Using Attribute-Based Access Control to Enable Attribute-Based Messaging

Bobba, Rakesh B.; Fatemieh, Omid; Khan, Fariba; Gunter, Carl A.; Khurana, Himanshu

doi:10.1109/acsac.2006.53

Cited by 45 publications

(19 citation statements)

References 14 publications

(28 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Attribute-based messaging Attribute-Based Messaging, or ABM, (e.g., [5]) provides an example of a quintessential attribute-based system. In an ABM system, messages are addressed not by the identities of the recipients, but by a predicate on users' attributes which the recipients must satisfy.…”

Section: Applicationsmentioning

confidence: 99%

“…[5]) provides an example of a quintessential attributebased system which demands new cryptographic primitives for achieving its natural security goals. In an ABM system, the set of users to whom a message is addressed is not specified by their identities, but by an "attribute-based address": that is, a predicate on the attributes, such that the intended receivers are the users whose attributes satisfy the predicate.…”

Section: G1 Attribute-based Messagingmentioning

confidence: 99%

See 1 more Smart Citation

Attribute-Based Signatures

Maji

Prabhakaran

Rosulek

2011

Topics in Cryptology – CT-RSA 2011

334

314

View full text Add to dashboard Cite

We introduce Attribute-Based Signatures (ABS), a versatile primitive that allows a party to sign a message with fine-grained control over identifying information. In ABS, a signer, who possesses a set of attributes from the authority, can sign a message with a predicate that is satisfied by his attributes. The signature reveals no more than the fact that a single user with some set of attributes satisfying the predicate has attested to the message. In particular, the signature hides the attributes used to satisfy the predicate and any identifying information about the signer (that could link multiple signatures as being from the same signer). Furthermore, users cannot collude to pool their attributes together.We give a general framework for constructing ABS schemes, and then show several practical instantiations based on groups with bilinear pairing operations, under standard assumptions. Further, we give a construction which is secure even against a malicious attribute authority, but the security for this scheme is proven in the generic group model. We describe several practical problems that motivated this work, and how ABS can be used to solve them. Also, we show how our techniques allow us to extend Groth-Sahai NIZK proofs to be simulation-extractable and identity-based with low overhead.

show abstract

Section: Applicationsmentioning

confidence: 99%

Section: G1 Attribute-based Messagingmentioning

confidence: 99%

Attribute-Based Signatures

Maji

Prabhakaran

Rosulek

2011

Topics in Cryptology – CT-RSA 2011

334

314

View full text Add to dashboard Cite

show abstract

“…According to [7], attribute-based messaging is the concept of dynamically specifying the group of receivers of a message in form of an attribute-based description. An attribute-based messaging application is a natural example of a one-to-many communication pattern.…”

Section: Definition Of Attribute-based Messagingmentioning

confidence: 99%

“…Attribute-based messaging is usually implemented by some form of access control mechanism [7], which allows to control the information flow. A user who cannot access the content of a message is supposed not having received it.…”

Section: Implementing Secure Attribute-based Messagingmentioning

confidence: 99%

Securing First Response Coordination with Dynamic Attribute-Based Encryption

Weber

2009

2009 World Congress on Privacy, Security, Trust and the Management of E-Business

View full text Add to dashboard Cite

Every minute saved in emergency management processes can save additional lives of affected victims. Therefore, an effective coordination of the incident reactions of mobile first responders is very important, especially in the face of rapidly changing situations of large scale disasters. However, tactical communication and messaging between the headquarter and mobile first responders, initiated for coordination purposes, has to meet a strong security requirement: it must preserve confidentiality in order to prevent malicious third parties from disrupting the reactions. This paper presents concepts to support the secure coordination of mobile first responders by providing means for secure ubiquitous tactical communication. Our concept harnesses ciphertext-policy attribute-based encryption (CP-ABE) techniques. We extend current CP-ABE proposals by additionally taking into account dynamic factors: our proposed system is able to handle dynamic attributes, like current status of duty and location of mobile first responders, in a secure fashion. A flexible specification of receiver groups of tactical messages is possible, while end-to-end encryption in the messaging process is satisfied.

show abstract

“…Other Approaches X.509 Attribute-Based Messaging (ABM) [12] does not work on the behalf of message recipients. Instead, it focuses on allowing sender to address messages using attributes instead of identities.…”

Section: Introductionmentioning

confidence: 99%

ABUSE: PKI for Real-World Email Trust

Masone

Smith

2010

Public Key Infrastructures, Services and Applications

View full text Add to dashboard Cite

Abstract. Current PKI-based email systems (such as X.509 S/MIME and PGP/ MIME) potentially enable a recipient to determine a name and organizational affiliation of the sender. This information can suffice for a trust decision when the recipient already knows the sender-but how can a recipient decide whether or not trust email from a new correspondent? Current systems are not expressive enough to capture the real ways that trust flows in these sorts of scenarios. To solve this problem, we begin by applying concepts from social science research to a variety of such cases from interesting application domains; primarily, crisis management in the North American power grid. We have examined transcripts of telephone calls made between grid management personnel during the August 2003 North American blackout and extracted several different classes of trust flows from these real-world scenarios. Combining this knowledge with some design patterns from HCISEC, we develop criteria for a system that will enable humans apply these same methods of trust-building in the digital world. We then present the design and prototype of Attribute-Based, Usefully Secure Email (ABUSE)-and present experimental evaluation showing that it solves the problem.

show abstract

Using Attribute-Based Access Control to Enable Attribute-Based Messaging

Cited by 45 publications

References 14 publications

Attribute-Based Signatures

Attribute-Based Signatures

Securing First Response Coordination with Dynamic Attribute-Based Encryption

ABUSE: PKI for Real-World Email Trust

Contact Info

Product

Resources

About