Tree-Based Cryptographic Access Control

Alderman, James; Farley, Naomi; Crampton, Jason

doi:10.1007/978-3-319-66402-6_5

Cited by 10 publications

(5 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this way, only the authorised Subs can recover the content of the publications (R1: ). Note that other well-established techniques that can ensure fine-grained access control, such as [35] and [36], could also be utilised to achieve R1 in our system. Tags and interests are encrypted using an SE scheme.…”

Section: Our Approachmentioning

confidence: 99%

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

The Publish and Subscribe (pub/sub) system is an established paradigm to disseminate the data from publishers to subscribers in a loosely coupled manner using a network of dedicated brokers. However, sensitive data could be exposed to malicious entities if brokers get compromised or hacked; or even worse, if brokers themselves are curious to learn about the data. A viable mechanism to protect sensitive publications and subscriptions is to encrypt the data before it is disseminated through the brokers. State-of-the-art approaches allow brokers to perform encrypted matching without revealing publications and subscriptions. However, if malicious brokers collude with malicious subscribers or publishers, they can learn the interests of innocent subscribers, even when the interests are encrypted. In this article, we present a pub/sub system that ensures confidentiality of publications and subscriptions in the presence of untrusted brokers. Furthermore, our solution resists collusion attacks between untrusted brokers and malicious subscribers (or publishers). Finally, we have implemented a prototype of our solution to show its feasibility and efficiency.

show abstract

Section: Our Approachmentioning

confidence: 99%

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

show abstract

“…As a fundamental security service, the authorization mechanism becomes increasingly important in modern smart system. The hierarchical key assignment techniques [43,44,45,46] were presented, which can provide fine-grained authentication and access control for the user. In order to mitigate the potential vulnerabilities and protect the user’s privacy, Tang et al [24] integrated the fine-grained authorization mechanism into PKE-ET.…”

Section: Related Workmentioning

confidence: 99%

Identity-Based Encryption with Filtered Equality Test for Smart City Applications

Yang

Wang

2019

Sensors

View full text Add to dashboard Cite

With the growth of the urban population, the rapid development of smart cities has become the focus of urban regional development. Smart medical care is an indispensable part of smart city construction, which promotes the development of the medical industry. However, the security of data and timely service are the current problems faced by intelligent medical systems. Based on the public key encryption with filtered equality test and identity-based cryptography, an identity-based encryption with the filtered equality test (IBE-FET) is proposed for smart healthcare, in which a data receiver can use the private key and the message set to generate a warrant and send it to the cloud server. A cloud server can verify the equality between ciphertexts without decryption and check whether the encrypted message belongs to the same message set. Furthermore, the security analysis shows that the proposed scheme satisfies one-way security against the chosen identity and ciphertext attack in the random oracle model under the computational bilinear Diffie-Hellman assumption. The performance comparison shows that the scheme is feasible and practical in real life.

show abstract

“…According to the security and privacy of outsourced data, a large number of users must create, share, update and delete it dynamically, Castiglione [ 27 ] provided some new results on Akl and Taylor’s scheme [ 24 ], for flexible and fine-grained access control to support dynamic updates in cloud environments. Alderman [ 28 ] designed a space-efficient KAS based on a binary tree, which eliminates public information as well as imposes logarithmic bounds on the number of derivatives required. This scheme performs better than the existing scheme, reduces the storage requirement of user equipment and logarithmically limits the derivation cost.…”

Section: Related Workmentioning

confidence: 99%

Efficient Privacy-Preserving Access Control Scheme in Electronic Health Records System

Yang

Zhang

2018

Sensors

View full text Add to dashboard Cite

The sharing of electronic health records (EHR) in cloud servers is an increasingly important development that can improve the efficiency of medical systems. However, there are several concerns focusing on the issues of security and privacy in EHR system. The EHR data contains the EHR owner’s sensitive personal information, if these data are obtained by a malicious user, it will not only cause the leakage of patient’s privacy, but also affect the doctor’s diagnosis. It is a very challenging problem for the EHR owner fully controls over own EHR data as well as preserves the privacy of himself. In this paper, we propose a new privacy-preserving access control (PPAC) scheme for EHR. To achieve fine-grained access control of the EHR data, we utilize the attribute-based signcryption (ABSC) mechanism to signcrypt data based on the access policy for the linear secret sharing schemes. Employing the cuckoo filter to hide the access policy, it could protect the EHR owner’s privacy information. In addition, the security analysis shows that the proposed scheme is provably secure under the decisional bilinear Diffie-Hellman exponent assumption and the computational Diffie-Hellman exponent assumption in the standard model. Furthermore, the performance analysis indicates that the proposed scheme achieves low costs of communication and computation compared with the related schemes, meanwhile preserves the EHR owner’s privacy. Therefore, the proposed scheme is better suited to EHR system.

show abstract

Tree-Based Cryptographic Access Control

Cited by 10 publications

References 22 publications

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Identity-Based Encryption with Filtered Equality Test for Smart City Applications

Efficient Privacy-Preserving Access Control Scheme in Electronic Health Records System

Contact Info

Product

Resources

About