Universally composable issuer‐free adaptive oblivious transfer with access policy

Guleria, Vandana; Dutta, Ratna

doi:10.1002/sec.1285

Cited by 5 publications

(15 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We recall the ideal functionality F IOTAC for issuer-free OTAC proposed by Guleria and Dutta [5,6]. The difference between F IOTAC and the functionality F OTAC described in The latter difference creates a problem.…”

Section: Issuer-free Oblivious Transfer With Access Control In [5 6]mentioning

confidence: 99%

“…In Issuer-Free OTAC, the role of the issuer is performed by the sender. In this paper, we show that the security definition for issuer-free OTAC in [5,6] poses a problem. In a nutshell, the security definition for OTAC with public policies proposed by Camenisch et al [2] allows the issuer to learn the receiver's identity and http://dx.doi.org/10.1016/j.ipl.2017.05.006 0020-0190/© 2017 Elsevier B.V. All rights reserved.…”

Section: Introductionmentioning

confidence: 98%

“…Recently, Guleria and Dutta propose Issuer-Free OTAC with public policies [5,6]. In Issuer-Free OTAC, the role of the issuer is performed by the sender.…”

Section: Introductionmentioning

confidence: 99%

“…the receiver's attributes in order to attest whether the receiver indeed possesses those attributes. In contrast, in the security definition in [5,6], to protect receiver privacy, the sender learns neither the receiver's identity nor the receiver's attributes, and thus is not able to attest whether the receiver possesses the claimed attributes.…”

Section: Introductionmentioning

confidence: 99%

“…This has serious implications on the security of the protocols proposed in [5,6]. In those protocols, the sender always proceeds as if the receiver did possess those attributes without performing any check.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Issuer-free oblivious transfer with access control revisited

Rial

2017

Information Processing Letters

View full text Add to dashboard Cite

Oblivious transfer with access control (OTAC) is an extension of oblivious transfer where each message is associated with an access control policy. A receiver can obtain a message only if her attributes satisfy the access control policy for that message. In most schemes, the receiver's attributes are certified by an issuer. Recently, two Issuer-Free OTAC protocols have been proposed. We show that the security definition for Issuer-Free OTAC fulfilled by those schemes poses a problem. Namely, the sender is not able to attest whether a receiver possesses a claimed attribute. Because of this problem, in both Issuer-Free OTAC protocols, any malicious receiver can obtain any message from the sender, regardless of the access control policy associated with the message. To address this problem, we propose a new security definition for Issuer-Free OTAC. Our definition requires the receiver to prove in zero-knowledge to the sender that her attributes fulfill some predicates. Our definition is suitable for settings with multiple issuers because it allows the design of OTAC protocols where the receiver, when accessing a record, can hide the identity of the issuer that certified her attributes.

show abstract

Section: Issuer-free Oblivious Transfer With Access Control In [5 6]mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 98%

“…Recently, Guleria and Dutta propose Issuer-Free OTAC with public policies [5,6]. In Issuer-Free OTAC, the role of the issuer is performed by the sender.…”

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Issuer-free oblivious transfer with access control revisited

Rial

2017

Information Processing Letters

View full text Add to dashboard Cite

show abstract

Issuer-Free Adaptive Oblivious Transfer with Access Policy

Guleria

Dutta

2015

Information Security and Cryptology - ICISC 2014

Self Cite

View full text Add to dashboard Cite

Privacy is a major concern in designing any cryptographic primitive when frequent transactions are done electronically. During electronic transactions, people reveal their personal data into several servers and believe that this information does not leak too much about them. The adaptive oblivious transfer with hidden access policy (AOT-HAP) takes measure against such privacy issues. The existing AOT-HAP involves a sender and multiple receivers apart from a designated issuer. Security of these schemes rely on the fact that the issuer cannot collude with a set of receivers. Moreover, they loose security when run with multiple protocol instances during concurrent execution. We present the first issuer-free AOT-HAP in universal composable (UC) framework in which the protocol is secure even when composed with each other or with other protocols. A concrete security analysis is given assuming the hardness of q-strong Diffie-Hellman (SDH), decision Linear (DLIN) and decision bilinear Diffie-Hellman (DBDH) problems against malicious adversary in UC model. Moreover, the protocol outperforms the existing similar schemes.

show abstract

Universally Composable Oblivious Database in the Presence of Malicious Adversaries

Zhu¹

2016

Trusted Systems

View full text Add to dashboard Cite

Universally composable issuer‐free adaptive oblivious transfer with access policy

Cited by 5 publications

References 34 publications

Issuer-free oblivious transfer with access control revisited

Issuer-free oblivious transfer with access control revisited

Issuer-Free Adaptive Oblivious Transfer with Access Policy

Universally Composable Oblivious Database in the Presence of Malicious Adversaries

Contact Info

Product

Resources

About