Key Encryption Research Articles

FLoRa: Sequential fuzzy extractor based physical layer key generation for LPWAN

The security of Low-Power Wide-Area Network (LPWAN) mainly relies on encryption for ensuring packet integrity and confidentiality. Unfortunately, the latest LPWAN specifications refrain from specifying how to distribute keys for encryption. In this paper, we tackle this problem via physical layer security, which exploits the channel characteristics to generate secret keys at the physical layer. In order to generate consistent keys from noisy feature sources and to achieve high reconciliation success rate, we propose FLoRa, a physical layer key generation system for LPWAN based on sequential fuzzy extractor. An adaptive multi-bit quantization algorithm is first proposed to generate the initial key, which accelerates the bit generation rate at the start-up procedure. We then design a novel fuzzy extractor by sequentially slicing the initial key, which improves the reconciliation success rate, as well as reduces the key reconciliation time. We implement FLoRa in a LoRaWAN based network prototype and evaluate it by conducting extensive indoor and outdoor experiments. Experimental results reveal that FLoRa is capable of generating consistent secret keys with high key generation performance in both static and dynamic network environments.

A Hybrid Multi-Cloud Framework Using the IBBE Key Management System for Securing Data Storage

Information storage and access in multi-cloud environments have become quite prevalent. In this paper, a multi-cloud framework is presented that secures users’ data. The primary goal of this framework is to secure users’ data from untrusted Cloud Service Providers (CSPs). They can collude with other malicious users and can hand over users’ data to these malicious users for their beneficial interests. In order to achieve this goal, the data are split into parts, and then each part is encrypted and uploaded to a different cloud. Therefore, client-side cryptography is used in this framework. For encrypting users’ data, the BDNA encryption technique is used. This framework presents a hybrid cryptographic approach that uses Identity-based Broadcast Encryption (IBBE) for managing the keys of the symmetric key algorithm (BDNA) by encrypting them with the particular version of IBBE. The work presented in this research paper is the first practical implementation of IBBE for securing encryption keys. Earlier, IBBE was only used for securely broadcasting data across many users over a network. The security of this hybrid scheme was proved through Indistinguishable Chosen-Ciphertext Attacks. This double encryption process makes the framework secure against all insiders and malicious users’ attacks. The proposed framework was implemented as a web application, and real-time storage clouds were used for storing the data. The workflow of the proposed framework is presented through screenshots of different working modules.

Security analysis on an interference-based optical image encryption scheme.

In this paper, the security strength of the improved optical cryptosystem based on interference has been evaluated. Compared to the previous interference-based cryptosystems in which the plaintext is encoded into two phase-only masks (POMs), here the plaintext is encoded into a POM and an amplitude mask (AM). Since the information of the plaintext cannot be recovered directly when one of the masks is released in the decryption process of the improved cryptosystem, it seems that it is free from the silhouette problem. However, we found that the random phase mask (RPM) serving as the encryption key is not related to the plaintext. Thus, it is possible to recover the RPM first by using the known-plaintext attack (KPA). Moreover, the POM and the AM generated in the encryption path only contains the phase and amplitude information, respectively. Thus, these can be utilized as additional constraints in the proposed iterative process. Based on these findings, two kinds of hybrid attacks, including a KPA and the iterative processes with different constraints, are proposed to crack the improved cryptosystem. In the designed KPA with a pair of the known plaintext and its corresponding masks, the RPM is recovered first. With the aid of the recovered RPM, two iterative processes with different released masks are proposed to recover the information of the plaintext without any knowledge of another mask. To the best of our knowledge, this is the first time that the existence of the silhouette problem in the cryptosystem under study has been reported. Numerical simulation has been carried out to validate the feasibility and effectiveness of the proposed hybrid attacks.

