Ciphertext Policy Attribute Research Articles

A Blockchain-Based Supervision Data Security Sharing Framework

Ensuring trust, security, and privacy among all participating parties in the process of sharing supervision data is crucial for engineering quality and safety. However, the current centralized architecture platforms that are commonly used for engineering supervision data have problems such as low data sharing and high centralization. A blockchain-based framework for the secure sharing of engineering supervision data is proposed by utilizing the tamper-proof, decentralized, and traceable characteristics of blockchain. The secure storage of supervision data is achieved by combining it with the IPFS (InterPlanetary File System), reducing the storage pressure of on-chain data. Additionally, a fast data retrieval framework is designed based on the storage characteristics of supervision data. Then, CP-ABE (Ciphertext Policy Attribute Based Encryption) is combined with a data storage framework to ensure the privacy, security, and reliability of supervisory data during the sharing process. Finally, smart contracts are designed under the designed framework to ensure the automatic and trustworthy execution of access control processes. The analysis and evaluation results of the security, encryption and decryption, and cost performance of the proposed blockchain framework show that the encryption and decryption time is completed within 0.1 s, the Gas cost is within the normal consumption range, and the time cost of smart contract invocation does not exceed 5 s, demonstrating good availability and reusability of the method proposed in this article.

Traitor Traceable and Revocation-oriented Attribute Based Encryption with Proxy Decryption for Cloud Devices

Cloud storage environment permits the data holders to store their private data on remote cloud computers. Ciphertext Policy Attribute Based Encryption (CP-ABE) is an advanced method that assigns fine-grained access control and provides data confidentiality for accessing the cloud data. CP-ABE methods with small attribute universe limit the practical application of CP-ABE as the public parameter length linearly increases with the number of attributes. Further, it is necessary to provide a way to perform complex calculations during decryption on outsourced devices. In addition, the state-of-art techniques found it difficult to trace the traitor as well as revoke their attribute due to the complexity of ciphertext updation. In this paper, a concrete construction of CP-ABE technique has been provided to address the above limitations. The proposed technique supports large attribute universe, proxy decryption, traitor traceability, attribute revocation and ciphertext updation. The proposed scheme is proven to be secure under random oracle model. Moreover, the experimental outcomes reveal that our scheme is more time efficient than the existing schemes in terms of computation cost.

A Reliable and Equitable Attribute-Based Proxy Re-encryption System for Cloud Data Sharing

The widespread acceptance and quick growth of cloud computing have made data sharing easier than ever before. What is preventing widespread adoption of cloud computing, however, is how to guarantee the security of the user's data in the cloud. Safe data sharing in cloud computing can be achieved through the use of proxy re-encryption. With the use of a semi trusted cloud server, a data owner can encrypt shared data in the cloud using their own public key, converting it into an encryption meant only for authorized recipients to control access. To help us grasp this fundamental better, this paper provides a thorough and motivating overview of re-encryption of proxy servers from a variety of angles. For granular access control of shared data, Ciphertext-Policy Attribute based Aes (CP-ABE) is a possible cryptographic primitive. Each user in CP-ABE has a set of attributes, and access structures based on attributes are used to encrypt data. If and only if a user's characteristics meet the requirements of the ciphertext access structure, the user can decrypt a ciphertext. Practical applications typically call for additional requirements in addition to this fundamental one. Our research centers on the significant problem of attribute revocation, which poses a challenge for CP-ABE methods

Design of access control framework for big data as a service platform

<span>Big data as a service (BDaaS) platform is widely used by various organizations for handling and processing the high volume of data generated from different internet of things (IoT) devices. Data generated from these IoT devices are kept in the form of big data with the help of cloud computing technology. Researchers are putting efforts into providing a more secure and protected access environment for the data available on the cloud. In order to create a safe, distributed, and decentralised environment in the cloud, blockchain technology has emerged as a useful tool. In this research paper, we have proposed a system that uses blockchain technology as a tool to regulate data access that is provided by BDaaS platforms. We are securing the access policy of data by using a modified form of ciphertext policy-attribute based encryption (CP-ABE) technique with the help of blockchain technology. For secure data access in BDaaS, algorithms have been created using a mix of CP-ABE with blockchain technology. Proposed smart contract algorithms are implemented using Eclipse 7.0 IDE and the cloud environment has been simulated on CloudSim tool. Results of key generation time, encryption time, and decryption time has been calculated and compared with access control mechanism without blockchain technology.</span>

