Secure personal data sharing in cloud computing using 
attribute-based broadcast encryption

doi:10.1016/S1005-8885(14)60344-7

中国邮电高校学报(英文) ›› 2014, Vol. 21 ›› Issue (6): 45-51.doi: 10.1016/S1005-8885(14)60344-7

• Information Security • 上一篇下一篇

Secure personal data sharing in cloud computing using attribute-based broadcast encryption

傅镜艺,黄勤龙马兆丰杨义先

北京邮电大学信息安全中心

收稿日期:2014-04-29 修回日期:2014-06-24 出版日期:2014-12-31 发布日期:2014-12-31
通讯作者: 傅镜艺 E-mail:fujingyi@bupt.edu.cn
基金资助:
中国国家自然科学基金

Secure personal data sharing in cloud computing using attribute-based broadcast encryption

FU jingyi,

Received:2014-04-29 Revised:2014-06-24 Online:2014-12-31 Published:2014-12-31
Contact: FU jingyi E-mail:fujingyi@bupt.edu.cn
Supported by:
National Natural Science Foundation of China

摘要/Abstract

摘要：

　The ciphertext-policy (CP) attribute-based encryption (ABE) (CP-ABE) emergings as a promising technology for allowing users to conveniently access data in cloud computing. Unfortunately, it suffers from several drawbacks such as decryption overhead, user revocation and privacy preserving. The authors proposed a new efficient and privacy-preserving attribute-based broadcast encryption (BE) (ABBE) named EP-ABBE, that can reduce the decryption computation overhead by partial decryption, and protect user privacy by obfuscating access policy of ciphertext and user’s attributes. Based on EP-ABBE, a secure and flexible personal data sharing scheme in cloud computing was presented, in which the data owner can enjoy the flexibly of encrypting personal data using a specified access policy together with an implicit user index set. With the proposed scheme, efficient user revocation is achieved by dropping revoked user’s index from the user index set, which is with very low computation cost. Moreover, the privacy of user can well be protected in the scheme. The security and performance analysis show that the scheme is secure, efficient and privacy-preserving.

关键词: data sharing, ABBE, ABE, user revocation, partial decryption, privacy preserving

Abstract: 　The ciphertext-policy (CP) attribute-based encryption (ABE) (CP-ABE) emergings as a promising technology for allowing users to conveniently access data in cloud computing. Unfortunately, it suffers from several drawbacks such as decryption overhead, user revocation and privacy preserving. The authors proposed a new efficient and privacy-preserving attribute-based broadcast encryption (BE) (ABBE) named EP-ABBE, that can reduce the decryption computation overhead by partial decryption, and protect user privacy by obfuscating access policy of ciphertext and user’s attributes. Based on EP-ABBE, a secure and flexible personal data sharing scheme in cloud computing was presented, in which the data owner can enjoy the flexibly of encrypting personal data using a specified access policy together with an implicit user index set. With the proposed scheme, efficient user revocation is achieved by dropping revoked user’s index from the user index set, which is with very low computation cost. Moreover, the privacy of user can well be protected in the scheme. The security and performance analysis show that the scheme is secure, efficient and privacy-preserving.

Key words: data sharing, ABBE, ABE, user revocation, partial decryption, privacy preserving

中图分类号:

TP309

FU jingyi. Secure personal data sharing in cloud computing using attribute-based broadcast encryption[J]. Acta Metallurgica Sinica(English letters), 2014, 21(6): 45-51.

参考文献

1. Hur J. Improving security and efficiency in attribute-based data sharing. IEEE Transactions on Knowledge and Data Engineering, 2013, 25(10): 2271-2282

2. Cecile D. Identity-based broadcast encryption with constant size ciphertexts and private keys. Advances in Cryptology:Proceedings of the 13th International Conference on the Theory and Application of Cryptology and Information Security(ASIACRYPT’07), Dec 2-6, 2007, Kuching, Malaysia.LNCS 4833.Berlin,Germany: Springer-Verlag, 2007: 193-215

3. Zhou Z, Huang D. On efficient ciphertext-policy attribute based encryption and broadcast encryption.Proceedings of the 17th ACM Conference on Computer and Communications Security(CCCS’10), Oct 4-8, 2010, Chicago, IL, USA. New York, NY,USA:ACM, 2010: 753-755