Enhanced pairing‐free identity‐based broadcast authentication protocol in WSN using ElGamal ECC

AbstractAuthentication among the various communicating devices within wireless sensor networks during broadcasting is most significant among the other primary security services. This authentication during broadcasting services allows multiple mobile end‐devices to transmit messages dynamically and securely for fasten consumer tracking and sustaining privacy of the data transferred in the insecure sensor network. To enhance this authentication protocol for secure end‐users message distribution, this research work has introduced a novel identity (ID) based cryptographic technique that employs ElGmal‐elliptic‐curve cryptography and digital signature without implementing bilinear paring operation to reduce huge burden of computation overhead. Additionally, to accelerate the performance of the proposed authentication protocol, the size of the signature along with the encryption key is minimized. Eventually, the authentication protocol provides comparatively less computational complexity with secure and faster key management. The performance analysis supports the aforesaid claim as well as reflects the supremacy of the proposed scheme over the handover authentication protocol and bilinear pairings based authentication schemes.

Implementasi Algoritma Quicksort Untuk Pembangkitan Kunci Algoitma RSA Pada Pengamanan Data Audio

The RSA algorithm has two keys, namely the public key and the private key. This algorithm has security which lies in the difficulty in calculating discrete algorithms. Both encryption and decryption keys are integers. The RSA algorithm is a type of asymmetric cryptography algorithm, which consists of two keys, namely the public key for encryption and the private key for decryption. In the RSA algorithm, the distributed key is a public key which is not required to be kept secret while the private key is either stored or not distributed. Everyone who has the public key can perform the encryption process but the results of the encryption can only be read by the person who has the private key. To increase the strength of the algorithm, the key used to perform the encryption and decryption process will be modified first using a randomization algorithm, namely the Quicksort Algorithm. The Quicksort algorithm is a sorting algorithm developed by Tony Hoare, the average sorting performance is O (n log n) to sort n items. The purpose of using the Quicksort algorithm is to make the resulting key more difficult to guess, making it difficult for cryptanalysts to read the message or information.

ЦИФРОВА ТРАНСФОРМАЦІЯ КІБЕРБЕЗПЕКИ НА МІКРОРІВНІ В УМОВАХ ВОЄННОГО СТАНУ

The article describes the possible transformational processes of cybersecurity of business entities in martial law. Authors argue that the security criteria of modern digital entrepreneurship include the following mandatory facts: data must always be encrypted during storage and transmission; encryption must take place at the client level; only the client should have access to the encryption keys; actual data should not be transmitted through open mail channels; the company must control the storage of encrypted information and access keys to it.
 A number of current external and internal threats to doing business are listed, including network intrusion, loss of devices with saved passwords, and encryption viruses. Main tasks of enterprises in terms of cybersecurity, namely: identification of potential threats to cybersecurity of enterprises and vulnerabilities; cyber incident prevention; neutralization or minimization of threats to information security of the enterprise.
 Authors consider the impact of the information security management system ISO / IEC 27001: 2013 on the work of organizations. It has been found that this system provides an opportunity to implement best practices to improve data protection and eliminate the threat of security breaches of information systems.
 The article focuses on the fact that in the framework of cybersecurity in martial law and in the further digitization of activities at the micro level, the basic and priority tasks should be mainly new quality of production processes of technological laboratories: planning work in accordance with requirements industry standards, guidelines and best practices; sampling into the system by assigning it a specific identifier; calculation of results and their design.
 Entrepreneurial practice shows that, for example, Ramsomware is the most common threat in the implementation of business processes. Ramsomware is divided into two main types – cryptographers (“cryptoransomware”) and blockers (blockers –“blockers”). Encryptors, when they get to the main computer of the enterprise, encrypt valuable files such as documents, photos, databases. Ramsomware’s business threats include, for example, temporary data loss, which can completely disrupt critical business processes; constant data losses, leading to a decline in the company’s competitiveness, reduced sales revenue in the long run, disrupted continuous access to data.
 Authors of the article came to the conclusion that in the light of such criminal cyberattacks, of course, it is logical to develop various types of protection in order to protect data from their interception. This protection must be: invisible to the naked eye; have a secure mail channel; e-mail certificate; e-mail safe; e-mail shredder; cybersecurity center; encryption of letters and attachments; protected view.