Secure multi-dimensional data retrieval with access control and range query in the cloud

Outsourcing data to the cloud offers various advantages, such as improved reliability, enhanced flexibility, accelerated deployment, and so on. However, data security concerns arise due to potential threats such as malicious attacks and internal misuse of privileges, resulting in data leakage. Data encryption is a recognized solution to address these issues and ensure data confidentiality even in the event of a breach. However, encrypted data presents challenges for common operations like access control and range queries. To address these challenges, this paper proposes Secure Multi-dimensional Data Retrieval with Access Control and Range Search in the Cloud (SMDR). In this paper, we propose SMDR policy, which supports both access control and range queries. The design of the SMDR policy cleverly utilizes the minimum and maximum points of buckets, enabling the SMDR policy is highly appropriate for supporting range queries on multi-dimensional data. Additionally, we have made modifications to Ciphertext Policy-Attribute Based Encryption (CP-ABE) to enable effective integration with the SMDR policy, and then constructed a secure index using the SMDR policy and CP-ABE. By utilizing the secure index, access control and range queries can be effectively supported over the encrypted multi-dimensional data. To evaluate the efficiency of SMDR, extensive experiments have been conducted. The experimental results demonstrate the effectiveness and suitability of SMDR in handling encrypted multi-dimensional data. Additionally, we provide a detailed security analysis of SMDR.

Assured and Provable Data Expuncturing in cloud using Ciphertext Policy–Attribute Based Encryption (CP-ABE)

Modern cloud computing strategies greatly reduce investment in infrastructure and data maintenance costs across startup companies and large organizations. This is mainly because of the emergence of the cloud-based IoT paradigm, which allows IoT-based devices to directly upload the data acquired from the environments to the remote cloud and allows the owner of those resources to manage their data through cloud-based applications. However, there are many challenges associated with this kind of data being outsourced, and the cloud server is entirely responsible for securing that data. Since these cloud servers cannot always be fully trusted, securing the deletion of unwanted sensitive data stored in the cloud to prevent data leaking is another challenging issue. As a result, most of the existing technology allows coarse-grained deletion of data on cloud servers. Consequently, cloud data security is jeopardized and new technological development in the cloud environment is hampered. This work implements a Cloud-based, Scalable, Secure unique data Deletion and Verification policy (CSSDV) that uses Ciphertext-Attribute-based encryption to enable fine-grained secure data deletion and data verification. We confirm the CSSDV scheme’s security under the standard model and demonstrate its accuracy and efficacy through theoretical analysis and extensive numerical experiment data. The experimental results for eleven attribute each with different sizes demonstrate the superiority of our algorithm in accessing and deleting the files in a secure and scalable manner.

Proof-of-Work for Merkle based Access Tree in Patient Centric Data

With the advent of wearable devices and smart health care, the wearable health care technology for obtaining Patient Centric Data (PCD) has gained popularity in recent years. To establish access control over encrypted data in health records, Ciphertext Policy-Attribute Based Encryption (CP-ABE), is used. The most critical element is granting secure access to the generated information. However, with growing complexity of access policy, computational overhead of encryption and decryption process also increases. As a result, ensuring data access control as well as efficiency in PCD collected by wearables is crucial and challenging. This paper proposes and demonstrates a proof-of-work for the Merkle-based access tree using notion of hiding the sensitive access policy attributes.

The Trusted Hierarchical Access Structure-Based Encryption Scheme for Cloud Computing

Cloud computing delivers various resources and services to users over internet. At present many businesses and individual users are adopting cloud services to avail benefits such as, less time, less cost, less management, and maintenance. Still, security is the primary issue that must be tackled and one of the security issues is access control mechanism. The most widely used access control method includes Ciphertext Policy Attribute based Encryption, which is encrypted access control scheme. In order to ensure trustworthy and encrypted access control, a trusted hierarchical access structure based encryption scheme is proposed in this paper. The proposed scheme uses hierarchical access structure to encrypt multiple messages and avoid generation of multiple ciphertexts. The trust evaluation component is also integrated with the proposed access control mechanism. An efficient method to assign trust level for service providers and data users by utilizing their behavioral parameters is proposed in the paper.

