Privacy-Preserving Decentralized Key-Policy Attribute-Based Encryption

Han, Jinguang; Susilo, Willy; Mu, Yi; Yan, Jun

doi:10.1109/tpds.2012.50

Cited by 149 publications

(96 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In subsequent works [8], [12], they focused on policies across multi-ple authorities and the issue of whatexpressions they couldachieve. Up until recently, Sahai and Waters [9] raised aconstruction for realizing KP-ABE for general circuits.…”

Section: Literature Surveymentioning

confidence: 99%

“…There are two complementary forms of attribute-based encryption. One is key-policy attribute-based encryption (KP-ABE) [8], [9], [10], and the other is cipher text-policy attribute-based encryption. In a KP-ABE system, the decision of access policy is made by the key distributor instead of the enciphered, which limits the practicability and usability for the system in practical applicationsthe access policy for general circuits could be regarded as the strongest form of the policy expression that circuits can express any program of fixed running time.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Secured Authorized Data Using Hybrid Encryption in Cloud Computing

Shinde¹

2017

IJERA

View full text Add to dashboard Cite

In today's world to provide a security to a public network like a cloud network is become a toughest task however more likely to reduce the cost at the time of providing security using cryptographic technique to delegate the mask of the decryption task to the cloud servers to reduce the computing cost. As a result, attributebased encryption with delegation emerges. Still, there are caveats and questions remaining in the previous relevant works. For to solution to all problems the cloud servers could tamper or replace the delegated cipher text and respond a forged computing result with malicious intent. They may also cheat the eligible users by responding them that they are ineligible for the purpose of cost saving. Furthermore, during the encryption, the access policies may not be flexible enough as well. Since policy for general circuits enables to achieve the strongest form of access control, a construction for realizing circuit cipher text-policy attribute-based hybrid encryption with verifiable delegation has been considered in our work. In such a system, combined with verifiable computation and encrypt-then-mac mechanism, the data confidentiality, the fine-grained access control and the correctness of the delegated computing results are well guaranteed at the same time. Besides, our scheme achieves security against chosen-plaintext attacks under the k-multilinear Decisional Diffie-Hellman assumption. Moreover, an extensive simulation campaign confirms the feasibility and efficiency of the proposed solution. There are two complementary forms of attribute-based encryption. One is key-policy attribute-based encryption (KP-ABE) [8], [9], [10], and the other is cipher text-policy attribute-based encryption. In a KP-ABE system, the decision of access policy is made by the key distributor instead of the enciphered, which limits the practicability and usability for the system in practical applicationsthe access policy for general circuits could be regarded as the strongest form of the policy expression that circuits can express any program of fixed running time.

show abstract

Section: Literature Surveymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Secured Authorized Data Using Hybrid Encryption in Cloud Computing

Shinde¹

2017

IJERA

View full text Add to dashboard Cite

show abstract

“…During decryption while reducing computation cost the decryption cost is also reduces and by using KP-ABE scheme overcome the restriction of circuits [3] and by using securely outsourcing [4] we introduce key generation service provider(KGSP) and Decryption service provider(DSP) and by using this verifiable delegation model removes multi authority ABE scheme [7] it maintains single authority. i.e., in this data owner obtain privately verified key to verify correctness of data and the VD-CPABE [1] System does not allow to cheat authorised user.…”

