Shamir Secret Sharing Scheme Research Articles

Decentralized privacy-preserving truth discovery for crowd sensing

Truth discovery is an efficient technique for tackling data conflict problems in crowd sensing for distributed data collection. As the sensory data to be collected may include sensitive information about users, privacy-preserving truth discovery has attracted significant attention in recent years. Most existing studies apply a centralized architecture based on a cryptographic system, which may be vulnerable to single-point attacks and also has a very high computational cost. In this paper, we propose DPriTD, a decentralized privacy-preserving framework for truth discovery in crowd sensing. The proposed approach leverages the additively homomorphic property of Shamir's Secret Sharing scheme to protect user's privacy. DPriTD provides a strict privacy guarantee for crowd sensing applications. Because each sensitive data point, considered to be a secret, is split into a batch of shares, and the secret cannot be recovered unless a sufficient number of shares are aggregated, DPriTD achieves effective truth discovery while protecting sensitive data from collusion attacks. Furthermore, DPriTD is independent of a centralized server and can perform reliably when not all participants are online in real time. It thus enhances the robustness of a crowd sensing system. Extensive experiments conducted on real-world datasets demonstrate the high performance of our method compared with existing mechanisms.

Implementation of Shamir’s Secret Sharing Scheme in Cloud Computing

With the increase in the use of cloud systems, security on cloud systems has become one of the most important items that underlined. Due to the nature of the cloud systems, it is difficult to manage multi-user systems and access control devices, resulting in some security vulnerabilities. In this paper we studied on Cloud Computing with Shamir’s Secret Sharing Scheme with Advanced Encryption Standard (AES) algorithm for encryption and decryption process. For encryption and decryption process AES in Cryptool 1.4.41 has been used. For implementing Shamir Secret Sharing Scheme, Python language has been chosen and Spyder 3.8 has been chosen for environment. As a result, we successfully demonstrate the Shamir’s Scheme implementation with file operations.

Symmetric keyring encryption scheme for biometric cryptosystem

In this paper, we propose a novel biometric cryptosystem for vectorial biometrics called symmetric keyring encryption (SKE), inspired by Rivest's keyring model (2016). Unlike conventional biometric secret-binding primitives, such as fuzzy commitment and fuzzy vault approaches, the proposed scheme reframes the biometric secret-binding problem as a fuzzy symmetric encryption problem using a concept called a resilient vector pair. In this study, this pair resembles the encryption–decryption key pair in symmetric key cryptosystems. This scheme is realized using an index of maximum hashed vectors, a special instance of the ranking-based locality-sensitive hashing function. With a simple filtering mechanism and an [m, k] Shamir's secret-sharing scheme, we show that SKE, both in theory and in an empirical evaluation, can retrieve the exact secret with overwhelming probability for a genuine input yet negligible probability for an imposter input. Although SKE can be applied to any vectorial biometrics, we adopt fingerprint and face vectors in this work. Experiments were performed using the Fingerprint Verification Competition (FVC) and Labeled Face in the Wild (LFW) datasets. We formalize and analyze the threat model for SKE, which involves several major security attacks.

Privacy-Preserving Secret Shared Computations using MapReduce

Data outsourcing allows data owners to keep their data at \emph{untrusted} clouds that do not ensure the privacy of data and/or computations. One useful framework for fault-tolerant data processing in a distributed fashion is MapReduce, which was developed for \emph{trusted} private clouds. This paper presents algorithms for data outsourcing based on Shamir's secret-sharing scheme and for executing privacy-preserving SQL queries such as count, selection including range selection, projection, and join while using MapReduce as an underlying programming model. Our proposed algorithms prevent an adversary from knowing the database or the query while also preventing output-size and access-pattern attacks. Interestingly, our algorithms do not involve the database owner, which only creates and distributes secret-shares once, in answering any query, and hence, the database owner also cannot learn the query. Logically and experimentally, we evaluate the efficiency of the algorithms on the following parameters: (\textit{i}) the number of communication rounds (between a user and a server), (\textit{ii}) the total amount of bit flow (between a user and a server), and (\textit{iii}) the computational load at the user and the server.\B

Public Auditing for Shared Data Utilizing Backups with User Revocation in the Cloud

With the advent of cloud storage, users can share their own data in the remote cloud as a group. To ensure the security of stored data and the normal operation of public auditing, once a user is revoked from the user group, the data files he signed should be resigned by other legal users in the group. In this paper, we propose a new re-signature scheme utilizing backup files to rebuild data which can resist the collusion between the cloud and revoked users, and we use Shamir Secret Sharing Scheme to encrypt data in the multi-managers system which can separate the authority of the group managers. Moreover, our scheme is more practical because we do not need managers to be online all the time. Performance evaluation shows that our mechanism can improve the efficiency of the process of data re-signature.

