Attribute-based Authentication Scheme Research Articles

Attribute-Based Authentication Scheme from Partial Encryption for Lattice with Short Key

Wireless network is the basis of the Internet of things and the intelligent vehicle Internet. Due to the complexity of the Internet of things and intelligent vehicle Internet environment, the nodes of the Internet of things and the intelligent vehicle Internet are more vulnerable to malicious destruction and attacks. Most of the proposed authentication and key agreement protocols for wireless networks are based on traditional cryptosystems such as large integer decomposition and elliptic curves. With the rapid development of quantum computing, these authentication protocols based on traditional cryptography will be more and more threatened, so it is necessary to design some authentication and key agreement protocols that can resist quantum attacks. In this paper, an anti-quantum authentication scheme for wireless networks based on lattice cryptosystem is constructed. In the attribute-based authentication scheme, the length of the authenticated public-private key pair depends on the maximum order and complexity of the formula in the algorithm. In the attribute-based authentication scheme, there is a certain correlation between the authenticated data and the attribute value of the user in the scheme. We show that the attribute-based authentication scheme gives an attribute-based with smaller public-private key pairs. The security of the attribute-based authentication scheme is based on the sub-exponential hard problem of the LWE (Learning With Errors). The Q-poly made by the adversary in the scheme, and our attribute-based authentication scheme guarantees that private data about user attributes and ciphertext cannot be obtained by malicious attackers.

Attribute-Based Identity Authentication Scheme Based on Linear Codes

In the multi-user application environment, the simple use of user private key to achieve identity authentication is too single and can not carry out fine-grained access control to users. And there is the problem of user key management, which is easy to produce system bottleneck. In order to solve the above problems, a traceable and revocable attribute-based authentication scheme is constructed based on linear codes, which divides user access rights in a fine-grained manner. The method of direct revocation is adopted in the scheme, and the cost of revocation is lower. When a key abuse occurs or the system suffers a denial of service attack, the true identity of the malicious user can be tracked based on the signature. Finally, the MBDH problem proves that the scheme meets unforgeability, and the performance comparison and numerical analysis show that the scheme has a shorter key length and less computational overhead.

An online/offline distributed attribute-based authentication scheme

Attribute-based authentication is an effective cryptography mechanism, which makes it possible for service providers to implement fine-grained access control on cloud resources. Although many attribute-based authentication schemes have been proposed, most of them only support single attribute authority and users have to perform a large amount of computation in the authentication phase. By extending the ciphertext policy attribute-based encryption scheme of Rouselakis et al, a distributed attribute-based authentication scheme was designed. The feature of the new scheme is to optimize the online computation efficiency of both service providers and users, i.e., by introducing the technique of online/offline attribute-based encryption, the online computational burden of semi trusted servers is greatly reduced. On the other hand, by introducing outsourcing decryption, users’ computation in the authentication stage is independent of the size of underlying access structures. Compared with previous schemes, the new scheme satisfies several ideal properties, that is, introducing distributed authorities, supporting outsourcing computation, satisfying anonymity and unlinkability, and so on.

An efficient attribute-based authentication scheme with multiple authorities in public cloud

Currently, attribute-based authentication provides a feasible solution for fine-grained access control in cloud environment. However, the existing schemes can not solve the following problems at the same time, that is, how to ensure that the computation cost of the client does not depend on the size of underlying access structure, and how to introduce distributed authorities to manage and maintain the attribute universe. To solve the above problems, an efficient multi-authority attribute-based authentication scheme is proposed. The new scheme uses the technique of distributed attribute-based encryption to realize the access control of anonymous users, and reduces users’ computation burden by optimizing the standard implementation zero-knowledge proof and outsourcing users’ computing tasks in the authentication stage. Under the new definition of security, it can be proved that the new scheme is secure and satisfies many attractive properties, such as introducing distributed authorities, supporting outsourcing computation, satisfying attribute anonymity.

