Data Encryption Scheme Research Articles

ENHANCING APPROACH USING HYBRID PAILLER AND RSA FOR INFORMATION SECURITY IN BIGDATA

The amount of data processed and stored in the cloud is growing dramatically. The traditional storage devices at both hardware and software levels cannot meet the requirement of the cloud. This fact motivates the need for a plat¬form which can handle this problem. Hadoop is a deployed platform proposed to overcome this big data problem which often uses MapReduce architecture to process vast amounts of data of the cloud system. Hadoop has no strategy to assure the safety and confidentiality of the files saved inside the Hadoop distributed File system (HDFS). In the cloud, the protection of sensitive data is a critical issue in which data encryption schemes plays avital rule. This research proposes a hybrid system between two well-known asymmetric key cryptosystems (RSA, and Paillier) to encrypt the files stored in HDFS. Thus before saving data in HDFS, the proposed cryptosystem is utilized for encrypting the data. Each user of the cloud might upload files in two ways, non-safe or secure. The hybrid system shows higher computational complexity and less latency in comparison to the RSA cryptosystem alone.

Data Encryption Based on Exponential Numbers

A novel data encryption scheme using a set of exponential numbers is proposed in this paper which aims at achieving secure communications over public networks. The study begins with the definition of pattern of exponential number, where the decimal pattern of an exponential number ge is the result of taking e − 1 times multiplication the base element g by itself. The multiplication operation of two large integers involves the complicated carry conditions in each step, which is digit-dependence and can only be analyzed case by case. This implies that the pattern of a large exponential number is unpredictable. Next, we prove that nature number can be spanned by a set of exponential numbers, and there exists numerous spanning sets for one nature number, demonstrating that the expression of nature number using a set of exponential numbers is not unique. The unpredictable nature of exponential patterns and the abundant available sets of exponential numbers can contribute the concealment of information when data streams are encrypted by the exponential numbers. In addition, we prove that the base elements of a set of exponential numbers applied for spanning a nature number can be arbitrarily assigned. With this property, we can distribute a secret key sequence in advance as the base elements for data encryption, or this secret key can be shared using the Diffie-Hellman Key-Exchange system over public network. Finally, the encrypted message consists of a sequence of exponents and the index data, which indicates the relationship between the base elements and the secret key for decryption. The ciphertext is transmitted via the public channel to the receiver end; however, it can only be decrypted by those who own the secret key. Some examples are shown for demonstration the feasibility of the proposed encryption scheme.

Energy Aware Fuzzy Logic Secure Data Aggregation (EA-FSDA) technique for Wireless Sensor Networks

Increased demand for wireless communication system has gained huge attraction from various research communities, industries and academic field due to their significant advantages of facilitating efficient communication for real-time applications. With respect to wireless communication, monitoring (i.e. environmental) using WSN is considered as a significant task that has numerous challenging issues such as network deployment, data aggregation and data transmission in hazardous environmental conditions. In this work, we have focused on the data aggregation process in WSN and developed a novel approach to improve the network lifetime using a proposed solution based on the fuzzy logic scheme, which is called as Energy Aware Fuzzy Logic Secure Data Aggregation (EA-FSDA). Furthermore, we present a privacy-aware mechanism for secure data aggregation to improve the system reliability. The privacy-preserving scheme is developed using homomorphic data encryption scheme. Hence, the proposed approach provides a complete solution for efficient and protected data aggregation for WSN that aids in improving the performance of the network. Finally, we present a comparative study which proves that the proposed EA-FSDA technique attains improved network performance in contrast with existing techniques.

A Priority Based Efficient Secure Framework for WBANs

In this article, the authors propose a system to gather patient information continuously, perform proper non-intrusive checking, and propose restorative or potentially way of life engagements, at whatever point required and proper. The structure, which depends on administration arranged service as application(SOAs) and the Cloud, permits a consistent combination of various innovations, applications, also, administrations. It additionally integrates mobile advances to easily gather, convey imperative information from a patient's wearable biosensors while considering a cell phones' restricted abilities and control seepage, notwithstanding discontinuous system detachments. At that point, information is put away in the Cloud and made accessible by means of SOA to permit access by doctors, paramedics, or other approved authorities. A contextual investigation has been created to assess the convenience of the structure, and the preparatory outcomes that have been broken down are demonstrating exceptionally encouraging outcomes. To secure the data transmission, they have applied identity-based data encryption scheme. It enhances the security in the authors' framework.