A Novel Micro-services Cluster Based Framework for Autonomous Vehicles

Modern technologies like digital spaces, intelligent transportation, and digital operations are faced with technical challenges related to data capturing, data processing, data storage, data security, communication, etc. Ensuring security and reliable message propagation among autonomous vehicles is a major challenging task. Establishing appropriate environment for developing vehicular-based solutions by the vehicle manufactures increases their estimated cost and time. Hence, to minimize this problem, this proposal aims to introduce Service Oriented Architecture (SOA) principles, to access trust based solutions as simple cloud based services by the clients. We propose a framework to integrate three mandatory vehicular applications namely trust estimation, secured message dissemination, and routing as cloud-based microservices. We also propose an innovative CipherText Policy Attribute Based Encryption (CP-ABE) algorithm to ensure confidentiality of data by an access control system in highly dynamic and automated network. The services are deployed as Docker images using advanced concepts of Dockers and Containers. Dockers coordinate the orchestration of multiple tasks related to the proposed microservices and help to implement the services in cross-platform environments. These services can be implemented in both autonomous and manual vehicular systems. The service providers can charge the clients based on the usage of the services. A detailed experimental analysis is accomplished to evaluate the performance of the proposed micro services in cross platform environments; further, an extensive simulation is performed to assess the individual performance of the proposed vehicular applications.

Medical data security of wearable tele-rehabilitation under internet of things

The Internet of Things (IoT)-based intelligent medical system contains confidential and sensitive information of patients. Most of the data is related to the patient's medical information and physical information with a high degree of privacy. Therefore, the security and privacy of the data are very important. This study focuses on the privacy protection on information of data of patients during medical data sharing. First, the module structure of the IoT-based telemedicine system is analyzed. A lightweight and fine-grained retrieval and data sharing scheme is designed based on the Wireless Bodyarea Network (WBAN). The Ciphertext Policy Attribute Based Encryption (CP-ABE) scheme is improved mainly by incorporating a partial hidden encryption algorithm, and the improved one is defined as Attribute Partially Hidden Access Control (APHAC). Data users can only access the data when their attributes match the access policy formulated by the data owner. The simulation experiment factors into the storage overhead and computational overhead. The results show that when the number of attributes reaches 100, the APHAC scheme can save about 500 ​ms compared with the traditional CP-ABE scheme. As the number of attributes increases, only this scheme is stable, so it is more suitable for mobile devices. It can be concluded that the encrypted access control strategy proposed in this study avoids the excessive expenditure of end users in computing and storage resources while enabling users to have flexible access control.

An improved approach in CP-ABE with proxy re-encryption

A cryptographic encryption technique converts plaintext into ciphertext, which is non-recoverable by a malicious user without knowing the secret key. The Ciphertext Policy Attribute Based Encryption (CP-ABE) scheme aims for a multicast feature. Different users can decrypt the message if their secret key attributes match with the policy of attributes defined in the ciphertext. In literature, various approaches exist to enhance the naïve CP-ABE scheme. In 2021, Wang et al. proposed the proxy re-encryption-based CP-ABE scheme and presented that it is efficient as its predecessors. However, the proposed scheme follows the variable-length ciphertext where the ciphertext size depends on the number of attributes. Such variable-length ciphertext increases the required number of operations for the decryption, leading to the computation overhead at the receiver side. This paper proposes an enhanced CP-ABE-CL-PRE (CP-ABE Constant Length with PRE) scheme to provide the constant length ciphertext with proxy re-encryption. Our proposed scheme is secure under the Decisional Bilinear Diffie-Hellman (DBDH) problem.

