Ciphertext Policy Attribute Research Articles

Large universe attribute based access control with efficient decryption in cloud storage system

Ciphertext Policy Attribute Based Encryption scheme is a promising technique for access control in the cloud storage, since it allows the data owner to define access policy over the outsourced data. However, the existing attribute based access control mechanism in the cloud storage is based on small universe construction, where the attribute set is defined at setup, and the size of the public parameters scales with the number of attributes. A large number of new attributes need to be added to the system over time, small universe attribute based access control is no longer suitable for cloud storage, whereas large universe attribute based encryption where any string can be employed as an attribute and attributes are not required to be enumerated at system setup meets this requirement. Unfortunately, one of the main efficiency drawbacks of existing large universe attribute based encryption is that ciphertext size and decryption time scale with the complexity of the access structure. In this work, we propose large universe attribute based access control scheme with efficient decryption. The user provides the cloud computing server with a transformation key with which the cloud computing server transforms the ciphertext associated with the access structure satisfied by the attributes associated with the private key into a simple and short ciphertext; thus it significantly reduces the time for the user to decrypt the ciphertext without the cloud computing server knowing the underlying plaintext; the user can check whether the transformation done by the cloud computing server is correct to verify transformation correctness. Security analysis and performance evaluation show our scheme is secure and efficient.

MULTI-FACTOR AUTHENTICATION USING A NOVEL APPROACH IN THE CLOUD

Cloud computing is a contemporary prototype to deliver services over the Internet. Cloud security is the most crucial issue in a cloud atmosphere either it is public cloud or community cloud. There is a vast scope to scrutinize data security enhancement in cloud storage. Authentication is anessential technology for information security, which is a mechanism to confirm proof of identities to obtain access of information in the system.Conventionally used authentication methods are rather securing data, but not smart enough and completely secured.In this paper, we have implemented a novel verification technique that associate with static username and password as a way in authentication followed by OTP based on the token generator method along with a digital signature and image captcha is an innovative factor to verify an each user. The solution aims at gaining confidentiality and integrity by making use of CP-ABHE (Ciphertext Policy-Attribute based Homomorphic Encryption algorithm) and user verification with Multi-Factor Authentication.Finally the efficiency of the system is examined with the help of the experimental results and discussions.

Amelioration of Decentralized Cipher Text Policy Attribute Based Encryption with Mediator technique by adding Salt

The existing techniques had focused more on the attribute based encryption, cipher text policies and multiple authorities to make the network security more sheltered. But due to the attribute leak problem, these techniques were disabled to protect user’s privacy. To enhance the security level, the proposed system has added salting method into the DCP-ABE-M scheme. Here both the data and user attributes are utilized to avoid attribute leak problem. The proposed system has a decentralized environment which contains multiple authorities who generates secret keys by using user attributes, data attributes and also contains multiple mediators who act as the middleware between user-authority. Both the power’s doesn’t stores any user details or full secret keys in their DB or in system. That is, all the user details and secret key will be hidden. In some cases the different users may use same keywords as their passwords which may leads to rainbow table attack or dictionary attack. To avoid this problem, salting is added into DCP-ABE-M. A unique salt value is added into the passwords which makes the password more strong and different from other passwords. Hence the proposed system enhances the level of security by adding salt value and is more efficient than the previously existing schemes.

Achieving Scalability with Data Owner Anonymity in Cloud Access Control

Abstract - Cloud computing is a trending technology that enables subscribing organizations to outsource computations and storage, and eliminates the need of purchasing and maintaining the equipment by the organizations themselves. However, it is very challenging to maintain the privacy and security of data especially when the number of users grows dramatically. This paper focuses on achieving a high level of scalability to the cloud, allowing fine-grained access control, preserving the anonymity of the data owner and enabling the end user to verify the integrity of the data uploaded to the cloud. In order to achieve this, this paper proposes an effective scheme that uses Ciphertext Policy Attribute Based Encryption (CP-ABE) combined with identity-based encryption (IBE), and introduces a security mediator which signs files on behalf of the data owner to preserve the data owner’s anonymity from the cloud. This scheme allows the end user to check the integrity of the data on the cloud.

