Algebraic Analysis of Object-Based Key Assignment Schemes

Abstract

The confidentiality of information is an important aspect of security. One way to achieve the confidentiality is through restricting access to information to the authorized users only. Access control can be enforced by using encryption. In this case, all the information is encrypted and keys are assigned to users such that each key reveals the authorized part of the information. Key assignment can be classified as key-based or object-based schemes based on the focus of the scheme. Sabri and Khedri [1] present algebraic structures to specify algebraically cryptosystems by capturing the common properties of ciphers, secrets and keys. Also, these structures are used for the analysis of security properties in objectbased key assignment schemes. However, these structures are abstract, and no linkage has been proposed to the existing cryptosystems. In this paper, we extend their work by giving concrete models for their algebraic structures. We give concrete models to Vigenère, transposition ciphers, DES and RSA cryptosystems. Also, we investigate the effects of extra algebraic properties that some cryptosystems may have on the security analysis of object-based schemes.

Algebraic Specification and Analysis of Health Records

“…There can be several models (implementations) that satisfy the properties of the algebraic structures presented above as given in [1,5]. For example, a cipher can be an RSA cryptosystem.…”

“…It is of note that more implementations other than the proposed one do exist. These implementations may have additional properties of encryption, and decryption that could affect the satisfaction of security properties as discussed in [5]. The main contributions of this paper are:…”

Automated Verification Of Role-Based Access Control Policies Constraints Using Prover9

“…Several researchers use Prover9 in their formal analysis. For example, Sabri and Khedri [6,7,8] use Prover9 in verifying security properties at an abstract level in systems that use key assignment schemes. Cunha and Macedo [9] present a framework for unbounded verification of Alloy specifications using the automatic theorem prover Prover9.…”

Generating Test Cases from Role-Based Access Control Policies using Cause-Effect Graph

“…The availability of information ensures that the it is available to users when needed. Several researches are available in the literature related to information security such as the use of encryption to secure data [1], the analysis of information flow [2], and building a secure system [3].…”