A Key Management of Security to Design Enhanced Apache and Rhino Utilities in Big Data Using Hadoop

Hadoop is a dispersed information dispensation platform intended for investigate big data. Information is emergent at a massive value in the current charity. Entity of the best part popular knowledge existing intended for managing and dispensation to facilitate vast quantity of information is the Hadoop environment. Present be disparate conduct to accumulate and development huge quantity of information. Hadoop is broadly utilized, lonely of the majority popular strategy to accumulate enormous quantity of information and progression them in equivalent. at the same time as store insightful information, security performing an significant responsibility to stay it secure. Security is not that greatly measured while Hadoop be primarily projected. The early utilize of Hadoop was association huge quantity of shared network information so privacy of the accumulate information and. essentially user services in Hadoop be not authenticated; Hadoop is projected code on a disseminated compilation of technology so exclusive of correct authentication and any person might present and it would be implement. The outstanding Utilities encompass in progress to extend the protection of Hadoop. These utilities are using Enhanced Rhino Utility and Enhanced Sentry Utility. Enhanced Rhino develop splittable crypto codec to deliver encryption intended for the information to facilitate is accumulate in Hadoop dispersed conspirator organization. Moreover develop the essential authentication by execute Hadoop single sign on which prevents repeated authentication of the users accessing the same services with various times. While the authorization point of examination Enhanced Rhino utility deliver severance based authorization designed for Hbase. Enhanced Sentry utility give fine-grained entrance organizes by behind responsibility based authorization which different services can be bound to it to grant authorization for their users. It is probable to merge security enhancements which cover the Enhanced Rhino utility and Enhanced Sentry Utility to supporting get enhanced the presentation and offer enhanced mechanism to secure Hadoop. In this paper, the security of the organization in Hadoop is assess and different security enhancements to be proposed, enchanting into inspection security enhancement comprehensive by the two utilities, Enhanced Rhino utility and Enhanced Sentry utility, in provisions of encryption, authentication, and authorization. This paper proposes a number of sophisticated security improvements on the federal authentication and organization implementation made by enhanced Rhino Utility based on the HDFS data encryption scheme using the ARIA encryption algorithm on Hadoop.

Researches on data encryption scheme based on CP-ASBE of cloud storage

The ciphertext-policy attribute-set based encryption (CP-ASBE) based on a single authorisation centre easily becomes the security bottleneck of the system. With the support of trusted measurement technology, a novel method of CP-ASBE based on multiple attribute authority (AA) is proposed to solve this problem, and an encryption scheme is designed for cloud storage, which includes data storage, data access, data encryption and trusted measurement scheme for AA. The security performance and time cost of the encryption scheme are simulated, and the results show that the scheme can improve the security of users' data in the cloud storage environment.

Parallel Crossed Chaotic Encryption for Hyperspectral Images

Hyperspectral images (HI) collect information from across the electromagnetic spectrum, and they are an essential tool for identifying materials, recognizing processes and finding objects. However, the information on an HI could be sensitive and must to be protected. Although there are many encryption schemes for images and raw data, there are not specific schemes for HI. In this paper, we introduce the idea of crossed chaotic systems and we present an ad hoc parallel crossed chaotic encryption algorithm for HI, in which we take advantage of the multidimensionality nature of the HI. Consequently, we obtain a faster encryption algorithm and with a higher entropy result than others state of the art chaotic schemes.

Cloud computing security: a survey

Cloud computing was a hasting expertise which has innovated to a collection of new explores. A sub-ordinate device for Information services, it has an ability towards encourage development by feeding convenient environments for a choice of forms of development is different sequence. Clouds usually consider being eco-friendly, however keep it has open to the diversity of some security issues to can change together the feeder as well as users of these cloud services. In this issue are principally associated to the protection of the information flow throughout also being store in the cloud, with simple problems along with data ease of use, data right to use and data confidentiality. Data encryption and service authentication scheme has been initiated by the industries to deal with them. In this paper analyse and examine different issues on security beside with the different procedure worn by the industries to solve these effects.