ПРИМЕНЕНИЕ РАНДОМИЗАЦИИ АЛГОРИТМОВ ШИФРОВАНИЯ В АВТОМАТИЗИРОВАННОЙ СИСТЕМЕ ЗАЩИТЫ ИНФОРМАЦИОННЫХ РЕСУРСОВ ПРОМЫШЛЕННОГО ПРЕДПРИЯТИЯ

The aim of the study is to develop a methodology for applying randomized encryption algorithms in automated systems of an industrial enterprise for protecting information resources. The article is devoted to solving the problem of generating sequences of algorithms and encryption keys using the randomization mechanism to ensure communication confidentiality between geographically distributed departments of an industrial enterprise. The novelty of the work is the proposed creative concept of encryption process automation, which allows increasing the level of information resource protection. The study results are recommendations for constructing complex automated encryption systems using algorithm traces

"Exploring NoSQL Databases and Cloud Computing Security Implementations"

It is commonly known that cloud computing, with its prospective benefits, has completely changed the enterprise IT sector. Due to the advantages of worryfree hardware maintenance, many businesses and sectors are transitioning to the cloud computing era. Large businesses are still not migrating to the cloud, which is reducing the market share of cloud computing. From the standpoint of the consumer, the biggest obstacles to using the cloud for data storage are security and privacy concerns. This paper outlines the numerous restrictions relating to data security and privacy protection issues and provides a few technologies, such as Trend Micro's SecureCloudTM, which enables users to function in the cloud safely and securely. Additionally, employing NoSQL databases, personal data security on the cloud. SecureCloud, FIPS 140-2, NoSQL databases, NSA, IAM rules, Accumulo Apache, Amazon DynamoDB, MarkLogic are some of the terms in the index.As a result, cloud users can benefit from the services provided by the cloud while still having total control over their data thanks to encryption keys. The SecureCloudTM uses VM-level encryption to encrypt data in working storage, enabling the use of distinct encryption keys for each user's particular data. This lessens the possibility of recycled disk blocks being sent to other users or of a configuration error causing data privacy violations. The third is commonplace encryption. Data is encrypted using Industry Standard AES by SecureCloudTM, making it inaccessible to anybody missing the encryption keys. The ability of SecureCloudTM to encrypt data gives users advantages when switching users or terminating storage.

Intelligent compression then encryption scheme for resource constrained sustainable and smart healthcare environment

With the latest and emerging developments of artificial technologies, ubiquitous computing techniques become necessary in day to day lives, particularly in healthcare. Smart healthcare systems involve electronic health records (EHR) sharing system that considerably shares the medical data and delivers proper aid to the patients and research communities. At the same time, the smart healthcare system is a resource constraint environment where large amount of healthcare data needs to be stored on the cloud server. Therefore, data compression can significantly reduce a large amount of data transmission and storage process, thereby achieving effective memory and resource utilization. Compression then encryption (CTE) is an effective way to achieve effective resource utilization and security in the smart healthcare environment. Encryption transforms the EHR data to an illegible format offering considerable authentication of the digital form of medicinal data. With this motivation, this paper designs a novel compression then encryption model for secure healthcare data storage and access management (CTE-SHDSA) technique in cloud server. The proposed model involves two main stages namely compression and encryption. Initially, neighboring indexing sequence (NIS) is employed for the data compression process. The NIS-BWT technique makes use of the correlation among the neighboring bits for reducing the amount of redundant data transmission. Besides, an enhanced artificial butterfly optimization with signcryption (EABO-SC) technique is applied to proficient encrypt the compressed data. The EABO algorithm is applied to optimally choose the encryption keys of the SC technique. The extensive set of simulations was performed on benchmark medical datasets and the outcomes are inspected under several evaluation parameters. The experimental values highlighted the superior performance of the presented method on the recent state of art methods.

Correlation operation in the Fresnel domain and truncation operations applied to the simultaneous encryption of two images

A new nonlinear encryption-decryption scheme for two images using: double random phase encoding (DRPE), random phase masks (RPMs), amplitude and phase encoding, correlation operation in Fresnel domain (FrD) and truncation operations (amplitude truncation, AT and phase truncation, PT), is proposed. AT and PT are operations that work on complex-valued functions (images) in a nonlinear way, with the purpose of selecting the information contained in a complex-valued image, respectively. The first step of the encryption scheme is encoding two original images in amplitude and phase. The encryption or decryption scheme utilizes the correlation operation in FrD, AT, PT and two RPMs in a specific way to obtain the encrypted or decrypted images. The use of the AT and PT operations allow a better security of the encryption and decryption schemes because the nonlinearities introduced by these operations and the generation of two new encryption keys. The encrypted image of this proposal is real valued and the correlation operation in FrD introduces two new keys improving the security of the encryption and decryption schemes. The keys of the proposed security schemes are six and the right values of these all keys have to be used in the decryption scheme to recover the two initial images used in the input of the encryption scheme.