ANALISIS ATRIBUT KEAMANAN TERHADAP PERBAIKAN PROTOKOL GROUP KEY TRANSFER : PROTOKOL HSU

Protocol Hsu et.al first introduced in 2012 and is the protocol type Group Key Transfer based Linear Shamir's Secret Sharing Scheme (LSSS). The main idea of this protocol is to use m-secret sharing perspective. This protocol assumes that the difficulty of discrete logarithm problem (DLP) (ie given is computationally very difficult/not feasible to count ) and Cryptographyc Diffie Hellman (CDH) (ie given and it is computationally very difficult/not feasible to count ) in . Thus, it needs to analyze the security attributes to this mechanism Protocol Hsu. Good cryptographic protocols should meet the security attributes Known Security Key, Key-Compromise Impersonation Resillience, Unknown Key-Share Resillience, Key Control and Key Confirmation.

Secure File Sharing in Multi-clouds using Shamir’s Secret Sharing Scheme

Cloud computing is a significant model for permitting on-demand network access to shared data, software’s, infrastructure, and platform resources. However, cloud storage needs a certain level of availability, confidentiality, and integrity. Information sensitivity and value encourage users to select a highly secure protocol. This work proposes a new mechanism to increase the user trust in cloud computing using the secret sharing technique. The proposed algorithm is using Base64 encoding to convert any file type to ASCII strings. Base64 strings do not need any extra process to be compressed and this can speed up the share building process. Each string is used to produce N shares (using Shamir Secret Sharing Scheme) where each share is stored in a separate location in the cloud.

Cascade Forward Back-propagation Neural Network Based Group Authentication Using (n, n) Secret Sharing Scheme

Authentication is the important issue over the internet. It results in need of robust security services and schemes. This paper proposes the Shamir Secret Sharing Scheme along with Cascade forward back propagation neural network. The proposed (n, n) Shamir secret sharing scheme is implemented successfully for share encryption and decryption process. It reveals the secret only and only when all the n number of participants are available at the reconstruction process. The generated shares have a best quality so that human brain can’t predict the original secret by any combination. The neural network is already trained for RGB image database and images are stored in particular group having a group category number which is to be predicted as output of neural network. For testing purpose, we take an image, store it in a group, create its shares and now identifies to which group it belongs. The neural network here provides the correct group of that image which we have trained earlier.

Dynamic threshold secret reconstruction and its application to the threshold cryptography

Shamir's (t,n) secret sharing scheme (SS) is based on a univariate polynomial and is the most cited SS in the literature. The secret in a (t,n) SS can be recovered either by exactly t or more than t shareholders. Most SSs only consider when there are exactly t shareholders participated in the secret reconstruction. In this paper, we examine security issues related to the secret reconstruction if there are more than t shareholders participated in the secret reconstruction. We propose a dynamic threshold SS based on a bivariate polynomial in which shares generated by the dealer can be used to reconstruct the secret but having a larger threshold which is equivalent to the exact number of participated shareholders in the process. In addition, we extend the proposed scheme to enable shares which can also be used to establish pairwise keys to protect the reconstructed secret from non-shareholders. Shamir's SS has been used in conjunction with other public-key algorithms in most existing threshold algorithms. Our proposed SS can also be applied to the threshold cryptography to develop efficient threshold algorithms.

Shamir Secret Sharing Scheme with Dynamic Access Structure (SSSDAS): case study on nuclear power plant

Abstract In recent years, due to the sophistication offered by the Internet, strategic organizations like nuclear power plants are linked to the outside world communication through the Internet. The entry of outside world communication into strategic organization (nuclear power plant) increases the hacker's attempts to crack its security and to trace any information which is being sent among the top level officials. Information security system in nuclear power plant is very crucial as even small loophole in the security system will lead to a major disaster. Recent cyber attacks in nuclear power plant provoked information security professionals to look deeply into the information security aspects of strategic organizations (nuclear power plant). In these lines, Shamir secret sharing scheme with dynamic access structure (SSSDAS) is proposed in the paper which provides enhanced security by providing dynamic access structure for each node in different hierarchies. The SSSDAS algorithm can be applied to any strategic organizations with hierarchical structures. In this paper the possible scenarios where SSSDAS algorithm can be applied to nuclear power plant is explained as a case study. The proposed SSSDAS scheme identifies the wrong shares, if any, used for reconstruction of the secret. The SSSDAS scheme also address the three major security parameters namely confidentiality, authentication and integrity.