Privacy and Secure Data Retrival for Decentralized Military Network

Disruption-tolerant network (DTN) technologies are getting flourishing solutions that allow remote device sent by officers to talk with each other and access the confidential information or secret information by exploiting outside storage nodes. This technique provides economical state of affairs for authorization policies and also the policies update for secure information retrieval in most difficult cases. The foremost promising science resolution is introduced to regulate the access problems referred to as Cipher text Policy Attribute based mostly coding (CP-ABE). A number of the foremost difficult problems during this state of affairs square measure the social control of authorization policies and also the policies update for secure information retrieval. However, the matter of applying CP-ABE in decentralized DTNs introduces many security and privacy challenges with relevance the attribute revocation, key escrow, and coordination of attributes issued from totally different authorities. During this paper, we tend to propose a secure information retrieval theme exploitation CP-ABE for decentralized DTNs wherever multiple key authorities manage their attributes severally.We demonstrate the way to apply the planned mechanism to soundly and proficiently contend with the classified data spread within the Interruption or disruption tolerant network.

Secure and Efficient Data Communication Protocol for Wireless Body Area Networks

Wireless Body Area Networks (WBANs) are expected to play a major role in the field of patient-health monitoring in the near future, which gains tremendous attention amongst researchers in recent years. One of the challenges is to establish a secure communication architecture between sensors and users, whilst addressing the prevalent security and privacy concerns. In this paper, we propose a communication architecture for BANs, and design a scheme to secure the data communications between implanted/wearable sensors and the data sink/data consumers (doctors or nurse) by employing Ciphertext-Policy Attribute Based Encryption (CP_ABE) [1] and signature to store the data in ciphertext format at the data sink, hence ensuring data security. Our scheme achieves a role-based access control by employing an access control tree defined by the attributes of the data. We also design two protocols to securely retrieve the sensitive data from a BAN and instruct the sensors in a BAN. We analyze the proposed scheme, and argue that it provides message authenticity and collusion resistance, and is efficient and feasible. We also evaluate its performance in terms of energy consumption and communication/computation overhead.

Privacy Preserving Task Force Communication in Hastily Formed Networks through ACT

Task Forces are groups formed to command, control and manage time bound emergency situationslike rescue and relief operations, event management, emergency health care assistance, through collaborativeeffort. Technological assistance and coordination among the members of the Task Forcesare critical for accomplishing their mission. The proposed work gives a scheme for secure and privacypreserving group communication among the members at different hierarchical levels of theTask Force. Mostly such tasks are to be carried out in conditions of scarce infrastructural availability.Communication among the members of the Task Force is based on their responsibility and authoritywithin the sub-group to which they belong and can be realized through Mobile Adhoc Network(MANET). The proposed system achieves privacy and security in communication through AccessControl Tree (ACT) structure using Ciphertext Policy Attribute Based Encryption (CP-ABE). Theproposed solution supports two essential requirements of a Task Force for accomplishing its goalwithin the stipulated time. One, a well organized Task Force with clear division of responsibilityand authority and the other, secure and privacy retaining communication among the members of thegroup.

An Efficient Scheme for Facilitating Secure Data Sharing in Decentralized Disruption Tolerant Networks

Wireless Sensor Nodes in military situations, for example, a war zone or an unfriendly locale are liable to experience the ill effects of discontinuous system network. Objective: To design an efficient data recovery scheme for Decentralized DTNs in military environments, based on CP-ABE methodology, making Security the utmost prioritized characteristic. Analysis: Latest Innovations in Disruption Tolerant Networks (DTN) are getting to be effective arrangements, that permit mobile devices carried by military personnel to correspond with one another and access the classified data or to command effectively by manipulating the independent-autonomous repository nodes. Out of these, the most difficult issues in the situation are the authorization strategies and those approaches' improvisation for secure data recovery. Methodology: Cipher text Policy-Attribute Based Encryption (CP-ABE) is a promising cryptographic technique to address the access authority issues. The issue of applying CP-ABE in decentralized DTNs presents a few security and protection challenges like attribute revoke, key security, and regulation of attributes issued from distinct authorities. So, we implement CP-ABE along with 2PC (Two Phase Commit) protocol and where numerous key authorities deal with their attributes autonomously to overcome the above mentioned challenges. Findings/Improvements: We implement the proposed System as a stand-alone application in Eclipse IDE. We've been successful in implementing this system to achieve the security requirements we've been discussing at length in the paper and we've demonstrated how to recover the data in very hostile military environments in an efficient and a secured manner.