Energy-Efficient Data Encryption Scheme for Cognitive Radio Networks

In this paper, we investigate a security mode decision policy for a cognitive radio network (CRN) powered by a non-radio frequency energy harvester. In such a network, a cognitive user (CU), which has a finite battery capacity, senses the presence of the primary user and tries to access the time-slotted primary channel opportunistically to transmit data. However, communication can be vulnerable to sudden attacks that are carried out by hidden eavesdroppers. Therefore, we propose an energy-efficient data encryption scheme for CRNs to increase the effective security level under energy limitation constraints. The operation mode decision policy is formulated as a framework of a partially observable Markov decision process. In this approach, based on the sensing results and the remaining energy at the beginning of each time slot, CUs can decide to stay silent to save energy, or become active and encrypt data using opportune private-key encryption methods considering the effect of the current action on the future reward to maximize the effective security. Finally, we evaluate the performance of the proposed scheme by using numerical simulation results.

Multi-Authority Attribute Based Data Access Control in Fog Computing

The fog computing carries the cloud properties to the edge of the network. The cloud provides a substantial storage and communication to resource constrained edge or Internet of Things(IoT) devices. Without fog computing, these devices would have to store data on data centers and communicate with the cloud using the internet. The fog due to its inherited properties from cloud also inherits its security concerns. One of the primary security concern is data sharing and data storageas the illegitimate users could breach security while data is being shared or get access to stored data. Also, saved data on an untrusted cloud server is also a matter of concern. So, there is a requirement of an access control and data encryption scheme. Various Attribute-based Encryption (ABE) schemes have been proved to be beneficial. But due to the massive amount of data being shared and different types of users, the single authority approach is not favorable. The efficiency of the solution could be improved using offline-online encryption along with partial decryption method. As the data has to pass through untrusted cloud server so it is crucial to maintain verifiability. In this paper, we propose a scheme that uses Decentralized Attribute-based Encryption with offline-online encryption and partial decryption using a proxy server in fog communication. The scheme would help to secure fog communication with untrusted devices on the network. To prove its efficiency and effectiveness in fog environment, we implement the scheme on fog environment and also compare our scheme with a centralized scheme.

Dynamic QAM Mapping for Physical-Layer Security Using Digital Chaos

This paper proposes and experimentally demonstrates a physical-layer data encryption scheme using multi-fold chaotic mapping of quadrature amplitude modulation (QAM) symbols in orthogonal frequency-division-multiplexed passive optical network (OFDM-PON). Dynamic radius and phase offsets are added in the standard QAM during QAM mapping on constellation using digital chaos. Due to the dynamic chaotic radius and phase offsets, the QAM symbols are mapped over the entire constellation plane, and thus the random, flexible QAM mapping is reconstructed to provide high-level security during data transmission. Since the chaotic offsets along with the data permutations are independently predetermined by a hyper digital chaos, the multi-fold data encryption creates an overall key space of ~10340 to enhance the physical-layer security. Successful transmission experiment of 9.4-Gb/s, 16-QAM encrypted OFDM data is demonstrated over a 22-km standard single-mode fiber in OFDM-PON. Moreover, with the use of dynamic mapping of QAM symbols, the transmission performance is not significantly degraded after implementing the proposed multi-fold secure data encryption.

Security and Privacy Preservation Scheme of Face Identification and Resolution Framework Using Fog Computing in Internet of Things

Face identification and resolution technology is crucial to ensure the identity consistency of humans in physical space and cyber space. In the current Internet of Things (IoT) and big data situation, the increase of applications based on face identification and resolution raises the demands of computation, communication, and storage capabilities. Therefore, we have proposed the fog computing-based face identification and resolution framework to improve processing capacity and save the bandwidth. However, there are some security and privacy issues brought by the properties of fog computing-based framework. In this paper, we propose a security and privacy preservation scheme to solve the above issues. We give an outline of the fog computing-based face identification and resolution framework, and summarize the security and privacy issues. Then the authentication and session key agreement scheme, data encryption scheme, and data integrity checking scheme are proposed to solve the issues of confidentiality, integrity, and availability in the processes of face identification and face resolution. Finally, we implement a prototype system to evaluate the influence of security scheme on system performance. Meanwhile, we also evaluate and analyze the security properties of proposed scheme from the viewpoint of logical formal proof and the confidentiality, integrity, and availability (CIA) properties of information security. The results indicate that the proposed scheme can effectively meet the requirements for security and privacy preservation.