Lightweight VANET Architecture for Efficient Secure Data Transmission using CPABE & IBOOS

Cloud computing is a network access concept that provides simple, on-demand network access to a shared pool of customizable computing resources (such as networks, servers, storage, applications, and services) that can be quickly provided and released with minimal administrative effort or service provider involvement. The idea of having a communication node on-board a vehicle that may make wireless connections with other adjacent communication nodes visible in the radio range is referred to as a Vehicular Adhoc Network (VANET). The main focus of this paper is to design lightweight Vehicular Adhoc Network architecture for efficient secure data transmission. An improved Ciphertext Policy Attribute Based Encryption scheme and Identity Based offline/online Signature scheme are proposed to reduce the computational cost, storage overhead and communication overhead in vehicular ad-hoc network. Finally, concluded that the proposed work yields high performance than the existing work.

Ciphertext Policy Attribute Based Encryption with Anonymous Access Policy

Ciphertext Policy Attribute Based Encryption with Anonymous Access Policy

TRAK-CPABE: A novel Traceable, Revocable and Accountable Ciphertext-Policy Attribute-Based Encryption scheme in cloud computing

Ciphertext Policy Attribute Based Encryption (CPABE) offers fine-grained access control in Cloud Computing environment. It is considered as the most promising one-to-many encryption mechanism. However, a Cloud user can delegate decryption privileges to unauthorized users for profits. The key abuse issue is not the only limit with this model for the reason that when the malicious user has been caught, it cannot be revoked. To address these problems, we propose a Traceable, Revocable, Accountable and Key-escrow free CPABE scheme (TRAK-CPABE). This solution supports white-box traceability and direct revocation. The main idea of this work is to divide the original data after publishing in cloud server. In the case of user revocation, one single slice is affected. Data owner needs to retrieve, re-encrypt and re-publish it. In addition, shared keys will be traced and conflict scenario will be resolved. More, the traceability of TRAK-CPABE depends on the l-Strong Diffie–Hellman (l-SDH) and Indistinguishability under chosen-plaintext attack (IND-CPA. The security of the proposed scheme is proved formally by using the Scyther tool. Furthermore, the experimental results show the efficiency of the proposed solution.

An Innovative Approach for Enhancing Cloud Data Security using Attribute based Encryption and ECC

Cloud computing is future for upcoming generations. Nowadays various companies are looking to use Cloud computing services, as it may benefit them in terms of price, reliability and unlimited storage capacity. Providing security and privacy protection for the cloud data is one of the most difficult task in recent days. One of the measures which customers can take care of is to encrypt their data before it is stored on the cloud. Recently, the attribute-based encryption (ABE) is a popular solution to achieve secure data transmission and storage in the cloud computing. In this paper, an efficient hybrid approach using attribute-based encryption scheme and ECC is proposed to enhance the security and privacy issues in cloud. Here, the proposed scheme is based on Cipher text-Policy Attribute Based Encryption (CP-ABE) without bilinear pairing operations. In this approach, the computation-intensive bilinear pairing operation is replaced by the scalar multiplication on elliptic curves. Experimental results show that the proposed scheme has good cryptographic properties, and high security level which depends in the difficulty to solve the discrete logarithm problem on elliptic curves (ECDLP).

Secure sharing of data in cloud using MA-CPABE with elliptic curve cryptography

The usage of data has grown exponentially well across prominent sectors in both public and private organizations. Security policies for the data are inevitable as data plays a major role even in prominent sectors like healthcare, defense. Accessing the data from the cloud is one of the easiest ways which is why most of the cloud service vendors pay more attention to secure the data on the cloud. Cyber criminals have been exploiting the cloud using various vulnerable methods and one among them is weak encryption methods. In order to solve these problems, some kind of new approach is needed and therefore cloud applications will be safer. The proposed secure sharing of data in the cloud using Multi-Authority Ciphertext Policy Attribute Based Encryption with Elliptic Curve Cryptography (MA-CPABE-ECC) is most appropriate for cloud since it has smaller key size, high security and less computation time. In the proposed work, the keys are generated based on the user attributes. Those keys are considered as points in elliptical curve and the encryption is performed so that greater security is achieved. Security analysis and performance analysis to the system was done and the results showed that we can achieve greater protection for cloud data transmission.

