Practical, Provably Secure, and Black-Box Traceable CP-ABE for Cryptographic Cloud Storage

Qiao, Huidong; Ba, Haihe; Zhou, Huaizhe; Wang, Zhiying; Ren, Jiangchun; Hu, Ying

doi:10.3390/sym10100482

Cited by 7 publications

(4 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We note here that monotonicity of decryption ability is not guaranteed in [33]. [34][35] proposed a CP-ABE scheme with anti-collusion black-box traceability. Our work adds white-box traceability to the CP-ABE key delegation and supports any monotonic access structure.…”

Section: Related Workmentioning

confidence: 98%

Fine-Grained and Traceable Key Delegation for Ciphertext-Policy Attribute-Based Encryption

2021

KSII TIIS

View full text Add to dashboard Cite

Permission delegation is an important research issue in access control. It allows a user to delegate some of his permissions to others to reduce his workload, or enables others to complete some tasks on his behalf when he is unavailable to do so. As an ideal solution for controlling read access on outsourced data objects on the cloud, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) has attracted much attention. Some existing CP-ABE schemes handle the read permission delegation through the delegation of the user's private key to others. Still, these schemes lack the further consideration of granularity and traceability of the permission delegation. To this end, this article proposes a flexible and fine-grained CP-ABE key delegation approach that supports white-box traceability. In this approach, the key delegator first examines the relations between the data objects, read permission thereof that he intends to delegate, and the attributes associated with the access policies of these data objects. Then he chooses a minimal attribute set from his attributes according to the principle of least privilege. He constructs the delegation key with the minimal attribute set. Thus, we can achieve the shortest delegation key and minimize the time of key delegation under the premise of guaranteeing the delegator's access control requirement. The Key Generation Center (KGC) then embeds the delegatee's identity into the key to trace the route of the delegation key. Our approach prevents the delegatee from combining his existing key with the new delegation key to access unauthorized data objects. Theoretical analysis and test results show that our approach helps the KGC transfer some of its burdensome key generation tasks to regular users (delegators) to accommodate more users.

show abstract

Section: Related Workmentioning

confidence: 98%

Fine-Grained and Traceable Key Delegation for Ciphertext-Policy Attribute-Based Encryption

2021

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…Most black-box-traceable schemes such as [10,[16][17][18][19]] make use of the tracing algorithm Trace D , while [20][21][22] employ other approaches for tracing. However, these tracing mechanisms in all existing traceable CP-ABE schemes follow a similar assumption that may be unreasonable.…”

Section: How To Frustrate Tracingmentioning

confidence: 99%

Disabling Tracing in Black-Box-Traceable CP-ABE System: Alert Decryption Black Box

Qiao,

Ren,

Wang

et al. 2023

Symmetry

Self Cite

View full text Add to dashboard Cite

In application scenarios such as cloud storage, a symmetric algorithm can be used to encrypt massive data. However, using the symmetric operation and keys in encryption and decryption, it is very difficult to realize an efficient access control system. The asymmetric encryption algorithm ciphertext-policy attribute-based encryption (CP-ABE), as a versatile one-to-many encryption algorithm, is considered an ideal access control tool to solve the user’s distrust of the service provider of cloud storage. However, in a traditional CP-ABE system, the malicious users may deliberately leak their attribute keys to others or build a decryption black box (DB) to provide illegal decryption services for benefits, while no one can determine their identities. To deal with the problems, especially the problem of tracing the DB builder, CP-ABE schemes with black-box traceability have been proposed in the past few years. But in this paper, we point out that for now, the tracing algorithms in all existing schemes actually work on an impractical assumption. That is, whenever a DB receives a decryption request, it always performs the decryption algorithm honestlycorrectly. We argue that if a DB finds the decryption request comes from the tracing algorithm, it may intentionally output incorrect decryption results to counter the tracing. Thus, we present the structural defect of the tracing algorithm applied to all known traceable CP-ABE schemes. We describe the construction of an alert decryption black box (ADB) that is capable of distinguishing a tracing ciphertext from a normal one. We also show how an ADB frustrates the tracing algorithm, and furthermore, malicious users can even apply an ADB to frame innocent users.

show abstract

“…Similar to BE, attribute based encryption (ABE) [5,33,34] can also encrypt a message to a set of users. Therefore, ABE can be used in similar modern applications such as File Sharing systems and Cloud Storage systems.…”

Section: Related Workmentioning

confidence: 99%

Decentralized Broadcast Encryption Schemes with Constant Size Ciphertext and Fast Decryption

2020

View full text Add to dashboard Cite

Broadcast encryption ( BE ) allows a sender to encrypt a message to an arbitrary target set of legitimate users and to prevent non-legitimate users from recovering the broadcast information. BE has numerous practical applications such as satellite geolocation systems, file sharing systems, pay-TV systems, e-Health, social networks, cloud storage systems, etc. This paper presents two new decentralized BE schemes. Decentralization means that there is no single authority responsible for generating secret cryptographic keys for system users. Therefore, the scheme eliminates the concern of having a single point of failure as the central authority could be attacked, become malicious, or become unavailable. Recent attacks have shown that the centralized approach could lead to system malfunctioning or to leaking sensitive information. Another achievement of the proposed BE schemes is their performance characteristics that make them suitable for environments with light-weight clients, such as in Internet-of-Things (IoT) applications. The proposed approach improves the performance over existing decentralized BE schemes by simultaneously achieving constant size ciphertext, constant size secret key and fast decryption.

show abstract

Practical, Provably Secure, and Black-Box Traceable CP-ABE for Cryptographic Cloud Storage

Cited by 7 publications

References 39 publications

Fine-Grained and Traceable Key Delegation for Ciphertext-Policy Attribute-Based Encryption

Fine-Grained and Traceable Key Delegation for Ciphertext-Policy Attribute-Based Encryption

Disabling Tracing in Black-Box-Traceable CP-ABE System: Alert Decryption Black Box

Decentralized Broadcast Encryption Schemes with Constant Size Ciphertext and Fast Decryption

Contact Info

Product

Resources

About