Probably Secure Keyed-Function Based Authenticated Encryption Schemes for Big Data

Security, privacy and data integrity are the critical issues in Big Data application of IoT-enable environment and cloud-based services. There are many upcoming challenges to establish secure computations for Big Data applications. Authenticated encryption (AE) plays one of the core roles for Big Data’s confidentiality, integrity, and real-time security. However, many proposals exist in the research area of authenticated encryption. Generally, there are two concepts of nonce respect and nonce reuse under the security notion of the AE. However, recent studies show that nonce reuse needs to sacrifice security bound of the AE. In this paper, we consider nonce respect scheme and probabilistic encryption scheme which are more efficient and suitable for big data applications. Both schemes are based on keyed function. Our first scheme (FS) operates in parallel mode whose security is based on nonce respect and supports associated data. Furthermore, it needs less call of functions/block-cipher. On the contrary, our second scheme is based on probabilistic encryption. It is expected to be a light solution because of weaker security model construction. Moreover, both schemes satisfy reasonable privacy security bound.

An Efficient User Authentication and User Anonymity Scheme with Provably Security for IoT-Based Medical Care System

In recent years, with the increase in degenerative diseases and the aging population in advanced countries, demands for medical care of older or solitary people have increased continually in hospitals and healthcare institutions. Applying wireless sensor networks for the IoT-based telemedicine system enables doctors, caregivers or families to monitor patients’ physiological conditions at anytime and anyplace according to the acquired information. However, transmitting physiological data through the Internet concerns the personal privacy of patients. Therefore, before users can access medical care services in IoT-based medical care system, they must be authenticated. Typically, user authentication and data encryption are most critical for securing network communications over a public channel between two or more participants. In 2016, Liu and Chung proposed a bilinear pairing-based password authentication scheme for wireless healthcare sensor networks. They claimed their authentication scheme cannot only secure sensor data transmission, but also resist various well-known security attacks. In this paper, we demonstrate that Liu–Chung’s scheme has some security weaknesses, and we further present an improved secure authentication and data encryption scheme for the IoT-based medical care system, which can provide user anonymity and prevent the security threats of replay and password/sensed data disclosure attacks. Moreover, we modify the authentication process to reduce redundancy in protocol design, and the proposed scheme is more efficient in performance compared with previous related schemes. Finally, the proposed scheme is provably secure in the random oracle model under ECDHP.

A cryptographic model based on logistic map and a 3-D matrix

A new data encryption scheme is proposed based on the position substitution, shuffling and a diffusion process. The algorithm searches for the position of a text symbol in randomly generated 3-D matrix and subsequently replaces the symbol. The positions in matrix are shuffled in a retraceable manner depending upon the encryption key. Further, the substituted positions are diffused so that all the cipher text get affected even if a single symbol is changed. The system uses a Logistic map for matrix generation and position shuffling. The algorithm also checks the integrity of cipher text by including its parity in encrypted form. As the system includes substitution, permutation and diffusion, high level of cryptographic complexity is achieved in cipher text. The proposed method is key sensitive output cipher text is random in nature and has avalanche effect. The key length chosen is sufficient to resist a brute force attack. The cryptographic model as a whole demonstrate remarkable resistance to statistical attacks which is a key feature. Detailed runtime comparison with different known cryptographic systems is given.

Joint compression and encryption of visual data using orthogonal parametric transforms

Abstract In this paper, we introduce a novel method of joint compression and encryption of visual data. In the proposed approach the compression stage is based on block quantization while the encryption uses fast parametric orthogonal transforms of arbitrary forms in combination with a novel scheme of intra-block mixing of data vectors. Theoretical analysis of the method indicates no impact of encryption stage on the effectiveness of block quantization with an additional step of first order entropy coding. Moreover, a series of experimental studies involving natural images and JPEG lossy compression standard were performed. Here, the obtained results indicate a high level of visual content concealment with only a small reduction of compression performance. An additional analysis of security allows to state that the proposed method is resistant to cryptanalytic attacks known for visual data encryption schemes including the most efficient NZCA attack. The proposed method can be also characterized by high computational efficiency and feasibility of hardware realizations.

