Pairing Free Certified Common Asymmetric Group Key Agreement Protocol for Data Sharing Among Users with Different Access Rights

Abstract

Research into a pandemic like Covid-19 needs a tremendous input of patient histories and characteristics. Patients and doctors are only willing to share these sensitive data when they are ensured that the data are solely used by legitimate research laboratories. Asymmetric group key agreement (AGKA) protocols provide a good cryptographic primitive to address this requirement. The AGKA protocols proposed in literature provide users with a common public group key and a different decryption key by relying on compute intensive pairing operations. In this paper, we propose a new primitive, called the Common AGKA (CAGKA) protocol in which the users share the same private-public key pair, resulting in a more efficient solution. By combining Elliptic Curve Qu Vanstone certificates and a recently proposed Canetti-Krawczyk (CK) secure mutual authentication protocol, a one round self-certified pairing free CAGKA protocol is defined, which can be also globally certified after one additional round.

A group key exchange and secure data sharing based on privacy protection for federated learning in edge‐cloud collaborative computing environment

“…New schemes are proposed in the literature [16][17][18][19][20][21][22][23][24] for the authentication part of the data sharing process. Xuan et al 16 proposed an optimized scheme for cross-domain authentication between heterogeneous IoT applications using certificate-less public key cryptography and smart contract technology.…”

“…The capability of cross‐domain authentication is improved. Braeken 17 proposed a scheme to implement terminal self‐certified. In the scheme, users share the same private public key pair and use the Canetti–Krawczyk (CK) secure mutual authentication protocol.…”

Certificateless Group to Many Broadcast Proxy Reencryptions for Data Sharing towards Multiple Parties in IoTs

“…Main Algorithm. The scheme was designed based on Kim et al [51] and Braeken [52]. This scheme is mainly composed of five phases, each of which comprises a Setup Phase, Key Generation Phase, Group Agreement Phase, Data Storage Phase, and Data Broadcast Phase as shown in Figure 5.…”