Unbounded Dynamic Predicate Compositions in ABE from Standard Assumptions

Attrapadung, Nuttapong; Tomida, Junichi

doi:10.1007/978-3-030-64840-4_14

Cited by 18 publications

(16 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the realm of pairing-based ABE, a special subtype of non-monotonicity-which we shall refer to as "labeled non-monotonicity"-was proposed by Okamoto and Takashima [122], and was later further investigated and developed in [22,141]. These works explicitly use the attribute labels-corresponding to our notion of attribute types-in access policies.…”

Section: Supporting Non-monotonicitymentioning

confidence: 99%

“…Labeled non-monotonicity can be used to securely implement access control that supports negations in dynamic practical settings [22,141]. For instance, consider a situation in which a new label is added to a system and used in a negation during encryption.…”

Section: Supporting Non-monotonicitymentioning

confidence: 99%

“…Most obviously, it mitigates the second issue by only requiring that a subset of attributes associated with the same label as the negated attribute is compared. A less obvious reason is that the attribute labels constitute another "layer" of the universe of attributes [22]. For this layer, we do not require non-monotonicity, so we can use both methods to support large-universeness as discussed in Sect.…”

Section: Supporting Non-monotonicitymentioning

confidence: 99%

“…7.6). On the other hand, if we use the polynomial method to map the labels to the group, as is proposed in [22], then decryption requires a linear number of pairing operations per matching attribute. Possibly, a more balanced efficiency can be achieved if Direction 5 is explored.…”

Section: Supporting Non-monotonicitymentioning

confidence: 99%

“…Ideally, a scheme that supports most or all of these properties is used for these applications. Nowadays, pairing-based ABE has reached a level of maturity such that most of the desirable properties can be achieved simultaneously, whilst attaining both strong security guarantees as well as acceptable storage and computational performance [15,22,92,107]. Given these developments, a natural question that arises is:…”

mentioning

confidence: 99%

See 4 more Smart Citations

Systematizing core properties of pairing-based attribute-based encryption to uncover remaining challenges in enforcing access control in practice

Venema

Alpár

Hoepman

2022

Des. Codes Cryptogr.

View full text Add to dashboard Cite

Attribute-based encryption (ABE) cryptographically implements fine-grained access control on data. As such, data can be stored by an entity that is not necessarily trusted to enforce access control, or an entity that is not even trusted to have access to the plaintext data at all. Instead, access control can be externally enforced by a trusted entity. Additionally, some multi-authority variants of ABE—which do not have a central authority—can effectively and securely implement access control in multiple-domain settings. Furthermore, ABE is the only cryptographic approach to fine-grained access control that does not require an online trusted third party during access requests, and thus provides better availability properties. The actual realization of these theoretical advantages in practice depends on whether current state-of-the-art ABE schemes support the necessary core properties. Much progress has been made in the last two decades in pairing-based ABE schemes, owing to their versatility and efficiency. In fact, it is possible to support most core properties under strong security guarantees, while incurring acceptable storage and computational costs. It is therefore a good time to ask ourselves whether pairing-based ABE has reached its full practical potential. To answer this question, we provide a comprehensive systematized overview of various existing pairing-based ABE schemes and their core properties. We also investigate the relationship between these core properties and real-world access control requirements. We show that a few challenges remain, that must be overcome for ABE to reach its full potential as a mechanism to implement efficient and secure access control in practice.

show abstract

Section: Supporting Non-monotonicitymentioning

confidence: 99%

Section: Supporting Non-monotonicitymentioning

confidence: 99%

Section: Supporting Non-monotonicitymentioning

confidence: 99%

Section: Supporting Non-monotonicitymentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations