Fully Secure Ciphertext-Policy Attribute Based Encryption with Security Mediator

Chen, Yuechen; Jiang, Zoe L.; Yiu, Siu-Ming; Liu, Joseph K.; Au, Man Ho; Wang, Xuan

doi:10.1007/978-3-319-21966-0_20

Cited by 13 publications

(7 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We regard this as the third key benefit of our proposal-the decryption capability split mechanism in our proposal allows the delegatee to maintain the secrecy of his/her secret, without the need to reveal it to the entity performing the decryption split. We remark that the method for delegating the workload of ABE decryption in [40,41] could also be applied to realize cloud-enabled user revocation, but this will result in decryption key split.…”

Section: Benefitsmentioning

confidence: 99%

Cloud based data sharing with fine-grained proxy re-encryption

Yang

Zhu

et al. 2016

Pervasive and Mobile Computing

View full text Add to dashboard Cite

a b s t r a c tConditional proxy re-encryption (CPRE) enables fine-grained delegation of decryption rights, and has many real-world applications. In this paper, we present a ciphertext-policy attribute based CPRE scheme, together with a formalization of the primitive and its security analysis. We demonstrate the utility of the scheme in a cloud deployment, which achieves fine-grained data sharing. This application implements cloud server-enabled user revocation, offering an alternative yet more efficient solution to the user revocation problem in the context of fine-grained encryption of cloud data. High user-side efficiency is another prominent feature of the application, which makes it possible for users to use resource constrained devices, e.g., mobile phones, to access cloud data. Our evaluations show promising results on the performance of the proposed scheme.

show abstract

Section: Benefitsmentioning

confidence: 99%

Cloud based data sharing with fine-grained proxy re-encryption

Yang

Zhu

et al. 2016

Pervasive and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…If an attribute of the system is removed, then the latest attribute will be stopped, when all users' keys are updated, the relevant attributes are not released. However, the encryption party needs to negotiate with the agency in the key update phase, users interacts with the agency online, the attribute cannot be revoked before the expiration time [32].…”

Section: B Revocation Mechanismmentioning

confidence: 99%

Privacy Protection and Data Security in Cloud Computing: A Survey, Challenges, and Solutions

Sun

2019

IEEE Access

View full text Add to dashboard Cite

Privacy and security are the most important issues to the popularity of cloud computing service. In recent years, there are many research schemes of cloud computing privacy protection based on access control, attribute-based encryption (ABE), trust and reputation, but they are scattered and lack unified logic. In this paper, we systematically review and analyze relevant research achievements. First, we discuss the architecture, concepts and several shortcomings of cloud computing, and propose a framework of privacy protection; second, we discuss and analyze basic ABE, KP-ABE (key policy attribute-based encryption), CP-ABE (ciphertext policy attribute-based encryption), access structure, revocation mechanism, multiauthority, fine-grained, trace mechanism, proxy re-encryption(PRE), hierarchical encryption, searchable encryption(SE), trust, reputation, extension of tradition access control and hierarchical key; third, we propose the research challenge and future direction of the privacy protection in the cloud computing; finally, we point out corresponding privacy protection laws to make up for the technical deficiencies. INDEX TERMS Cloud computing, privacy, access control, attribute-based encryption, trust.

show abstract

“…Other than dealing with authenticated access on encrypted information in cloud storage service [13][14][15][16][17][18], ABE can likewise be utilized for get to control to distributed computing administration, correspondingly as an encryption plan can be utilized for verification reason: The cloud server may encode an irregular message utilizing the get to strategy and request that the client unscramble. On the off chance that the client can effectively unscramble the ciphertext (which implies the client's characteristics set fulfills the endorsed strategy), then it is permitted to get to the distributed computing administration.…”

Section: Attribute-based Cryptosystemmentioning

confidence: 99%

“…On the off chance that the SEM does not participate then no exchanges with the general population key are conceivable any more. Recently, an attribute-based version of SEM was proposed in [13].…”

Section: Access Control With Security Devicementioning

confidence: 99%

“…It no longer relies on upon a server or various machines that physically exist, as it is a virtual framework. There are many applications of cloud computing, for example, information sharing [1][2][3][4], information stockpiling [5][6][7][8] medical information administration [9][10][11], therapeutic data framework [12][13][14][15] and so forth. End clients get to cloud-based applications through a web program, thin customer or versatile application while the business programming and client's information are put away on servers at a remote area.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Enhanced Filter based access control for web based cloud

Babu¹

2016

APJCRI

View full text Add to dashboard Cite

In this paper, we present a new fine-grained two-factor authentication (2FA) get to control system for electronic distributed computing administrations. In particular, in our proposed 2FA get to control framework, a property based get to control component is executed with the need of both a client mystery key and a lightweight security gadget. As a client can't get to the system on the off chance that they don't hold both, the component can upgrade the security of the system, particularly in those situations where numerous clients have a similar PC for online cloud administrations. What's more, characteristic based control in the system additionally empowers the cloud server to limit the entrance to those clients with a similar arrangement of traits while safeguarding client protection, i.e., the cloud server just realizes that the client satisfies the required predicate, yet has no clue on the exact identity of the client. At last, we additionally do a reenactment to show the practicability of our proposed 2FA system.

show abstract

Fully Secure Ciphertext-Policy Attribute Based Encryption with Security Mediator

Cited by 13 publications

References 26 publications

Cloud based data sharing with fine-grained proxy re-encryption

Cloud based data sharing with fine-grained proxy re-encryption

Privacy Protection and Data Security in Cloud Computing: A Survey, Challenges, and Solutions

Enhanced Filter based access control for web based cloud

Contact Info

Product

Resources

About