Search

E-documents are carriers of sensitive data, and their security in the open network environment has always been a common problem with the field of data security. Based on the use of encryption schemes to construct secure access control, this paper proposes a fusion data security protection scheme. This scheme realizes the safe storage of data and keys by designing a hybrid symmetric encryption algorithm, a data security deletion algorithm, and a key separation storage method. The scheme also uses file filter driver technology to design a user operation state monitoring method to realize real-time monitoring of user access behavior. In addition, this paper designs and implements a prototype system. Through the verification and analysis of its usability and security, it is proved that the solution can meet the data security protection requirements of sensitive E-documents in the open network environment. [ABSTRACT FROM AUTHOR]

In order to ensure the security of users’ information effectively, this paper investigates ciphertext-based attribute encryption. Homomorphic encryption can settle the problems of data privacy in cloud environments, in the way that can be operated directly to achieve the same result as for plaintext operations. In this paper, on the premise of attribute encryption, we propose an attribute-based fully homomorphism encryption scheme with LSSS matrix and a ciphertext-based retrieval scheme on this basis. Firstly, the retrieval scheme supports fine-grained cum flexible access control along with “Query-Response” mechanism to enable users to efficiently retrieve desired data from cloud servers. Secondly, the scheme supports considerable flexibility to revoke system privileges from users without updating the key client, which reduces the burden of the client greatly. Security analysis shows that the scheme can resist collusion attack. A comparison of the performance with existing CP-ABE schemes indicates that our scheme reduces the computation cost greatly for users and guarantees only the owners of the evaluation keys can perform ciphertext retrieval, which is also one of the main advantages of the proposed scheme. [ABSTRACT FROM AUTHOR]

In smart grid services, electricity consumption data sharing may lead to privacy breaches and the potential for misuse of personal data. Existing data aggregation approaches mainly rely on homomorphic encryption techniques to achieve privacy protection in data sharing, however, lack consideration of controlled anonymity and fine-grained access control. This paper proposes a demand-driven privacy-preserving scheme for anonymous data sharing in smart grids to solve these problems. Specifically, an authenticable pseudonym assignment method is first proposed to achieve controlled anonymity. In addition, a proxy re-encryption technique and a data separation algorithm are implemented to achieve fine-grained access control. Finally, we strictly prove that our scheme achieves privacy protection and authentication, and demonstrate its feasibility and effectiveness through simulations. [ABSTRACT FROM AUTHOR]

In digital intelligence era, the authenticity of data and the privacy protection of data sharing and multiparty collaborative computing are key factors in building a good credit evaluation system. Although blockchain-based credit evaluation system considered this point, more studies on data privacy protection are either only the design of the framework or the proposal of the concept, which is insufficient for privacy protection. To provide a more comprehensive and reliable privacy-preserving scheme, this paper proposes a novel credit evaluation system with secure sharing and multiparty computation based on blockchain. The system consists of five modules: data, access control, data encryption, secure computation and model storage modules. The Hyperledger Fabric blockchain-based data module ensures the authenticity and traceability of the data source. The raw data are encrypted by a linear transformation algorithm in the data encryption module, which minimizes the output and utilization of data when leaving local storage and prevents potential privacy leakage in data sharing to the greatest extent. The phillie homomorphic encryption-based secure computation algorithm in the secure computation module achieves secure data sharing while applying the secure multiparty computation, which makes it possible to data sharing and privacy protection in multiparty computing. The system obtains final summary statistical results without exposing the raw data. Additionally, the final statistical results of the raw data can be inferred from the encrypted data, and their results are consistent. The correctness and accuracy of the linear conversion encryption mechanism and homomorphic encryption algorithm are proven by theoretical analysis. Security analysis and calculation case show the security of the proposed credit evaluation system and the correctness and effectiveness of the proposed encryption scheme. • A novel privacy-preserving credit evaluation system based on blockchain is proposed. • Concerns on the disclosure of commercially sensitive data are solved. • A linear transformation algorithm is used to encrypt the original data. • The data access control policy based on CP-ABE is used in access control module. • The PHE and SMPC algorithm achieve the purpose of data availability and invisibility. [ABSTRACT FROM AUTHOR]

In recent times, there has been increasing interest in storing data securely in the cloud environment. To provide owners of data stored in the cloud with flexible control over access to their data by other users, we propose a role-based encryption (RBE) scheme for secure cloud storage. Our scheme allows the owner of data to store it in an encrypted form in the cloud and to grant access to that data for users with specific roles. The scheme specifies a set of roles to which the users are assigned, with each role having a set of permissions. The data owner can encrypt the data and store it in the cloud in such a way that only users with specific roles can decrypt the data. Anyone else, including the cloud providers themselves, will not be able to decrypt the data. We describe such an RBE scheme using a broadcast encryption algorithm. The paper describes the security analysis of the proposed scheme and gives proofs showing that the proposed scheme is secure against attacks. We also analyse the efficiency and performance of our scheme and show that it has superior characteristics compared with other previously published schemes. [ABSTRACT FROM AUTHOR]

Abstract: Transparent encryption of video content requires to provide a video preview that is left in plaintext, while the enhancement information is encrypted. In this paper we propose three algorithms that provide transparent encryption. The first two ones are based on the idea of generating controlled drift in such a way as to obtain the desired quality level, while the third algorithm employs scalable video coding. We provide experimental results on several video sequences, as well as a security analysis, showing that the proposed algorithms provide an effective framework to perform transparent encryption. [Copyright &y& Elsevier]

Shared data access maximizes resource utilization on the Internet but raises the issue of data security. We consider a method of shared data access control whereby the data is sub-divided into categories and each encrypted with a unique cryptographic key that is distributed to the user group requiring access. Key management can be simplified by classifying every user into exactly one of a number of disjoint groups that are partially ordered such that lower level keys are mathematically derivable from higher level keys, but not the reverse. The drawback in this approach is that changes in group membership imply updating both the affected group key and those that are derivable from it. Moreover, the data encrypted with the affected keys must be re-encrypted with the new keys to preserve data security. In the worst case, when the affected group is at the highest level of the hierarchy, the entire hierarchy is affected. This paper presents an algorithm that minimizes the cost of key replacement (rekeying) by associating a timestamp to each key. The timestamp and key are used to compute a verification signature that is used to authenticate users before data access is granted. Thus, whenever group membership changes, instead of rekeying and re-encrypting the affected data, only the timestamp is updated and a new verification signature computed. The new scheme is analyzed using both a time complexity and experimental analysis. [ABSTRACT FROM AUTHOR]

Wireless body area network (WBAN) provides a medium through which physiological information could be harvested and transmitted to application provider (AP) in real time. Integrating WBAN in a heterogeneous Internet of Things (IoT) ecosystem would enable an AP to monitor patients from anywhere and at anytime. However, the IoT roadmap of interconnected ‘Things’ is still faced with many challenges. One of the challenges in healthcare is security and privacy of streamed medical data from heterogeneously networked devices. In this paper, we first propose a heterogeneous signcryption scheme where a sender is in a certificateless cryptographic (CLC) environment while a receiver is in identity-based cryptographic (IBC) environment. We then use this scheme to design a heterogeneous access control protocol. Formal security proof for indistinguishability against adaptive chosen ciphertext attack and unforgeability against adaptive chosen message attack in random oracle model is presented. In comparison with some of the existing access control schemes, our scheme has lower computation and communication cost. [ABSTRACT FROM AUTHOR]