Attribute-based authentication on the cloud for thin clients

We propose two new authentication schemes for the cloud that support private attribute-based authentication services. The basic scheme is non-anonymous attribute-based authentication scheme. The extended scheme of the basic scheme is fully anonymous attribute-based authentication scheme to realize full anonymity and unlinkability services. In the proposed schemes, a user is authenticated by the remote server if the intersection of the set of his/her assigned attributes and the server’s required attributes exceeds a satisfactory predefined level. Unlike existing attribute-based encryption and signature schemes that require the user to perform significant amount of elliptic curve bilinear pairings and modular exponentiations, and require the user to hold a significantly long decryption/signature key, in our schemes the user is not required to perform any bilinear pairings. With a fixed length private key, independent of the number of attributes, the cloud user performs only few exponentiations by which he/she is able to authenticate himself/herself to the remote server and establish a session key with the server with the condition that he/she satisfies a predefined level of the server’s attributes requirement. Therefore, our schemes are suitable for implementation on devices with limited resources. We provide the rigorous security of the proposed schemes and complexity analysis of our schemes. Finally, the security and performance comparisons of our schemes with the existing related schemes show that our schemes outperform other existing schemes.

클라우드 컴퓨팅을 위한 안전한 속성기반 인증 기법

클라우드 컴퓨팅 서비스는 개별 사용자가 자원을 서로 공유하고 가상화 기술 등을 적용하여 기존의 컴퓨팅 환경과는 다른 특성을 가지고 있다. 이러한 특성으로 인해 클라우드 컴퓨팅 환경에 적합한 사용자 식별·접근제어 기술 및 보안 통제 사항 등이 요구된다. 최근 Yoo는 안전한 클라우드 컴퓨팅을 위한 속성기반 접근제어를 이용한 새로운 인증 기법을 제안하였다. 해당 기법은 속성이라는 개념을 이용하여 클라우드 자원에 대한 안전한 접근을 제공한다. 그러나 Yoo의 기법은 악의적인 서비스 제공자에 의해 인증서버의 비밀키 해시 값이 유출될 수 있는 취약점을 가지고 있으며 이를 이용한 서비스 제공자 공격을 통해 인증 요청 메시지 공격이 가능하다. 본 논문에서는 Yoo가 제안한 기법이 가진 취약점을 개선하여 클라우드 컴퓨팅을 위한 안전하고 효율적인 속성기반 인증 기법을 제안하고자 한다.

IPTV 방송 시스템에서의 속성기반 사용자 인증 기법

IPTV(Internet Protocol Television)기술은 통신과 방송의 새로운 융합 기술로 다양한 양방향 TV 서비스를 제공한다. 이러한 서비스를 제공받기 위해서는 TV에 연결된 셋톱박스 (STB, Set-Top Box)와 정당한 가입자의 스마트카드 간의 상호 인증이 이루어져야 한다. 본 논문에서는 한 조직 내에서 직위나 부서 등과 같은 특성(속성) 값들에 따라, IPTV 서비스를 이용할 수 있도록 하는 속성기반 인증 기법을 제안하고, 제안하는 기법이 안전함을 보인다. 제안하는 기법에서 사용자는 자신의 아이디, 패스워드와 스마트카드를 이용하여 인증 메시지를 생성하는데, 이 때 자신에게 속한 다양한 속성을 이용할 수 있기 때문에 가입자는 한 번의 등록으로 속성에 따라 다양한 서비스를 제공받을 수 있다는 장점이 있다. 우리가 아는 한도 내에서는, 본 논문에서 제안하는 기법이 IPTV 환경이 조성된 어떤 조직에도 적용할 수 있는 최초의 속성인증 기법이다. An IPTV (Internet Protocol Television) technology is the new convergence technology of the telecommunication and broadcasting which provides various bidirectional TV services. To provide these services only to legal subscribers, mutual authentication between set-top box connected with TV set and the smart card owned by a subscriber is needed. In this paper, we propose an attribute-based mutual authentication scheme that only someone who is satisfied with some attributes, such as titles or departments, can access the contents provided by the IPTV service in an organization. We also show that the proposed scheme is secure. Our proposed scheme has a virtue that user can access various services, provided by an organization where he/she belongs to, according to their attributes with only one time registration. As far as we know, this is the first attribute-based authentication scheme which can be applied to any organizations in IPTV environments.