R-PEKS: RBAC Enabled PEKS for Secure Access of Cloud Data

Abstract

In the recent past, few works have been done by combining attribute-based access control with multi-user PEKS, i.e., public key encryption with keyword search. Such attribute enabled searchable encryption is most suitable for applications where the changing of privileges is done once in a while. However, to date, no efficient and secure scheme is available in the literature that is suitable for these applications where changing privileges are done frequently. In this paper our contributions are twofold. Firstly, we propose a new PEKS scheme for string search, which, unlike the previous constructions, is free from bi-linear mapping and is efficient by 97% compared to PEKS for string search proposed by Ray et.al in TrustCom 2017. Secondly, we introduce role based access control (RBAC) to multi-user PEKS, where an arbitrary group of users can search and access the encrypted files depending upon roles. We termed this integrated scheme as R-PEKS. The efficiency of R-PEKS over the PEKS scheme is up to 90%. We provide formal security proofs for the different components of R-PEKS and validate these schemes using a commercial dataset.

Role recommender-RBAC: Optimizing user-role assignments in RBAC

“…To date, there is no user-level role recommendation model for the RBAC system to optimize the UA, dynamically based on the requirements. Further, in R-PEKS [17], it is proposed in a future work that there is need to optimize the UA for better performance and security in dynamic user-permission assignments.…”

Blockchain-Based Access Control and Behavior Regulation System for IoT

“…Simulation experiments showed that this proposed approach could make decisions based on both tasks and roles with a latency of less than 0.25 s, which was commercially viable. In [ 12 ], Rao et al creatively introduced RBAC to multi-user PEKS, where any group of users can connect to the server to search and access encrypted files based on their roles. The proposed approach could protect IoT data resources from both authority and confidentiality perspectives, and experiments showed that role-based PEKS improved efficiency by 90% compared with ordinary multi-user PEKS.…”

“…There are many other forms of data resource security protection techniques in IoT, such as firewall, authentication, encryption, intrusion detection system (IDS), etc. In [ 12 ], Rao et al used PEKS and AES to encrypt the data resources of the device. In [ 17 ], Wang et al used cryptography to ensure the privacy of data on the chain.…”

Searchable Encryption with Access Control in Industrial Internet of Things (IIoT)

“…RBAC is a security mechanism that allows users to access data based on their roles within an organisation [39]. The authors in [40] introduced RBAC to PEKS using free bilinear, as bilinears have high computational cost. The authors used the RBAC mechanism to simplify the frequent user's permission assignment within a large organisation.…”