Privacy-aware attribute-based PHR sharing with user accountability in cloud computing

Xhafa, Fatos; Feng, Jiqiang; Zhang, Yinghui; Chen, Xiaofeng; Li, Jin

doi:10.1007/s11227-014-1253-3

Cited by 51 publications

(29 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…But they [8][9] also consider the privacy of the GID. Recently, Xhafa et al [10] proposed a privacyaware MA-ABE PHR scheme that incorporates user accountability in cloud computing. In the scheme, the access policy is hidden to protect the patient's privacy.…”

Section: Related Workmentioning

confidence: 99%

“…As shown in Table 3 and Table 4, we compare our scheme with the previous methods [8,10,11,[15][16][17]19] in terms of system function, communication cost and security model. The function includes whether it supports multiple authorities, privacy protection and dynamic policy updating.…”

Section: Performance Analysismentioning

confidence: 99%

“…From Table 3, we can see that our scheme supports the protection of attribute privacy and dynamic policy updating. The schemes in [8,10,11] have privacy protection but they can't support policy updating. In the schemes in [8,12,17], only the privacy of the GID has been considered.…”

Section: Performance Analysismentioning

confidence: 99%

“…Obviously, they can't protect the privacy of attributes. The whole access policy is hidden to protect privacy in the scheme in [10]. The scheme in [11] can protect the privacy of the GID and attributes.…”

Section: Performance Analysismentioning

confidence: 99%

See 3 more Smart Citations

Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR

Yan

Liu

et al. 2019

ComSIS

View full text Add to dashboard Cite

As a new kind of patient-centred health-records model, the personal health record (PHR) system can support the patient in sharing his/her health information online. Attribute-Based Encryption (ABE), as a new public key cryptosystem that guarantees fine-grained access control of outsourced encrypted data, has been used to design the PHR system. Considering that privacy preservation and policy updating are the key problems in PHR, a privacy-preserving multiauthority attribute-based encryption scheme with dynamic policy updating in PHR was proposed. In the scheme, each of the patient's attributes is divided into two parts: attribute name and attribute value. The values of the user's attributes will be hidden to prevent them from being revealed to any third parties. In addition, the Linear Secret-Sharing Scheme (LSSS) access structure and policy-updating algorithms are designed to support all types of policy updating (based on "and", "or", and "not" operations). Finally, the scheme is demonstrated to be secure against chosen-plaintext attack under the standard model. Compared to the existing related schemes, the sizes of the user's secret key and ciphertext are reduced, and the lower computing cost makes it more effective in the PHR system.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Performance Analysismentioning

confidence: 99%

Section: Performance Analysismentioning

confidence: 99%

Section: Performance Analysismentioning

confidence: 99%

See 2 more Smart Citations

Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR

Yan

Liu

et al. 2019

ComSIS

View full text Add to dashboard Cite

show abstract

“…Attribute‐based access control systems based on ABE were proposed in for secure cloud storage. There are also many works proposed to make further improvements on ABE, such as ABE with user accountability and expressive ABE . Although having various attractive features, most of the earlier CP‐ABE schemes only support a single attribute authority, which is not desirable in that users' attributes often are issued by different authorities in practice.…”

Section: Introductionmentioning

confidence: 99%

Online/offline unbounded multi-authority attribute-based encryption for data sharing in mobile cloud computing

Zhang

Zheng

et al. 2016

Security Comm. Networks

Self Cite

View full text Add to dashboard Cite

In order to realize attribute‐based data sharing in cloud computing, multi‐authority attribute‐based encryption (MA‐ABE) is extremely attractive. However, most of the existing MA‐ABE schemes cannot support a fully large attribute universe and are not suitable for resource‐constrained mobile data owners in that the computation cost in secret key generation and encryption is extremely heavy. To tackle the earlier challenges, we propose an online/offline MA‐ABE scheme, which realizes both the online/offline secret key generation and the online/offline encryption while supporting a fully large attribute universe. In the offline phase, one global‐identity authority and multiple attribute authorities do the majority of the work to issue attribute secret keys before knowing users' global identity and attributes. The data owner can perform most of the encryption computation tasks before knowing the actual message and access structure. Furthermore, the online phase can rapidly assemble the final decryption key and ciphertexts when related specifications become known. Particularly, global‐identity authority and attribute authorities need not to cooperate in the whole process. Our online/offline MA‐ABE scheme allows the access policies encoded in linear secret sharing schemes. The formal selective security proof and extensive performance analysis indicate that our scheme is very suitable for data sharing in mobile cloud computing. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

Multi‐authority attribute‐based encryption scheme with constant‐size ciphertexts and user revocation

Zhang

Wang

et al. 2018

Concurrency and Computation

View full text Add to dashboard Cite

Ciphertext-policy attribute-based encryption (CP-ABE) is regarded as one of the most suitable technologies for data access control in cloud storage system. It gives data owners direct and flexible control on access policies. However, there still exists practicality concerns in CP-ABE applications, for example, the key escrow problem, user revocability, and large ciphertext size.Considering these problems, we propose a multi-authority attribute-based encryption scheme with constant-size ciphertexts and user revocation for threshold access policy in this paper.The security proof shows that the proposed scheme is selectively secure under the augmented multi-sequence of exponents decisional Diffie-Hellman assumption, and it also achieves forward security, backward security, and collusion-resistance. KEYWORDSciphertext-policy attribute-based encryption, multi-authority attribute-based encryption, threshold access policy, user revocation INTRODUCTIONAttribute-based encryption (ABE) is considered as a good way to share information securely in cloud system. ABE is first proposed by Sahai and Waters 1 in 2005. Then, the idea was further extended and key-policy attribute-based encryption (KP-ABE) was formally proposed by Goyal et al. 2 In 2007, ciphertext-policy attribute-based encryption was first proposed by Bethencourt et al. 3 ABE scheme is used to share information securely 4 and support fine-grained access control. 5,6 ABE has many applications in social networks and wireless communications. 7-11 ABE can be applied to PHR sharing in cloud computing 12 or some data searching systems. 13,14 There are some other ABE schemes relative to different aspects. Li et al 15 proposed a new secure outsourced ABE system, which supports both secure outsourced key-issuing and decryption. Li et al 16 proposed an efficient ABS with multiple authorities that can be proved with strong signer privacy and unforgeability.In ciphertext-policy attribute-based encryption, ciphertexts are associated with policies, and users' keys are associated with sets of descriptive attributes (the reverse of key-policy attribute-based encryption). CP-ABE 17-21 is regarded as one of the most suitable technologies for data access control in cloud storage system. However, there still exist practicality problems when cipher policy attribute-based encryption is used in cloud system, such as key escrow problem, user revocability, and large ciphertext size.Assumed-trusted authority in the ABE with single authority holds each user's attribute keys and has the power to decrypt every ciphertext, which is known as key escrow problem. 22 Multi-authority attribute-based encryption (MA-ABE) is an effective way to solve key escrow problem. In MA-ABE, many different authorities operate simultaneously, each handing out secret keys for a different set of attributes so that none of authorities can figure out the encrypted message by itself. In 2007, multi-authority attribute-based encryption schemes was first proposed by Chase. 23 Since then, many multi-authority attribute-b...

show abstract

Privacy-aware attribute-based PHR sharing with user accountability in cloud computing

Cited by 51 publications

References 23 publications

Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR

Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR

Online/offline unbounded multi-authority attribute-based encryption for data sharing in mobile cloud computing

Multi‐authority attribute‐based encryption scheme with constant‐size ciphertexts and user revocation

Contact Info

Product

Resources

About