Efficient Multi-Authority Attribute-Based Encryption with Policy Hiding and Updating

Zhang, Jinnan; Qing-hua, Gong; Zheng, Wei; Wang, Xinmin; Yan, Xin; Zhang, Xia

doi:10.1109/iccsnt56096.2022.9972943

Cited by 2 publications

(21 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Compared to [36], our scheme has better storage cost for public parameters, ciphertext and user decryption key. Compared with [26,32,34,35], the storage cost of ciphertext and the user decryption key is approximately equal. It is worth noting that we implement the simulation of the algorithm by deploying the Charm-Crypto cryptographic library based on the Python language development framework in the Ubuntu system.…”

Section: Schemesmentioning

confidence: 99%

“…Finally, we present the results in Table 4. In order to show the computational time cost and the storage cost of our scheme and other schemes, we make a comparison with Zhang et al scheme [32] (ZZLL), Ma et al scheme [26] (MZYS), Xie et al scheme [34] (XRHS), Zhang et al scheme [35] (ZGWW) and Zhang et al scheme [36] (ZZWM). By analyzing the calculation overhead of the online user key generation phase, user decryption phase and the storage overhead of ciphertexts and keys in the system, there is a slight difference between the ZZWM scheme [36] and other schemes.…”

Section: Schemesmentioning

confidence: 99%

“…We choose schemes [ 26 , 32 , 34 , 35 , 36 , 37 ] to compare with our scheme. These schemes are CP-ABE schemes that support the LSSS access structure.…”

Section: Performance Evaluationsmentioning

confidence: 99%

“…However, the schemes [ 26 , 37 ] are not multi-authority. The schemes [ 32 , 34 , 35 , 36 ] are multi-authority, but the scheme [ 32 ] only supports OO KeyGen and OO Encrypt without CRF. The scheme [ 36 ] also only supports OO Encrypt.…”

Section: Performance Evaluationsmentioning

confidence: 99%

“…As shown in Table 3 , we show the storage cost of our scheme and schemes [ 26 , 32 , 34 , 35 , 36 ], respectively, in the public parameters, ciphertext and user decryption key, where

is the number of elements in group

, |

| is the number of elements in group

. Because these schemes are CP-ABE schemes, the size of l is proportional to the size of the ciphertext, and the size of S is proportional to the size of the user decryption key.…”

Section: Performance Evaluationsmentioning

confidence: 99%

See 4 more Smart Citations

Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls for IoT

Bian

et al. 2023

Entropy

View full text Add to dashboard Cite

Devices in the Internet of Things (IoT) usually use cloud storage and cloud computing to save storage and computing cost. Therefore, the efficient realization of one-to-many communication of data on the premise of ensuring the security of cloud storage data is a challenge. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) can not only protect the security of data in the cloud and achieve one-to-many communication but also achieve fine-grained access control for data. However, the single-authority CP-ABE faces the crisis of single point of failure. In order to improve security, the Multi-Authority CP-ABE (MA-CP-ABE) is adopted. Although there are provably-secure MA-CP-ABE schemes, Edward Snowden’s research shows that provably-secure cryptographic schemes are vulnerable to backdoor attacks, resulting in secret disclosure, and thus threatening security. In addition, ABE requires huge computational overhead in key generation, encryption and decryption, which increase with the increase in the number of attributes and the complexity of the access structure, and there are a large number of resource-constrained devices in the IoT. To mitigate this issue, we construct the Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls (OO-MA-CP-ABE-CRFs) scheme. This scheme not only uses Cryptographic Reverse Firewall (CRF) to resist backdoor attacks but also uses online/offline key generation, online/offline encryption and outsourcing encryption technology to optimize the efficiency of the MA-CP-ABE scheme with reverse firewall, reducing the storage and computing cost of users. Finally, the security of the OO-MA-CP-ABE-CRFs scheme is proved, and the experimental results indicate that the scheme is efficient and practical.

show abstract

Section: Schemesmentioning

confidence: 99%

Section: Schemesmentioning

confidence: 99%

“…We choose schemes [ 26 , 32 , 34 , 35 , 36 , 37 ] to compare with our scheme. These schemes are CP-ABE schemes that support the LSSS access structure.…”

Section: Performance Evaluationsmentioning

confidence: 99%

Section: Performance Evaluationsmentioning

confidence: 99%

“…As shown in Table 3 , we show the storage cost of our scheme and schemes [ 26 , 32 , 34 , 35 , 36 ], respectively, in the public parameters, ciphertext and user decryption key, where

is the number of elements in group

, |

| is the number of elements in group

. Because these schemes are CP-ABE schemes, the size of l is proportional to the size of the ciphertext, and the size of S is proportional to the size of the user decryption key.…”

Section: Performance Evaluationsmentioning

confidence: 99%

See 3 more Smart Citations

Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls for IoT

Bian

et al. 2023

Entropy

View full text Add to dashboard Cite

show abstract

An Access Control Scheme Based on Blockchain and Ciphertext Policy-Attribute Based Encryption

Hu,

Ma,

et al. 2023

Sensors

View full text Add to dashboard Cite

Ciphertext policy–attribute-based encryption (CP-ABE), which provides fine-grained access control and ensures data confidentiality, is widely used in data sharing. However, traditional CP-ABE schemes often choose to outsource data to untrusted third-party cloud service providers for storage or to verify users’ access rights through third parties, which increases the risk of privacy leakage and also suffers from the problem of opaque permission verification. This paper proposes an access control scheme based on blockchain and CP-ABE, which is based on multiple authorization centers and supports policy updating. In addition, blockchain technology’s distributed, decentralized, and tamper-proof features are utilized to solve the trust crisis problem in the data-sharing process. Security analysis and performance evaluation show that the proposed scheme improves the computational efficiency by 18%, 26%, and 68% compared to previous references. The proposed scheme also satisfies the indistinguishability under chosen-plaintext attack (IND-CPA).

show abstract

Efficient Multi-Authority Attribute-Based Encryption with Policy Hiding and Updating

Cited by 2 publications

References 10 publications

Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls for IoT

Online/Offline MA-CP-ABE with Cryptographic Reverse Firewalls for IoT

An Access Control Scheme Based on Blockchain and Ciphertext Policy-Attribute Based Encryption

Contact Info

Product

Resources

About