A Bitmap based Data Encryption Scheme in Cloud Computing

With the development of cloud computing, the interest on spatial database outsourcing has been sharply increasing. Therefore, researches on data encryption methods for protecting location data privacy in outsourced databases have been actively performed. However, the existing data encryption schemes do not consider data distribution when generating data clusters and they use a tree-based index for processing k-nearest neighbor queries. As a result, the performance of query processing algorithm can fluctuate depending on the tree depth. To solve these problems, we propose a densityaware data encryption scheme and a query processing algorithm for database outsourcing. Our density-aware data encryption scheme uses a grid index to generate clusters and transforms the original data information into a bitmap. To provide efficient query processing, we use an algebraic coding based hash index to reduce the data retrieval time. Finally, in performance analysis, we show that the proposed scheme provides better query processing performance and guarantees the privacy of users, compared with the existing schemes.

A Bitmap based Data Encryption Scheme in Cloud Computing

With the development of cloud computing, the interest on spatial database outsourcing has been sharply increasing. Therefore, researches on data encryption methods for protecting location data privacy in outsourced databases have been actively performed. However, the existing data encryption schemes do not consider data distribution when generating data clusters and they use a tree-based index for processing k-nearest neighbor queries. As a result, the performance of query processing algorithm can fluctuate depending on the tree depth. To solve these problems, we propose a densityaware data encryption scheme and a query processing algorithm for database outsourcing. Our density-aware data encryption scheme uses a grid index to generate clusters and transforms the original data information into a bitmap. To provide efficient query processing, we use an algebraic coding based hash index to reduce the data retrieval time. Finally, in performance analysis, we show that the proposed scheme provides better query processing performance and guarantees the privacy of users, compared with the existing schemes.

Location-based data encryption for wireless sensor network using dynamic keys

Secure data transmission for the wireless sensor network (WSN) is always an important issue. The technique of traditional authenticated encryption allows a sensor node to generate a ciphertext which can only be decrypted and authenticated by a designated data aggregator. The convertible property further enables the aggregator to announce an ordinary signature for public verification. To alleviate the harm of key exposure, dynamic key systems are especially suitable for implementing in the large-scale deployment environments such as WSNs. Combining the concept of location and the merits of dynamic keys, we propose a location-based data encryption scheme for WSNs. To the best of our knowledge, this is the first concrete construction considering the properties of location and dynamic keys in WSNs. The proposed scheme not only is conversion-free, but also provides unlimited time periods and random-access key-updates. Moreover, we utilize some reduction models to prove the security of our protocol.

Encryption for Implantable Medical Devices Using Modified One-Time Pads

We present an electroc1ardiogram (ECG)-based data encryption (EDE) scheme for implantable medical devices (IMDs). IMDs, including pacemakers and cardiac defibrillators, perform therapeutic or even life-saving functions and store sensitive data; therefore, it is important to prevent adversaries from having access to them. The EDE is designed with the ability to provide information-theoretically unbreakable encryption where two well-known techniques of classic one-time pads (OTPs) and error correcting codes are combined to achieve a cryptographic primitive for IMDs. Unlike other ECG-based key agreement schemes where ECG features are used to facilitate a key distribution, in the EDE scheme, random binary strings generated from ECG signals are directly used as keys for encryption. OTP keys are generated by the IMD and the programmer, respectively, before each encryption attempt; thus, the EDE does not require a cryptographic infrastructure to support a key distribution, storage, revocation, and refreshment. Protected by the EDE, IMDs could not be accessed by adversaries; however, medical personnel can have access to them by measuring real-time ECG data in emergencies. Therefore, the EDE design achieves a balance of high security and high accessibility for the IMD. Our data and security analysis shows that the EDE is a viable scheme for protecting IMDs.