Search

E-documents are carriers of sensitive data, and their security in the open network environment has always been a common problem with the field of data security. Based on the use of encryption schemes to construct secure access control, this paper proposes a fusion data security protection scheme. This scheme realizes the safe storage of data and keys by designing a hybrid symmetric encryption algorithm, a data security deletion algorithm, and a key separation storage method. The scheme also uses file filter driver technology to design a user operation state monitoring method to realize real-time monitoring of user access behavior. In addition, this paper designs and implements a prototype system. Through the verification and analysis of its usability and security, it is proved that the solution can meet the data security protection requirements of sensitive E-documents in the open network environment. [ABSTRACT FROM AUTHOR]

Inspired by the fact that attribute-based encryption technology can effectively realize cloud data security sharing and access control, this paper proposed a block chain data sharing model based on attribute-based encryption to ensure the privacy protection and full security in the current block chain system. The model was based on the ciphertext policy attribute-based encryption ( CP-ABE) scheme proposed by Waters. First of all, in the secret key generation phase, the data user entrusted multiple nodes to jointly calculate and store part of the private key, while other data users were not allowed to obtain the complete key, thus improving the efficiency of private key generation. Secondly, in order to prevent the abuse of key and the management of parameters in the algorithm, this paper defined a key transfer transaction data structure, and realized the accountability of CP-ABE algorithm. Finally, by building a shared chain with the function of collaborative computing and storage on and off the chain, it realized the effective integration of attribute-based encryption and block chain system. Security analysis and experimental simulation results show that the proposed model has certain optimization in the computational efficiency of key generation and actual business scenarios to meet the needs of engineering applications. [ABSTRACT FROM AUTHOR]

Secure search is important for promoting the widespread use of cloud computing. As a common situation, when data users search for certain data from multiple data owners, searchable encryption raises the possibility of secure searches over encrypted cloud data. However, most of the existing schemes for the multi-owner model are based on asymmetric searchable encryption, which is inefficient for searching unstructured data. In addition, a Trusted Third-Party (TTP) is often required to assist in encrypting indexes or enforcing access control, which increases the cost and becomes a bottleneck to system security. To overcome these limitations, this paper proposes a secure multi-keyword ranked search scheme with access control for the multi-owner model, named MOMRS-AC. Specifically, we extend the basic secure KNN-based search scheme considering the single-owner model to an efficient multi-keyword ranked search scheme without TTP for the multi-owner model, and provide a signature algorithm to verify the search results. Also, we construct a fine-grained access control that supports recipient anonymity, large-universe and decentralized authorities. To lower the overhead of data users, we extend MOMRS-AC to support outsourcing of verification and decryption. Security and performance analyses demonstrate that MOMRS-AC is secure and efficient for the multi-owner model in practice. [ABSTRACT FROM AUTHOR]

With the advent of the digital society, data has become an important factors of productivity. In order to fully realize the values of data, access control as a technology of data security sharing is a fundamental component of data security and data governance. Therefore, this paper proposed a cipher-text access control scheme based on blockchain aiming at improving security of cipher-text and secret key in distributed architecture. Firstly, this scheme verified the authenticity and integrity of outsourced cipher-text storage by using cipher-text generation algorithm and verifiable smart contract. Secondly, it designed an attribute key based on off-chain secure multi-party computation (SMC) to ensure the security of the user's secret key and the uniqueness of the secret key, which could reduce computational complexity of the single attribute authority, and could effectively protect the user's attribute privacy and avoided the single point of failure. Finally, through defining the formatted transaction data structure, it realized the whole process accountability of access control on the blockchain. Security analysis, performance analysis and experimental simulation results show that proposed scheme meets the requirements of general blockchain in terms of security and performance, and provides a general block chain access control scheme for data sharing. [ABSTRACT FROM AUTHOR]