Oblivious Transfer with Fine Grained Access Control from Ciphertext Policy Attribute Based Encryption in the Standard Model

In this work, an oblivious transfer with complex access control scheme that is constructed based on ciphertext policy attribute based encryption (CP-ABE) scheme is proposed. In this scheme, the database server can enforce fine grained access control for each record where the authorized user is allowed to access, but the unauthorized user cannot, whereas it learns neither which record a user accesses, nor which attributes a user has. This scheme has the advantages as follows: First, it allows the expressive access control policies where access structures are based on linear secret sharing scheme that directly supports AND, OR and Threshold gates. Second, the communication complexity in this scheme is constant in the numbers of records which have been accessed. Third, this scheme is constructed in prime order bilinear group. Fourth, this scheme is secure in the standard model. To the best of our knowledge, this scheme is the first to obtain these features simultaneously.

Cooperative downloading with privacy preservation and access control for value-added services in VANETs

Value-added services in Vehicular Ad Hoc Networks VANETs have gained increasing popularity in recent years. However, Road Side Units RSUs cannot usually cover the whole region, resulting in intermittent connectivity. Therefore, how to download data continuously while preserving users' privacy remains an open problem. In this paper, we propose an efficient data downloading scheme based on users' cooperation, providing continuous downloading services even when the region is not completely covered by RSUs. Moreover, in order to protect data receivers' privacy and realise fine-grained access control, we employ Ciphertext Policy Attribute Based Encryption with Constant Length CP-ABE-CL with consideration of users' charge levels. The security analysis shows that our scheme can achieve mutual authentication for vehicles and RSUs, and realise fine-grained access control while preserving privacy of data receivers' identities. The performance analysis demonstrates that our scheme is efficient enough to be implemented in VANETs.

Review on Fuzzy Authorization for Cloud Storage

Cloud computing is a widely accepted technology that delivers many services over internet. The services includes storage, easy access from anywhere at any time and also minimum device memory utility. Inorder to provide security and privacy of data many authorization schemes are used. OAuth scheme is one of the most commonly used authorization scheme. But it cannot be used in the case of heterogeneous clouds. To overcome this difficulty, Fuzzy Authorization scheme was proposed. In this scheme, modified Ciphertext Policy-Attribute Based Encryption (CP-ABE) and OAuth schemes are used. This scheme provides the facility for an application that is present in one cloud party to access data that is stored in another cloud party. Fuzzy Authorization is a reading authorization scheme and data modification can only be done by data owner. When a data is modified, the application’s right of accessing the data will be automatically canceled. By making use of Linear Secret Sharing Scheme and GRS code this scheme has become more scalable and flexible. The implementation is done by using simulator OMNET++4.2.2 and cryptographic part is done by using Pairing Based Cryptographic(PBC)library. Simulation results shows that this scheme is more secure and efficient. Different access control schemes are compared in this paper based on many parameters.

Secure Group Communication to PreventUnauthorized Messages in DTN Based MobileAd Hoc Networks

To establish a communication among wireless devices and to retrieve the data securely Disruption tolerant network (DTN) is introduced. For maintaining the data confidential many cryptographic solutions are used. The issues in accessing the information is solved by the algorithm called Ciphertext Policy-Attribute Based Encryption. This has enormous challenge in providing security for the information. In decentralized DTN, CP-ABE is implemented with multiple key authorities that handle the attributes individually. Two party computation protocols are introduced in CP-ABE to protect the authority’s interest in knowing the private keys created by others. The fine-drawn secret reversals are made for each and every feature set. Any monotone access structure can be used for creating the access policy in CP-ABE. In this the key authorities may be adjusted or not entirely believed. To maintain the trust partially the assumption is made such that the central authority does not conspiracy with local authority. To improve the trust we proposed an improved CP-ABE, in this we determine the trust of each user node in a network by estimating the trust of every node and updates the trust, so the user can have their trust in authority that generates the key for confidential data. By including the trust in CP-ABE, the users can trust the key authority for accessing the information securely. The privacy of the sending data and the data which are stored in storage node are maintained confidential by using the proposed system. Thus the proposed system has high degree of trust in the nodes.