High-Capacity Framework for Reversible Data Hiding in Encrypted Image Using Pixel Prediction and Entropy Encoding

While the existing reserving room before encryption (RRBE) based reversible data hiding in encrypted image (RDHEI) schemes can achieve decent embedding capacity, the capacity of the existing vacating room by encryption (VRBE) based schemes is relatively low. To address this issue, this paper proposes a generalized framework for high-capacity RDHEI for both the RRBE and VRBE cases. First, an efficient embedding room generation algorithm (ERGA) is designed to produce large embedding room using pixel prediction and entropy encoding. Then, we propose two RDHEI schemes, one for RRBE, another for VRBE. In the RRBE scenario, the image owner generates the embedding room with ERGA and encrypts the preprocessed image using stream cipher with two encryption keys. Then, the data hider locates the embedding room and embeds the additional encrypted data. In the VRBE scenario, the cover image is encrypted by an improved block modulation and permutation encryption algorithm, where the spatial redundancy in the plain-text image is greatly preserved. Then, the data hider applies ERGA on the encrypted image to generate the embedding room and conducts data embedding. For both schemes, receivers with different authentication keys can conduct either error-free data extraction or error-free image recovery. The experimental results show that the two proposed schemes outperform many state-of-the-art RDHEI schemes. Besides, they can ensure high security level, where the original image can be hardly discovered from the encrypted version before or after data hiding by unauthorized users.

Cross-Layer Device Authentication With Quantum Encryption for 5G Enabled IIoT in Industry 4.0

Industrial Internet of Things (IIoT), a core enabler of Industry 4.0, is evolving rapidly to tackle the challenges imposed by explosive real-time manufacturing data in the context of Internet and telecommunication industry. 5G technology is the key to addressing such challenges. This is done by bypassing upper authentication protocols and supporting small data transmission during initial access, which, however, causes serious security breaches in IIoT device authentication. To solve this, in this article propose a secure cross-layer authentication framework based on quantum walk on circles. The system performs random hash coding on multidomain physical-layer resources to encode and decode device identifiers securely, while using a quantum walk based privacy-preserving protocol to maintain code privacy at arbitrary high level, being controlled by the number of occupied physical resources. The upper bound of decoding errors is derived and a nonconvex integer programming problem of minimizing the bound is formulated to characterize the security performance. The space of one-time keys for encryption is also derived that show how high privacy and scalability advantage is maintained against classical and quantum computers. Finally, we derive novel expressions of failure probability of this new authentication system and numerically show that our scheme can bring ultrahigh level of security and privacy protection with low latency despite attack.

Securing Cloud Data Under Key Exposure

Abstract: Recent news reveal a powerful attacker which breaks data confidentiality by acquiring cryptographic keys, by means of coercion or backdoors in cryptographic software. Once the encryption key is exposed, the only viable measure to preserve data confidentiality is to limit the attacker’s access to the ciphertext. This may be achieved, for example, by spreading ciphertext blocks across servers in multiple administrative domains—thus assuming that the adversary cannot compromise all of them. Nevertheless, if data is encrypted with existing schemes, an adversary equipped with the encryption key, can still compromise a single server and decrypt the ciphertext blocks stored therein. In this paper, we study data confidentiality against an adversary which knows the encryption key and has access to a large fraction of the ciphertext blocks[3]. To this end, we propose Bastion, a novel and efficient scheme that guarantees data confidentiality even if the encryption key is leaked and the adversary has access to almost all ciphertext blocks. We analyze the security of Bastion, and we evaluate its performance by means of a prototype implementation. We also discuss practical insights with respect to the integration of Bastion in commercial dispersed storage systems.

