CCA-Secure Revocable Identity-Based Encryption With Ciphertext Evolution in the Cloud

Sun, Yinxia; Susilo, Willy; Zhang, Futai; Fu, Anmin

doi:10.1109/access.2018.2873019

Cited by 14 publications

(26 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They proposed a cloud-assisted, scalable, and revocable identity-based encryption scheme with ciphertext evolution, which can resist collusion attack and CPA, and its ciphertext length is constant. In 2018, Sun et al [23] proposed a CCA secure revocable identity-based encryption scheme with ciphertext evolution in a cloud. The scheme first uses the user's unique identifier as the identity to encrypt data to obtain the first-layer of ciphertext, then uses the identifier combined with the time as the identity to re-encrypt the first-layer ciphertext to obtain the second-layer ciphertext.…”

Section: B Related Workmentioning

confidence: 99%

“…In fact, the firstlayer key corresponding to the user's unique identification remains unchanged, and no real key update is realized. In addition, Wang et al's scheme [22] and Sun et al's scheme [23] utilize identity-based encryption (IBE), not PRE. When the data stored in the cloud need to be accessed by multiple users, different identities are used to encrypt the data and obtain different ciphertexts, which requires numerous storage resources.…”

Section: B Related Workmentioning

confidence: 99%

“…For details, please refer to He et al's attack [21] on Liang et al's scheme [17]. Besides, the schemes [22], [23] do not need to generate the re-encryption key, and there are not collusion…”

Section: Comparison and Analysismentioning

confidence: 99%

“…The t E represents the time of encrypting data to generate the original ciphertext, t U K represents update token generation time, t DK represents delegation token generation time, t CE represents the ciphertext evolution time, s C represents the storage space for one ciphertext copy of data m, and t C represents the time required to upload one copy of ciphertext to the cloud server. In schemes [17], [22], [23], the data owner encrypts the data with different requesters' identities. So the data owner needs to encrypt the data n times and generates n ciphertext copies of the data if there are n visitors (data owner and n − 1 sharers).…”

Section: Comparison and Analysismentioning

confidence: 99%

See 3 more Smart Citations

A Novel Revocable and Identity-Based Conditional Proxy Re-Encryption Scheme With Ciphertext Evolution for Secure Cloud Data Sharing

2021

View full text Add to dashboard Cite

Proxy re-encryption (PRE), with the unique ciphertext transformation ability, enables various ciphertext authorization applications to be implemented efficiently. However, most existing PRE schemes mainly focus on access authorization while ignoring the situation where the key needs to be changed and the ciphertext needs to be evolved, making the scheme's practicability and security inadequate. Moreover, the few schemes that simultaneously combine ciphertext authorization, key update, and ciphertext evolution are not satisfactory in terms of security. For solving this problem, based on Xiong et al.'s scheme, this paper proposes an improved revocable and identity-based conditional proxy re-encryption scheme with ciphertext evolution (RIB-CPRE-CE) for secure and efficient cloud data sharing. The proposed scheme inherits the characteristics of multi-use, constant ciphertext length, fine-grained authorization, collisionresistance security, and chosen ciphertext attack (CCA) security from the original method. Also, it supports updating ciphertext to adapt to the new key after changing the identity (key) or achieves authorization revocation by evolving ciphertext. Two new algorithms, URKeyGen and UpReEnc, have been integrated into the original delegation scheme to support ciphertext evolution. The formal definition, security model, concrete construction, and security analysis of RIB-CPRE-CE have been presented. The comparison and analysis show that the proposed scheme is practical and secure. Although it adds a ciphertext evolution function for supporting key update and delegation revocation, its efficiency and security are not reduced. The proposed scheme can also be used in other access authorization systems that need to change the key or revoke the authorization. It has certain practicability and security.

show abstract

Section: B Related Workmentioning

confidence: 99%

Section: B Related Workmentioning

confidence: 99%

Section: Comparison and Analysismentioning

confidence: 99%

Section: Comparison and Analysismentioning

confidence: 99%

See 2 more Smart Citations

A Novel Revocable and Identity-Based Conditional Proxy Re-Encryption Scheme With Ciphertext Evolution for Secure Cloud Data Sharing

2021

View full text Add to dashboard Cite

show abstract

“…2) Still, previous cipher texts can access by the revoked user to revocation. [9] In cloud storage, the primary issue is privacy concerns and data security. In multi-user setting, based on the homomorphic encryption, that performed the key word search and provable public key encryption.…”

Section: Literature Surveymentioning

confidence: 99%

An Efficient Secure and Flexible Data Sharing in Cloud Computing using Asymmetric Algorithm

Manimaran*,

Somasundaram

2020

IJITEE

View full text Add to dashboard Cite

Cloud Security is a technique of safeguarding applications, infrastructures and data involved in cloud computing. Cloud security uses a set of technologies, policies and controls to protect data and application from unauthorized access. RSA encryption and decryption algorithm is presented here for cloud security. The cloud can access the data only after receiving the user’s encrypted message using RSA algorithm. However, while transmitting the encrypted message more bandwidth is consumed as the message is transmitted over wireless channel. To minimize the bandwidth, the encrypted message is transmitted into a number of encoded bits and the cloud service provider can append the bits and recover the original message. The performance results for RSA algorithm and the RSA algorithm using Fountain Code are simulated. The results show that the energy, end-to-delay are minimized while using Fountain Code RSA algorithm. In addition, the packet loss ratio decrease and the packet delivery ratio increase.

show abstract

An efficient revocable identity‐based encryption with ciphertext evolution in the cloud‐assisted system

Chen

Deng

Ruan

et al. 2023

Concurrency and Computation

View full text Add to dashboard Cite

Identity‐based encryption (IBE) is a public key cryptosystem on purpose to remove the traditional certificate management. How to realize efficient user revocation in the IBE is of great importance when considering its application. The drawback of most existing works is that the revoked user can still access the ciphertext prior to revocation. One possible solution proposed by Sun et al. is to evolve the ciphertext in the cloud. However, it is unfortunate that the master time key in their scheme is kept by the private key generator (PKG), which means it is sustained extra burden. In this article, we present an efficient revocable IBE with ciphertext evolution in the cloud‐assisted system and the ciphertext remains constant size. The cloud server keeps only one secret master time update key sent by the PKG in a private channel, and thus our scheme offers scalability. In the meantime, our detailed analysis demonstrates that our proposed scheme is semantically secure against ciphertext chosen attacks based on the k‐CAA problem and enjoys better efficiency in computation and communication costs compared with previous works.

show abstract

CCA-Secure Revocable Identity-Based Encryption With Ciphertext Evolution in the Cloud

Cited by 14 publications

References 11 publications

A Novel Revocable and Identity-Based Conditional Proxy Re-Encryption Scheme With Ciphertext Evolution for Secure Cloud Data Sharing

A Novel Revocable and Identity-Based Conditional Proxy Re-Encryption Scheme With Ciphertext Evolution for Secure Cloud Data Sharing

An Efficient Secure and Flexible Data Sharing in Cloud Computing using Asymmetric Algorithm

An efficient revocable identity‐based encryption with ciphertext evolution in the cloud‐assisted system

Contact Info

Product

Resources

About