A lightweight key management scheme for key-escrow-free ECC-based CP-ABE for IoT healthcare systems

The rapid increase in the implementation of Internet of Things (IoT) solutions in diverse healthcare sectors raises the IoT in the healthcare market. The real-time health monitoring to manage the chronic diseases is likely to drive the demand of IoT in healthcare. Moreover, the enhancement in communication technologies like real-time data transmission has improved the patients’ confidence in managing the chronic disease and medication dosage. Although IoT in healthcare makes a positive impact on patients and healthcare providers, however, it gets the challenges like data security and privacy. One means of sustaining security in IoT based healthcare system is through key management and at the same time an effective security mechanism for outsourced data to obtain fine-grained access control is the Ciphertext Policy-Attribute Based Encryption (CP-ABE). However, the overhead of complex decryption operations and key-escrow problem of CP-ABE hinders its applicability in IoT. Hence, in this work, we design a lightweight key management mechanism for the CP-ABE scheme using Elliptic Curve Cryptography (ECC). The novelty in this scheme is that irrespective of the secret key generation by the semi-trusted authority (honest, but curious to know the secret information), it is not capable to decrypt any message using these keys until and unless it has an additional private key of the receiver. For a constraint environment like IoT, the applicability of CP-ABE has two major issues: complex decryption operations and key-escrow problem. Hence, in this paper, a lightweight CP-ABE scheme for IoT based health care system using ECC has been designed. The proposed key management mechanism in the CP-ABE scheme is key-escrow free as well as significantly reduces the decryption overhead of the data receiver. The performance analysis shows that the proposed scheme is more effective as compared to the existing competing schemes.

A Secure and Privacy-Preserving Machine Learning Model Sharing Scheme for Edge-Enabled IoT

With the popular use of IoT devices, edge computing has been widely applied in the Internet of things (IoT) and regarded as a promising solution for its wide distribution, decentralization, low latency. At the same time, in response to the massive computing data and intelligent requirements of various applications in the IoT, artificial intelligence (AI) technology has also achieved rapid development. As a result, edge intelligence (EI) for the Internet of Things has attracted widespread attention. Driven by the requirement that making full use of data, machine learning (ML) models trained in EI are usually shared. However, there may be some security and privacy issues due to the openness and heterogeneity of edge intelligence. How to ensure flexible data access and data security as well as the accountability for edge nodes and users in EI model sharing have become important issues. In this article, we propose a Ciphertext Policy Attribute Based Proxy Re-encryption (CP-ABPRE) scheme with accountability to address the security and privacy issues in EI model sharing. In our scheme, a user can delegate the access right to others to make model access more flexible. Furthermore, each entity that may need to be held accountable is embedded a unique ID to achieve traceability. Finally, security analysis and performance evaluation are given to prove that our scheme is CPA secure and does not lose much efficiency with more features.

Big Data Security Challenges and Solution of Distributed Computing in Hadoop Environment: A Security Framework

Background: In current scenario of internet, large amounts of data are generated and processed. Hadoop framework is widely used to store and process big data in a highly distributed manner. It is argued that Hadoop Framework is not mature enough to deal with the current cyberattacks on the data. Objective: The main objective of the proposed work is to provide a complete security approach comprising of authorisation and authentication for the user and the Hadoop cluster nodes and to secure the data at rest as well as in transit. Methods: The proposed algorithm uses Kerberos network authentication protocol for authorisation and authentication and to validate the users and the cluster nodes. The Ciphertext-Policy Attribute- Based Encryption (CP-ABE) is used for data at rest and data in transit. User encrypts the file with their own set of attributes and stores on Hadoop Distributed File System. Only intended users can decrypt that file with matching parameters. Results: The proposed algorithm was implemented with data sets of different sizes. The data was processed with and without encryption. The results show little difference in processing time. The performance was affected in range of 0.8% to 3.1%, which includes impact of other factors also, like system configuration, the number of parallel jobs running and virtual environment. Conclusion: The solutions available for handling the big data security problems faced in Hadoop framework are inefficient or incomplete. A complete security framework is proposed for Hadoop Environment. The solution is experimentally proven to have little effect on the performance of the system for datasets of different sizes.

Ciphertext policy Attribute based Encryption with anonymous access policy

Ciphertext policy Attribute based Encryption with anonymous access policy