Blockchain-based mobile crowdsourcing model with task security and task assignment

Crowdsourcing is a task assignment technology that has emerged in recent years, enabling companies to reduce costs and increase work efficiency. Most of the current crowdsourcing systems (BCSs) built on blockchain focus on solving privacy issues and use rigorous proof protocols for task and solution security. Such systems cannot be directly applied in mobile environments because it would lead to excessive computational overhead for the endpoint. To achieve confidentiality of crowdsourcing tasks during transmission while reducing the energy consumption of mobile devices and optimizing task assignment results, in this paper, we develop a blockchain-based crowdsourcing model. We first build a model structure consisting of basic components, such as users, smart contracts, and blockchain, and design contracts to implement various crowdsourcing operations, such as registering, publishing tasks, and acquiring solutions. Unlike before, the ciphertext of the task and the encrypted secret key are embedded into the contract. This, together with the three operations we designed for users to interact with the smart contracts, can effectively protect the crowdsourcing data from being stolen while using the address anonymity of Ethereum to ensure the privacy of users. During task assignment, we use the DBSCAN algorithm to delineate each valid service area and implement the established multiobjective planning model within each area to achieve as many benefit goals as possible in the best way. Finally, we implement our prototype on the Ethereum test network Ropsten. The experimental results show that the cost overhead of the designed model is acceptable to mobile users, and the security analysis establishes the confidentiality of the designed operations.

A Novel High-Speed Data Encryption Scheme for Internet of Medical Things Using Modified Elliptic Curve Diffie–Hellman and Advance Encryption Standard

The security of data in an IoT network is of utmost importance. The medical IoT devices need to implement the security protocols in the devices to safeguard the crucial information. This paper proposes a novel high-speed data encryption scheme using elliptic curve cryptography (ECC) for key generation, key length reduction, Diffie–Hellman key exchange, SHA-256 and advance encryption standard (AES). The proposed hybrid data encryption scheme begins with elliptic curve key generation. Each authorized user in the broadcast range generated a private key using ECC. The proposed key reduction algorithm reduces the size of the secret key generated. This key is exchanged efficiently between the broadcast members using Diffie–Hellman key exchange. Each user then generates their final encryption keys. These keys are encoded using SHA-256 algorithm for further security. These keys are then used to encrypt the data using AES algorithm and sent to the cloud. The intended receivers can check the identity of the sender and decrypt the data using their own keys. The proposed method also includes user identity authentication. The origin of the message is verified to authenticate the sender of the message. This implementation is apt for home automation applications where data collected by medical devices like Fitbit and watches need to be shared among multiple users. The proposed method is at par in providing security to the data in much less time. The throughput, key generation time, key length, encryption time, decryption time and memory usage, Avalanche effect are efficient in comparison to existing methods.

Hierarchical Access Control in Cloud Computing

Access control is an essential security component of cloud computing, and hierarchical access management is of particular interest because different access privileges are granted in practice. As a solution to versatile and fine-grained hierarchical access control in cloud computing, this paper also presents a hierarchical key assignment scheme based on linear geometry. The encryption key of each class in the hierarchy is connected with a private vector and a public vector in our scheme, and the inner product of an ancestor class's private vector as well as the public variable of its decedent’s class could be used to deduce the encryption method of that descendant class. The proposed scheme is among the direct access strategies on hierarchical access control, which also means so each class at a higher level can straight derive this same encryption key of its decedent’s class without and need to iterate. In furthermore to this basic hierarchy key derivation, we propose a dynamic key management mechanism to handle possible changes in the hierarchy efficiently. Under the assumption of pseudo - random number functions, our scheme requires only light computations over a finite field by providing strong key in-distinguishability. Furthermore, the simulation demonstrates that our scheme maximises the trade-off among computation consumption as well as storage space.

