PICADOR: End-to-end encrypted Publish–Subscribe information distribution with proxy re-encryption

Abstract

This article presents PICADOR, a system for end-to-end encrypted Publish-Subscribe information distribution with proxy re-encryption. PICADOR is designed for topic-based Pub/Sub systems and provides end-to-end payload confidentiality. The main novelty of PICADOR is that it provides an information distribution service with end-to-end encryption where publishers and subscribers do not need to establish shared encryption and decryption keys. Multiple publishers post encrypted information to a Pub/Sub broker which uses Proxy Re-Encryption (PRE) to convert this information into a representation that can only be decrypted by approved subscribers. The broker is unable to decrypt the information. To support PICADOR, we design and implement a novel PRE scheme that leverages a general lattice encryption software library. We prototype our system using a scalable Java-based information substrate that supports topic-based Pub/Sub operations. We experimentally evaluate performance and scalability tradeoffs in the context of enterprise and mobile applications. We discuss design tradeoffs and application-specific customizations. ) and information consumers (i.e., subscribers) [1]. This distribution model is useful in environments where information needs to be 5 aggregated from possibly multiple sources and distributed to consumers that have no direct connections with the information producers. Publishers and subscribers do not need to interact with each other directly or share identity information. There are two main types of Pub/Sub systems: topic-based and content-based. This article focuses on topic-based Pub/Sub systems: publish-10 ers post information with metadata topic labels to a Pub/Sub broker, and this broker distributes the published information to subscribers that are registered for specific topics.An example use case that benefits from Pub/Sub systems is in an enterprise medical domain where patients' past medical records need to be shared 15 with emergency care providers. In this scenario an insurance provider can operate a Pub/Sub system to support the distribution of past medical records [2,3]. Another example, in a tactical/mobile military domain, is when multiple military units passing through a geographic region generate imagery or other information. The units may be unable to interact directly [4,5], but there would 20 be clear benefits from sharing information. In this military example, a local Forward Operating Base or an Unmanned Aerial Vehicle flying overhead could maintain a Pub/Sub broker to support information sharing between units.A major challenge for Pub/Sub systems, illustrated by the application domains of these two examples, is confidentiality of information which is dis-25 tributed by the Pub/Sub broker. Existing Pub/Sub systems protect information payloads via encryption that requires either: 1) the publisher and subscriber coordinate to establish the encryption and decryption keys or 2) the Pub/Sub broker decrypts the information payloads from the publishers and then encrypts this information ...

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

“…In [23], Borcea et al propose PICADOR, a secure topicbased pub/sub system based on a proxy-re-encryption scheme. The authors apply a lattice-based proxy re-encryption scheme that allows partial homomorphic operations and ensures the loosely-coupling property of the pub/sub system (R3: ).…”

“…Communication cost. In [8]- [10], [16], [19], [20], [23], brokers receive each publication from Pubs and forward it to the Subs whose subscriptions match the publication' tags. Let m be the number of attributes defined in the publication and n be the number of subscriptions matching the publication.…”

Malicious Entities are in Vain: Preserving Privacy in Publish and Subscribe Systems

“…In [21], Borcea et al propose PICADOR, a secure topicbased pub/sub system based on the use of a proxy-reencryption scheme. The authors apply a lattice-based proxy re-encryption scheme that allows partial homomorphic operations.…”

A Fine-grained Conditional Proxy Broadcast ReEncryption Policy for File Sharing System

“…The re-encrypted ciphertext can be decrypted directly by Bob, while the agent cannot obtain any valuable information. In the actual environment, PRE has a wide range of applications, such as cloud data sharing system [2], distributed file system [3], network backup system [4] and so on. However, in the original PRE scheme, the proxy can arbitrarily convert its encrypted file without Alice's consent, and the conversion permissions are not well controlled.…”