Privacy-friendly load scheduling of deferrable and interruptible domestic appliances in Smart Grids

The massive integration of renewable energy sources in the power grid ecosystem with the aim of reducing carbon emissions must cope with their intrinsically intermittent and unpredictable nature. Therefore, the grid must improve its capability of controlling the energy demand by adapting the power consumption curve to match the trend of green energy generation. This could be done by scheduling the activities of deferrable and/or interruptible electrical appliances. However, communicating the users’ needs about the usage of their appliances also leaks sensitive information about their habits and lifestyles, thus arising privacy concerns.This paper proposes a framework to allow the coordination of energy consumption without compromising the privacy of the users: the service requests generated by the domestic appliances are divided into crypto-shares using Shamir Secret Sharing scheme and collected through an anonymous routing protocol by a set of schedulers, which schedule the requests by directly operating on the shares. We discuss the security guarantees provided by our proposed infrastructure and evaluate its performance, comparing it with the optimal scheduling obtained by means of an Integer Linear Programming formulation.

Verifiable secret sharing based on the Chinese remainder theorem

ABSTRACTA (t,n) secret sharing scheme (SS) enables a dealer to divide a secret into n shares in such a way that (i) the secret can be recovered successfully with t or more than t shares, and (ii) the secret cannot be recovered with fewer than t shares. A verifiable secret sharing scheme (VSS) has been proposed to allow shareholders to verify that their shares are generated by the dealer consistently without compromising the secrecy of both shares and the secret. So far, there is only one secure Chinese remainder theorem‐based VSS using the RSA assumption. We propose a Chinese remainder theorem‐based VSS scheme without making any computational assumptions, which is a simple extension of Azimuth–Bloom (t,n) SS. Just like the most well‐known Shamir's SS, the proposed VSS is unconditionally secure. We use a linear combination of both the secret and the verification secret to protect the secrecy of both the secret and shares in the verification. In addition, we show that no information is leaked when there are fewer than t shares in the secret reconstruction. Copyright © 2013 John Wiley & Sons, Ltd.

Experimenting with an Intrusion Detection System for Encrypted Networks

Network-based Intrusion Detection Systems (NIDSs) analyse network traffic to detect instances of malicious activity. Typically, this is only possible when the network traffic is accessible for analysis. With the growing use of Virtual Private Networks (VPNs) that encrypt network traffic, the NIDS can no longer access this crucial audit data. In this paper, we present an implementation and evaluation of our approach proposed in Goh et al. (2009). It is based on Shamir's secret-sharing scheme and allows a NIDS to function normally in a VPN without any modifications and without compromising the confidentiality afforded by the VPN.

A Proactive Secret Sharing Scheme in matrix projection method

Proactive Secret Sharing (PSS) scheme is a method to periodically renew n secret shares in a (k, n) threshold-based Secret Sharing Scheme (SSS) without modifying the secret, or reconstructing the secret to reproduce new shares. Traditionally, PSS schemes are developed for the Shamir's SSS which is a single SSS. Bai (2006) developed a multiple-secret sharing scheme using matrix projection. This paper presents a distributed PSS method for the matrix projection SSS. Once the new shares are updated, adversaries cannot discover the secrets from k shares which are mixed with past and present shares.

Lattice-Based Threshold Changeability for Standard Shamir Secret-Sharing Schemes

<para xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> We consider the problem of increasing the threshold parameter of a secret-sharing scheme after the setup (share distribution) phase, without further communication between the dealer and the shareholders. Previous solutions to this problem require one to start off with a nonstandard scheme designed specifically for this purpose, or to have communication between shareholders. In contrast, we show how to increase the threshold parameter of the <emphasis emphasistype="italic">standard</emphasis> Shamir secret-sharing scheme without communication between the shareholders. Our technique can thus be applied to existing Shamir schemes even if they were set up without consideration to future threshold increases. </para>

Several Generalizations of Shamir's Secret Sharing Scheme

A secret sharing scheme is a system designed to share a piece of information or the secret among a group of people such that only authorized people can reconstruct the secret from their shares. Since Blakley and Shamir proposed threshold secret sharing schemes in 1979 independently, many secret sharing schemes have been constructed. In this paper, we present several threshold schemes that are generalizations of Shamir's secret sharing scheme.

The breadth of Shamir's secret-sharing scheme

In 1979 Shamir and Blakley introduced the concept of secret sharing through threshold schemes. Their models were based on polynomials and finite geometries. Since 1979 many researchers have taken the basic concept of a threshold scheme and used other mathematical structures to adapt threshold schemes to meet the needs of many practical situations. In this paper the authors take Shamir's construction and show how it can be used to realize the adapted models. In particular, the authors give new constructions for multipart, multilevel, democratic and prepositioned schemes. It will also be demonstrated how known methods for detecting cheaters and disenrolling participants can be incorporated into Shamir's scheme.