Section: IImentioning

confidence: 99%

Hybrid VD-CPABE with Secure Outsourcing

Lakshmi¹

2017

IJRASET

View full text Add to dashboard Cite

In this, for achieving access control to keep the data confidential, the data owner could adopt the Attribute Based Encryption(ABE) to encrypt stored data. In this during delegation the server could tamper or replace the delegated cipher-text and respond a false transformed cipher-text. This cause the server might cheat the authorized user. So, In this we propose a hybrid VD-CPABE (Verifiable Delegation Cipher-text Policy Attribute Based Encryption) Scheme with secure Outsourcing. In this we are using Verifiable delegation model. This model does not support to cheat any authorized user for every data manager maintains a secret key who is having that key that person can gain the data. Otherwise he cannot access the data. Finally it provides security to our data. Keywords : Attribute Based Encryption, Hybrid encryption, Verifiable Delegation Cipher-text policy attribute based encryption. I.INTRODUCTION Security consists of the policies and practices adopted to prevent and study unauthorized access, depart, mid-course correction, or contend of an individual digital assistant became omitted in and network-accessible resources. It involves the authorization of recover to specific in constrict, which is civilized by the administrator.. Users submit or are isolated an ID and code bought on credit or contradictory authenticating recommendation that allows them gain to intuition and programs within their authority. Security lottery covers a divergence of personal digital assistant networks, both public and unreasonable, that are circumlocutory in everyday jobs; conducting transactions and communications bounded by businesses, government agencies and individuals. Network bribe in the thrift is attentive in intelligence in organizations, enterprises, and special types of institutions. It does as its perform explains: It secures the constrict, as with a inaction as protecting and overseeing operations for done. The most common and absolutely done process of protecting a unite resource is by assigning it a unique favour and an indistinguishable password. Security management is different for all kinds of situations. A home or small office may only require basic security meanwhile large businesses may require high-maintenance and current software and hardware to prevent malicious attacks from hacking and spamming. For data storage, it stores a large amount of shared data, which could be accessed by authorized persons. For delegation computation, the servers could calculate the numerous data. As an application move to the server the cipher-text policy attribute based encryption (CP-ABE) [5], [6] and verifiable delegation [1] used to ensure the data confidentiality. Data confidentiality means if the information is stored on a system that information is protected against unauthorised users and it is often a measure of the ability of system to protect its data. There are two forms in attribute based encryption. First one is key policy attribute based encryption(KP-ABE) [6].In this, the access policy decision is made by k...

show abstract

“…In these schemes, an access structure is embedded in the secret keys, while the ciphertext is associated with a set of attributes [30,9,10,14,26,16]. CP-ABE.…”

Section: Attribute-based Encryptionmentioning

confidence: 99%

“…Recently, Han et al [16] proposed a privacy-preserving decentralized KP-ABE (PPDKP-ABE) scheme. In this scheme, multiple authorities can work independently without any cooperation.…”

Section: Multi-authority Attribute-based Encryptionmentioning

confidence: 99%

PPDCP-ABE: Privacy-Preserving Decentralized Ciphertext-Policy Attribute-Based Encryption

Han

Susilo

et al. 2014

Computer Security - ESORICS 2014

Self Cite

View full text Add to dashboard Cite

Cipher-policy attribute-based encryption (CP-ABE) is a more efficient and flexible encryption system as the encryptor can control the access structure when encrypting a message. In this paper, we propose a privacypreserving decentralized CP-ABE (PPDCP-ABE) scheme where the central authority is not required, namely each authority can work independently without the cooperation to initialize the system. Meanwhile, a user can obtain secret keys from multiple authorities without releasing his global identifier (GID) and attributes to them. This is contrasted to the previous privacy-preserving multi-authority ABE (PPMA-ABE) schemes where a user can obtain secret keys from multiple authorities with them knowing his attributes and a central authority is required. However, some sensitive attributes can also release the user's identity information. Hence, contemporary PPMA-ABE schemes cannot fully protect users' privacy as multiple authorities can cooperate to identifier a user by collecting and analyzing his attributes. Therefore, it remains a challenging and important work to construct a PPMA-ABE scheme where the central authority is not required and both the identifiers and the attributes are considered. Abstract. Cipher-policy attribute-based encryption (CP-ABE) is a more efficient and flexible encryption system as the encryptor can control the access structure when encrypting a message. In this paper, we propose a privacy-preserving decentralized CP-ABE (PPDCP-ABE) scheme where the central authority is not required, namely each authority can work independently without the cooperation to initialize the system. Meanwhile, a user can obtain secret keys from multiple authorities without releasing his global identifier (GID) and attributes to them. This is contrasted to the previous privacy-preserving multi-authority ABE (PPMA-ABE) schemes where a user can obtain secret keys from multiple authorities with them knowing his attributes and a central authority is required. However, some sensitive attributes can also release the user's identity information. Hence, contemporary PPMA-ABE schemes cannot fully protect users' privacy as multiple authorities can cooperate to identifier a user by collecting and analyzing his attributes. Therefore, it remains a challenging and important work to construct a PPMA-ABE scheme where the central authority is not required and both the identifiers and the attributes are considered.

show abstract

Privacy-Preserving Decentralized Key-Policy Attribute-Based Encryption

Cited by 149 publications

References 19 publications

Secured Authorized Data Using Hybrid Encryption in Cloud Computing

Secured Authorized Data Using Hybrid Encryption in Cloud Computing

Hybrid VD-CPABE with Secure Outsourcing

PPDCP-ABE: Privacy-Preserving Decentralized Ciphertext-Policy Attribute-Based Encryption

Contact Info

Product

Resources

About