Self-contained Data Protection Scheme Based on CP-ABE

Liu, Bo; Xu, Ran; Duan, Yawei

doi:10.1007/978-3-662-44788-8_18

Cited by 1 publication

(5 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Lang et al [20] presented an extended CP-ABE scheme (ECP-ABE) to achieve self-contained data protection. This scheme tries to improve the expressiveness of traditional CP-ABE access structures to enable it to express any ABAC policy.…”

Section: B Sotamentioning

confidence: 99%

“…The authors describe an extension to RBAC, called data-centric RBAC (DC-RBAC), which allows for access control policies to be bounded to the data it protects. Furthermore, the authors integrate the proposed DC-RBAC with the ECP-ABE scheme proposed in [20]. ECP-ABE is extended to support role assignment and inheritance.…”

Section: B Sotamentioning

confidence: 99%

“…The most important technical challenge is how to translate ABAC policies into ABE access structures. Work has been done to integrate role hierarchy into the cryptographic access structures for ABE [18], [19], [20], [21], [22]. Furthermore, there has been work on hierarchical-ABE to efficiently enhance the expressiveness of ABE access structures.…”

Section: E Identified Research Gapsmentioning

confidence: 99%

“…Furthermore, there has been work on hierarchical-ABE to efficiently enhance the expressiveness of ABE access structures. Complex ABE access structure models exist that can express and enforce hierarchical, conditional, and logical policies common in ABAC policies [20], [21]. However, the issue then lies in how complex they are to create and manage, making it unfeasible for data owners to administer.…”

Section: E Identified Research Gapsmentioning

confidence: 99%

“…However, the combination of ABE and ABAC, where the latter is used without ABE in trusted domains, needs further investigation. ABE-enabled access control models have, however, been studied [18], [19], [20], [21], [22].…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Attribute-Based Approaches for Secure Data Sharing in Industrial Contexts

2023

View full text Add to dashboard Cite

The sharing of data is becoming increasingly important for the process and manufacturing industries that are using data-driven models and advanced analysis to assess production performance and make predictions, e.g., on wear and tear. In such environments, access to data needs to be accurately controlled to prevent leakage to unauthorized users while providing easy to manage policies. Data should further be shared with users outside trusted domains using encryption. Finally, means for revoking access to data are needed. This paper provides a survey on attribute-based approaches for access control to data, focusing on policy management and enforcement. We aim to identify key properties provided by attribute-based access control (ABAC) and attribute-based encryption (ABE) that can be combined and used to meet the abovementioned needs. We describe such possible combinations in the context of a proposed architecture for secure data sharing. The paper concludes by identifying knowledge gaps to provide direction to future research on attribute-based approaches for secure data sharing in industrial contexts.

show abstract

Section: B Sotamentioning

confidence: 99%

Section: B Sotamentioning

confidence: 99%