An algorithm for using a cross-platform mobile application to protect information in cloud storage

Objective. A high-quality "cloud storage" of data should ensure the confidentiality, integrity and availability of information in the "storage". The use of "cloud storage" for storing information in backups is associated with their possible loss. Ensuring the confidentiality of information in the "cloud storage" implies that by "uploading" data to the "cloud storage", the user must be sure that an attacker will not be able to obtain information from the storage. The aim of the study is to develop an algorithm for using a cross-platform mobile application to protect information in the "cloud storage" of IS.Method. The study is based on the use of a cross-platform approach to creating applications.Result. The analysis of existing approaches and frameworks for the development of crossplatform mobile applications was carried out. It is proposed to create an application based on the Xamarin framework. To ensure the confidentiality of information, it is proposed to encrypt them before uploading data and backup copies of files. Encryption involves hiding the original type of the file from unauthorized use using crypto-algorithms, when the owner of the encryption key is the authorized user. To implement the function of encrypting data and backup copies of files uploaded to the "cloud storage", it is proposed to use the Rijndael symmetric block encryption algorithm, adopted as an encryption standard according to the results of the Advanced Encryption Standard (USA) competition.Conclusion. A cross-platform mobile application can be compiled and run efficiently under iOS and Android operating systems, encrypt files and upload them to the "cloud storage" with the possibility of subsequent decryption.

Reversible data hiding in encrypted images using block-based adaptive MSBs prediction

This paper proposes a reversible data hiding method in encrypted images with a high embedding capacity. In the proposed method, the original image is encrypted using a block-level encryption algorithm based on a chaotic system, which protects the privacy of the original image while maintaining some redundancy of the encrypted image block. For each encrypted block, the data hider first evaluates the embedding capacity based on the accuracy of the most significant bit (MSB) prediction. Then, the data is embedded into every encrypted image block by adaptive-layer MSB substitution. At the receiving side, the receiver first extracts the data from the marked encrypted image and recovers the encrypted image by block-based MSB prediction. Then, the secret message can be obtained with the data hiding key, and the original image can be perfectly reconstructed with the encryption key. Experimental results and analysis show that the embedding capacity is significantly improved.

Compressed sensing based fingerprint imaging system using a chaotic model-based deterministic sensing matrix

A secured compressed sensing (CS) systems design approach uses a novel deterministic sensing matrix to sense and transmit fingerprint images. The performance of the CS system was studied in detail by varying CS and security parameters. The sampling and sparse coefficient are the parameters considered from compressed sensing, whereas the encryption key is from the security scheme. The simultaneous compression and encryption has been achieved by multiplying the sparse modeled data with the proposed deterministic partial bounded orthogonal sensing matrix. A chaotic model-based permutation is applied to scramble the DCT matrix rows to build the sensing matrix. Recovering and decryption of the compressed image are accomplished with the help of the L1 optimization method. The experimental test shows that a sparse vector of 121 widths has been recovered by taking about 25 samples. This indicates that up to 1 : 5 compression ratio is supported without damaging the fingerprint minutiae. If only compression is required without encryption, up to a 1 : 16 ratio can be achieved. The peak signal-to-noise ratio (PSNR) is 27.65 dB for both compression ratios under fulfilments of all necessary security requirements. The 7.20 value of the entropy, histogram analysis, and the correlation analysis show the proposed scheme possesses adequate randomness. Furthermore, the ability of the system resistance against attacks is proved by 100% NPCR (Net Pixel Change Rate) and 0.92% UACI (Unified Average Changing Intensity) values.

Single Pixel Imaging Key for Holographic Encryption Based on Spatial Multiplexing Metasurface.

Compared with the traditional holographic technology, metasurface holography is a promising technology due to the large field angle and high spatial resolution. Thanks to the precise control of phase, amplitude, polarization and so on, metasurface holography provides a flexible platform for light modulation, optical encryption and so on. Besides, the process of image reconstruction by single pixel imaging is similar to a form of encoding and decoding, which is realized by calculating the correlation between a series of modulation patterns and their corresponding intensity signals. In this work, an optical encryption scheme is proposed based on spatial multiplexing metasurface, which depends on the combination of holographic technology and single pixel imaging technology. In the encryption scheme, the image transmitted by single pixel imaging based on metasurface is used as the addressing key of holography. Besides, illuminating different positions of the metasurface can generate different holographic reconstructed images, and there is 50% information overlapped between adjacent sub-holograms. This work makes use of the spatial multiplexing property of metasurface, which can complete different functions, paving the way for the application in the field of optical imaging encryption and information security.