Secure Data Storage and Data Retrieval in Cloud Storage using Cipher Policy Attribute based Encryption

Cloud is an arising and a massive technical development of this modern era which offers variety of services to satisfy the needs of multiple users. Cloud technology has various advantages such as high availability, storage, fast data retrieval, it still has a limitation to overcome which is known as security. Ciphertext Policy Attribute Based Encryption is a proficient technique for addressing this security issue, in which the owner of the data will create a control structure for encrypting the information. Decryption is possible when the peculiar attributes of the users satisfies that access control tree. Private keys for the users will be generated based on the attributes of the users. Another aspect to be considered in this technique is key escrow problem where single third party authority has the ability to decrypt the ciphertext which might contain sensitive information. In order to overcome this problem multiple authority CP-ABE is introduced. In the proposed scheme key generation for the users will issued by separate key generation authority and attributes of the users will be managed by attribute management authority. So none of the authority can decrypt data holder’s secret information. Authorities cannot pool data so the collision attack is not possible. Illustration of the proposed technique follows in the later sections of the paper.

A Work in Progress: Context based Encryption Scheme for Internet of Things

Abstract In current Internet, data owners can provide integrity and authentication when data is generated. However confidentiality is usually implemented by symmetric keys between two corresponding programs in an end-to-end manner. A symmetric key for confidentiality is not suitable for Internet of Things (IoT) environment where there are one producer of data and multiple consumers of data. Further the consumers differ in their qualification about what part of the data is allowed to access under which context. In the paper we describe our work in progress of confidentiality scheme in which the producer encrypts data along with context. We improve Key Policy Attribute Based Encryption (KP-ABE) and Ciphertext Policy Attribute Based Encryption (CP-ABE) to allow consumers to decrypt data as their contexts dictate. We describe briefly our scheme to implement the idea.

Highly Secure Method based on Ciphertext Policy Attribute based Encryption in Hadoop System

is one of today's most exciting technologies due to its ability to reduce costs associated with while increasing flexibility and scalability for computer processes. Cloud is set of resources and services offered through the Internet. The rapid growth in field of computing also increases severe security concerns. Lack of security is the only hurdle in wide adoption of cloud computing. Distribution and sharing of File is one of the most critical service of cloud computing. This paper examines security for big data environments, reviewing built-in protections and weaknesses of these systems. In this paper, we use the Hadoop based file system and secure it using a highly secure algorithm based on ciphertext policy attributes based encryption with pairing (CP- ABE-WP with pairing). The solution aims at providing optimal performance in cloud environment and also ensures security by using a session based approach. The proposed method has maintained a hierarchy of users to ensure that files are used by their appropriate users. KeywordsStorage; Access Control; Attribute-Based Encryption; Document Sharing; Ciphertext-Policy.

AGREE: exploiting energy harvesting to support data-centric access control in WSNs

This work is motivated by a general question: can energy harvesting capabilities embedded in modern sensor nodes be exploited so as to support security mechanisms which otherwise would be too demanding and hardly viable? More specifically, in this work we focus on the support of extremely powerful, but complex, fine-grained data-centric access control mechanisms based on multi-authority Ciphertext Policy Attribute Based Encryption (CP-ABE). By integrating access control policies into the (encrypted) data, such mechanisms do not require any server-based access control infrastructure and are thus highly desirable in many wireless sensor network scenarios. However, as concretely shown by a proof-of-concept implementation first carried out in this paper on TelosB and MicaZ motes, computational complexity and energy toll of state-of-the-art multi-authority CP-ABE schemes is still critical. We thus show how to mitigate the relatively large energy consumption of the CP-ABE cryptographic operations by proposing AGREE (Access control for GREEn wireless sensor networks), a framework that exploits energy harvesting opportunities to pre-compute and cache suitably chosen CP-ABE-encrypted keys, so as to minimize the need to perform CP-ABE encryptions when no energy from harvesting is available. We assess the performance of AGREE by means of simulation and actual implementation, validating its operation with real-world energy-harvesting traces collected indoors by TelosB motes equipped with photovoltaic cells, as well as public available traces of radiant light energy. Our results show that complex security mechanisms may become significantly less demanding when implemented so as to take advantage of energy harvesting opportunities.

Ciphertext policy Attribute based Encryption with anonymous access policy

In Ciphertext Policy Attribute based Encryption scheme, the encryptor can fix the policy, who can decrypt the encrypted message. The policy can be formed with the help of attributes. In CP-ABE, access policy is sent along with the ciphertext. We propose a method in which the access policy need not be sent along with the ciphertext, by which we are able to preserve the privacy of the encryptor. The proposed construction is provably secure under Decision Bilinear Diffe-Hellman assumption.