View full text Add to dashboard Cite

show abstract

“…The work done by the authors in [65] focuses on improving the flexibility, efficiency, and security of attribute-based dual policy encryption (DP-ABE) for cloud deployments. DP-ABE enables two access control mechanisms for encrypted data based on subjective and objective attributes.…”

Section: Related Work In Abe and Other Security Schemesmentioning

confidence: 99%

Attribute-Based Encryption Schemes for Next Generation Wireless IoT Networks: A Comprehensive Survey

Shruti

Rani

Sah

et al. 2023

Sensors

View full text Add to dashboard Cite

Most data nowadays are stored in the cloud; therefore, cloud computing and its extension—fog computing—are the most in-demand services at the present time. Cloud and fog computing platforms are largely used by Internet of Things (IoT) applications where various mobile devices, end users, PCs, and smart objects are connected to each other via the internet. IoT applications are common in several application areas, such as healthcare, smart cities, industries, logistics, agriculture, and many more. Due to this, there is an increasing need for new security and privacy techniques, with attribute-based encryption (ABE) being the most effective among them. ABE provides fine-grained access control, enables secure storage of data on unreliable storage, and is flexible enough to be used in different systems. In this paper, we survey ABE schemes, their features, methodologies, benefits/drawbacks, attacks on ABE, and how ABE can be used with IoT and its applications. This survey reviews ABE models suitable for IoT platforms, taking into account the desired features and characteristics. We also discuss various performance indicators used for ABE and how they affect efficiency. Furthermore, some selected schemes are analyzed through simulation to compare their efficiency in terms of different performance indicators. As a result, we find that some schemes simultaneously perform well in one or two performance indicators, whereas none shines in all of them at once. The work will help researchers identify the characteristics of different ABE schemes quickly and recognize whether they are suitable for specific IoT applications. Future work that may be helpful for ABE is also discussed.

show abstract

“…These include privacy and security issues with cloud service providers and security issues that can arise for customers who use these services. It is important to implement appropriate measures to safeguard against potential threats [7] that could involve ensuring the integrity of the cloud provider's infrastructure, implementing data encryption and access controls, and performing regular audits and assessments of security protocols [8].…”

Section: Introductionmentioning

confidence: 99%

Hybrid Security Model for Medical Image Protection in Cloud

Shakor

Surameery

Khlaif

2023

DJES

View full text Add to dashboard Cite

A cloud computing environment provides a cost-effective way for end-users to remotely store and retrieve private data through an internet connection anytime and anywhere. The security of these data cannot always be guaranteed because they can only be accessed by the end-user through a third-party interface, making them vulnerable to potential breaches of authentication and data integrity. This paper presents a secure hybrid approach for a medical image stored in the cloud that prioritizes data security and integrity. The suggested model employs a combination of Elliptic Curve Cryptography (ECC) and Advanced Encryption Standard (AES) algorithms to ensure authentication and data integrity. The results demonstrate its superiority over existing methods making the proposed model compliant with regulations of sensitive data stored in the cloud, such as the Health Insurance Portability and Accountability Act (HIPAA) and General Data Protection Regulation (GDPR) that dictate how personal information must be handled, stored, and processed. By contrast with traditional and other hybrid systems, this paper can conclude that this is one of the best methods to guarantee the security of medical images in the cloud.

show abstract

Enhanced Dual-Policy Attribute-Based Encryption for Secure Data Sharing in the Cloud

Cited by 5 publications

References 38 publications

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

Attribute-Based Encryption Schemes for Next Generation Wireless IoT Networks: A Comprehensive Survey

Hybrid Security Model for Medical Image Protection in Cloud

Contact Info

Product

Resources

About