中国邮电高校学报(英文) ›› 2014, Vol. 21 ›› Issue (1): 86-93.doi: 10.1016/S1005-8885(14)60273-9

• Artificial Intelligence • 上一篇    下一篇

Encrypted data sharing with multi-owner based on digital rights management in online social networks

HUANG Qin-long1,2,3 , FU Jing-yi1,2,3, MA Zhao-feng1,2,3, YANG Yi-xian1,2, NIU Xin-xin1,2   

  1. 1. Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China 2. National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing 100876, China 3. Beijing National Security Science and Technology Co., Ltd, Beijing 100086, China
  • 收稿日期:2013-09-17 修回日期:2013-12-27 出版日期:2014-02-28 发布日期:2014-02-28
  • 通讯作者: 黄勤龙 E-mail:longsec@bupt.edu.cn
  • 基金资助:

    This work was supported by the National Natural Science Foundation of China (60803157, 90812001, 61272519).

Encrypted data sharing with multi-owner based on digital rights management in online social networks

  1. 1. Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China 2. National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing 100876, China 3. Beijing National Security Science and Technology Co., Ltd, Beijing 100086, China
  • Received:2013-09-17 Revised:2013-12-27 Online:2014-02-28 Published:2014-02-28
  • Supported by:

    This work was supported by the National Natural Science Foundation of China (60803157, 90812001, 61272519).

摘要:

The online social networks (OSNs) offer attractive means for social interactions and data sharing, as well as raise a number of security and privacy issues. Although current solutions propose to encrypt data before sharing, the access control of encrypted data has become a challenging task. Moreover, multiple owners may enforce different access policy to the same data because of their different privacy concerns. A digital rights management (DRM) scheme is proposed for encrypted data in OSNs. In order to protect users’ sensitive data, the scheme allows users outsource encrypted data to the OSNs service provider for sharing and customize the access policy of their data based on ciphertext-policy attribute-based encryption. Furthermore, the scheme presents a multiparty access control model based on identity-based broadcast encryption and ciphertext-policy attribute-based proxy re-encryption, which enables multiple owners, such as tagged users who appear in a single data, customize the access policy collaboratively, and also allows the disseminators update the access policy if their attributes satisfy the existing access policy. Security analysis and comparison indicate that the proposed scheme is secure and efficient.

关键词:

digital rights management, online social networks, multi-owner, attribute-based encryption, broadcast encryption

Abstract:

The online social networks (OSNs) offer attractive means for social interactions and data sharing, as well as raise a number of security and privacy issues. Although current solutions propose to encrypt data before sharing, the access control of encrypted data has become a challenging task. Moreover, multiple owners may enforce different access policy to the same data because of their different privacy concerns. A digital rights management (DRM) scheme is proposed for encrypted data in OSNs. In order to protect users’ sensitive data, the scheme allows users outsource encrypted data to the OSNs service provider for sharing and customize the access policy of their data based on ciphertext-policy attribute-based encryption. Furthermore, the scheme presents a multiparty access control model based on identity-based broadcast encryption and ciphertext-policy attribute-based proxy re-encryption, which enables multiple owners, such as tagged users who appear in a single data, customize the access policy collaboratively, and also allows the disseminators update the access policy if their attributes satisfy the existing access policy. Security analysis and comparison indicate that the proposed scheme is secure and efficient.

Key words:

digital rights management, online social networks, multi-owner, attribute-based encryption, broadcast encryption