Accountable Ciphertext-Policy Attribute-Based Encryption Scheme Supporting Public Verifiability and Nonrepudiation

Yu, Gang; Cao, Zhenfu; Zeng, Guang; Han, Weili

doi:10.1007/978-3-319-47422-9_1

Cited by 15 publications

(14 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is a fundamental problem with CP-ABE. To solve this, as shown in Table 1 , CP-ABE schemes that provide traceability to prevent key abuse have been proposed [ 5 , 6 , 7 , 8 , 9 , 10 ]. However, CP-ABE schemes that provide traceability can invade user privacy by exposing the users’ identifier values to the AA when the keys are issued, and thereby the anonymity of the users is reduced.…”

Section: Related Workmentioning

confidence: 99%

“…Table shows CP-ABE methods that deal with key security as well as other security requirements for CP-ABE methods, such as traceability for tracking key abuse, constant size output of ciphertext, and the application of outsourcing techniques for efficiency of operation. Among the methods to provide traceability, the Liu scheme [ 6 ], Yu scheme [ 8 ], and Li scheme [ 5 ] are

contain the user value (signature, ID) value. AA is the identity table that manages the user’s information, and the issued key suggests a scheme.…”

Section: Related Workmentioning

confidence: 99%

“…This is a situation that can occur due to the use of CP-ABE. To solve this problem, when the attribute authority, which verifies the attribute and issues the key, issues the key for each user, it records the user’s ID value or user signature value in the key parameter [ 6 , 7 , 8 , 9 , 10 , 11 ]. If the key is misused after the key is delegated or delivered to someone, research is being conducted to verify the identity by tracking the user who initially issued the key with the user ID value or user signature value included in the key parameter.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Study on CP-ABE-Based Medical Data Sharing System with Key Abuse Prevention and Verifiable Outsourcing in the IoMT Environment

Hwang¹,

Lee²

2020

Sensors

View full text Add to dashboard Cite

Recent developments in cloud computing allow data to be securely shared between users. This can be used to improve the quality of life of patients and medical staff in the Internet of Medical Things (IoMT) environment. However, in the IoMT cloud environment, there are various security threats to the patient’s medical data. As a result, security features such as encryption of collected data and access control by legitimate users are essential. Many studies have been conducted on access control techniques using ciphertext-policy attribute-based encryption (CP-ABE), a form of attribute-based encryption, among various security technologies and studies are underway to apply them to the medical field. However, several problems persist. First, as the secret key does not identify the user, the user may maliciously distribute the secret key and such users cannot be tracked. Second, Attribute-Based Encryption (ABE) increases the size of the ciphertext depending on the number of attributes specified. This wastes cloud storage, and computational times are high when users decrypt. Such users must employ outsourcing servers. Third, a verification process is needed to prove that the results computed on the outsourcing server are properly computed. This paper focuses on the IoMT environment for a study of a CP-ABE-based medical data sharing system with key abuse prevention and verifiable outsourcing in a cloud environment. The proposed scheme can protect the privacy of user data stored in a cloud environment in the IoMT field, and if there is a problem with the secret key delegated by the user, it can trace a user who first delegated the key. This can prevent the key abuse problem. In addition, this scheme reduces the user’s burden when decoding ciphertext and calculates accurate results through a server that supports constant-sized ciphertext output and verifiable outsourcing technology. The goal of this paper is to propose a system that enables patients and medical staff to share medical data safely and efficiently in an IoMT environment.

show abstract

Section: Related Workmentioning

confidence: 99%

contain the user value (signature, ID) value. AA is the identity table that manages the user’s information, and the issued key suggests a scheme.…”

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Study on CP-ABE-Based Medical Data Sharing System with Key Abuse Prevention and Verifiable Outsourcing in the IoMT Environment

Hwang¹,

Lee²

2020

Sensors

View full text Add to dashboard Cite

show abstract

“…Based on the scheme [31], Ning et al [17] exploited the whitebox traceability for CP-ABE in large universe settings. From then on, many traceable ABE constructions are proposed in [6,32,33]. However, in these traceable schemes [6,16,17,30,32,33], the decryption overhead grows with the scale of attribute set adopted in decryption.…”

Section: Related Work Abe Was First Introduced Inmentioning

confidence: 99%

“…From then on, many traceable ABE constructions are proposed in [6,32,33]. However, in these traceable schemes [6,16,17,30,32,33], the decryption overhead grows with the scale of attribute set adopted in decryption. Table 1 compares the characteristics between some related works and our VTCP-ABE.…”

Section: Related Work Abe Was First Introduced Inmentioning

confidence: 99%

Traceable Ciphertext‐Policy Attribute‐Based Encryption with Verifiable Outsourced Decryption in eHealth Cloud

Zhu

Ying

et al. 2018

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

In cloud-assisted electronic health care (eHealth) systems, a patient can enforce access control on his/her personal health information (PHI) in a cryptographic way by employing ciphertext-policy attribute-based encryption (CP-ABE) mechanism. There are two features worthy of consideration in real eHealth applications. On the one hand, although the outsourced decryption technique can significantly reduce the decryption cost of a physician, the correctness of the returned result should be guaranteed. On the other hand, the malicious physician who leaks the private key intentionally should be caught. Existing systems mostly aim to provide only one of the above properties. In this work, we present a verifiable and traceable CP-ABE scheme (VTCP-ABE) in eHealth cloud, which simultaneously supports the properties of verifiable outsourced decryption and white-box traceability without compromising the physician’s identity privacy. An authorized physician can obtain an ElGamal-type partial decrypted ciphertext (PDC) element of original ciphertext from the eHealth cloud decryption server (CDS) and then verify the correctness of returned PDC. Moreover, the illegal behaviour of malicious physician can be precisely (white-box) traced. We further exploit a delegation method to help the resource-limited physician authorize someone else to interact with the CDS. The formal security proof and extensive simulations illustrate that our VTCP-ABE scheme is secure, efficient, and practical.

show abstract

Efficient Attribute-Based Encryption with Blackbox Traceability

Yang

et al. 2018

Provable Security

View full text Add to dashboard Cite

Accountable Ciphertext-Policy Attribute-Based Encryption Scheme Supporting Public Verifiability and Nonrepudiation

Cited by 15 publications

References 24 publications

A Study on CP-ABE-Based Medical Data Sharing System with Key Abuse Prevention and Verifiable Outsourcing in the IoMT Environment

A Study on CP-ABE-Based Medical Data Sharing System with Key Abuse Prevention and Verifiable Outsourcing in the IoMT Environment

Traceable Ciphertext‐Policy Attribute‐Based Encryption with Verifiable Outsourced Decryption in eHealth Cloud

Efficient Attribute-Based Encryption with Blackbox Traceability

Contact Info

Product

Resources

About