4. Goyal V, Pandey O, Sahai A, et al. Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the 13th ACM Conference on Computer and Communications Security (CCCS’06), Oct 30-Nov 3, Alexandria, VA, USA. New York, NY, USA: ACM, 2006: 89-98

5. Hur J, Koo D, Hwang S O, et al. Removing escrow from ciphertext policy attribute-based encryption. Computers and Mathematics with Applications, 2013, 65(9): 1310-1317

6. Liang X, Li X, Lu R, et al. An efficient and secure user revocation scheme in mobile social networks. Proceedings of the IEEE Global Communications Conference (GLOBECOM’11), Dec 5-9, 2011, Houston, TX, USA. Piscataway, NJ, USA: IEEE, 2011: 5p

7. Li M, Yu S, Zheng Y. Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption. IEEE Transactions on Parallel and Distributed Systems, 2013, 24(1): 131-143

8. Hur J, Noh D K. Attribute-based access control with efficient revocation in data outsourcing systems. IEEE Transactions on Parallel and Distributed Systems, 2011, 22(7): 1214-1221

9. Hur J. Attribute-based secure data sharing with hidden policies in smart grid. IEEE Transactions on Parallel and Distributed Systems, 2013, 24(11): 2171-2180

10. Lubicz D, Sirvent T. Attribute-based broadcast encryption scheme made efficient. Advances in Cryptology: Proceedings of the 1st International Conference on Cryptology in Africa (AFRICACRYPT’08), Jun 11-14, 2008

11. Casablanca, Morocco. LNCS 5023. Berlin, Germany: Springer-Verlag, 2008: 325-342

12. Junod P, Karlov A. An efficient public-key attribute-based broadcast encryption scheme allowing arbitrary access policies. Proceedings of the 17th ACM Conference on Computer and Communications Security (CCCS’10), Oct 4-8, 2010, Chicago, IL, USA. New York, NY, USA: ACM, 2010: 13-24

13. Asim M, Ibraimi L, Petkovic M. Ciphertext-policy attribute-based broadcast encryption scheme. Communications and Multimedia Security: Proceedings of the 12th IFIP TC 6/TC 11 International Conference on Communications and Multimedia Security (CMS’11), Oct 19-21, 2011, Ghent, Belgium. LNCS 7025. Berlin, Germany: Springer-Verlag, 2011: 244-246

14. Yang K, Jia X, Ren K, et al. DAC-MACS: Effective data access control for multi-authority cloud storage systems. Proceedings of the 32nd IEEE Conference on Computer Communications (INFOCOM’13), Apr 14-19, 2013, Turin, Italy. Piscataway, NJ, USA: IEEE, 2013: 2895-2903

15. Dong X, Yua J, Luo Y, et al. Achieving an effective, scalable and privacy-preserving data sharing service in cloud computing. Computers and Security, 2014, 42:151-162

[1]	张德栋马兆丰钮心忻 LI Guo-you. Secure and efficient anonymous proxy signature scheme in the random oracle model [J]. Acta Metallurgica Sinica(English letters), 2013, 20(4): 87-92.
[2]	张德栋马兆丰钮心忻 Peng Yong. Anonymous authentication scheme of trusted mobile terminal undermobile Internet[J]. Acta Metallurgica Sinica(English letters), 2013, 20(1): 58-65.
[3]	叶青郑世慧郭洪福杨义先. Generalization of perfect concurrent signatures[J]. Acta Metallurgica Sinica(English letters), 2012, 19(6): 94-104.
[4]	汪定马春光. Cryptanalysis and security enhancement of a remote user authentication scheme using smart cards[J]. Acta Metallurgica Sinica(English letters), 2012, 19(5): 104-114.
[5]	CHEN Shuai, ZHONG Xian-xin. Chaotic block iterating method for pseudo-random sequence generator[J]. Acta Metallurgica Sinica(English letters), 2007, 14(1): 45-48.

Secure personal data sharing in cloud computing using attribute-based broadcast encryption

Secure personal data sharing in cloud computing using attribute-based broadcast encryption

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 5

编辑推荐

Metrics

本文评价