In order to ensure the security of users’ information effectively, this paper investigates ciphertext-based attribute encryption. Homomorphic encryption can settle the problems of data privacy in cloud environments, in the way that can be operated directly to achieve the same result as for plaintext operations. In this paper, on the premise of attribute encryption, we propose an attribute-based fully homomorphism encryption scheme with LSSS matrix and a ciphertext-based retrieval scheme on this basis. Firstly, the retrieval scheme supports fine-grained cum flexible access control along with “Query-Response” mechanism to enable users to efficiently retrieve desired data from cloud servers. Secondly, the scheme supports considerable flexibility to revoke system privileges from users without updating the key client, which reduces the burden of the client greatly. Security analysis shows that the scheme can resist collusion attack. A comparison of the performance with existing CP-ABE schemes indicates that our scheme reduces the computation cost greatly for users and guarantees only the owners of the evaluation keys can perform ciphertext retrieval, which is also one of the main advantages of the proposed scheme. [ABSTRACT FROM AUTHOR]

Nowadays, more and more data are stored on cloud for sharing in vehicular networks, but the increasing number of cloud data security incidents makes how to guarantee confidentiality of sharing data one of the main concerns. Attribute-based encryption is considered as a suitable method to solve this issue. However, the requirements of lightweight and privacy make it difficult to apply the existing attribute-based encryption schemes directly in vehicular networks. In this paper, we put forward an access control scheme with lightweight decryption and conditional authentication for secure data sharing in vehicular networks. In this scheme, we extend elliptic-curve cryptography-based key-policy attribute-based encryption scheme with token-based decryption for lightweight access control. Moreover, we integrate Elliptic Curve Qu-Vanstone implicit certificate with ELGamal encryption algorithm to achieve both mutual authentication and conditional privacy protection. The performance analysis shows that the proposed scheme requires less time for both encryption and decryption on the user side. The security analysis shows that the proposed scheme can provide conditional anonymity. [ABSTRACT FROM AUTHOR]

Cloud computing becomes more sophisticated to provide different services at different levels of user access. Even though various services are accessed at a different level, the security of data being accessed is a highly challenging one. However, there is a number of encryption approaches discussed toward the problem of cloud security; they suffer to achieve higher security as required. The previous ABFD (attribute-based flexible delegation) algorithm uses a set of policies in encrypting the data with specific keys mentioned in the policy. However, the leakage of encryption policy would introduce poor security which can be overcome by adopting multitype encryption standards in different time windows. According to this, an efficient time-variant attribute-based multitype encryption algorithm (TAM) is presented in this paper. The TAM algorithm maintains a taxonomy of attributes and related keys to be used for encryption and decryption. The corresponding keys have been used to generate the ciphertext. The content of taxonomy has been dynamically changing in each time window which makes the difference in integrity management and security performance than previous algorithms. The TAM approach introduces a higher security performance up to 89.6%. The method also reduces the time complexity up to 21 s and increases the throughput performance up to 96%. [ABSTRACT FROM AUTHOR]

Fingerprint systems have received a great deal of research and attracted many researchers' effort since they provide a powerful tool for access control and security and for practical applications. A literature review of the techniques used to extract the features of fingerprint as well as recognition techniques is given in this paper. Some of the reviewed research articles have used traditional methods such as recognition techniques, whereas the other articles have used neural networks methods. In addition, fingerprint techniques of enhancement are introduced. [ABSTRACT FROM AUTHOR]

In recent times, there has been increasing interest in storing data securely in the cloud environment. To provide owners of data stored in the cloud with flexible control over access to their data by other users, we propose a role-based encryption (RBE) scheme for secure cloud storage. Our scheme allows the owner of data to store it in an encrypted form in the cloud and to grant access to that data for users with specific roles. The scheme specifies a set of roles to which the users are assigned, with each role having a set of permissions. The data owner can encrypt the data and store it in the cloud in such a way that only users with specific roles can decrypt the data. Anyone else, including the cloud providers themselves, will not be able to decrypt the data. We describe such an RBE scheme using a broadcast encryption algorithm. The paper describes the security analysis of the proposed scheme and gives proofs showing that the proposed scheme is secure against attacks. We also analyse the efficiency and performance of our scheme and show that it has superior characteristics compared with other previously published schemes. [ABSTRACT FROM AUTHOR]

Shared data access maximizes resource utilization on the Internet but raises the issue of data security. We consider a method of shared data access control whereby the data is sub-divided into categories and each encrypted with a unique cryptographic key that is distributed to the user group requiring access. Key management can be simplified by classifying every user into exactly one of a number of disjoint groups that are partially ordered such that lower level keys are mathematically derivable from higher level keys, but not the reverse. The drawback in this approach is that changes in group membership imply updating both the affected group key and those that are derivable from it. Moreover, the data encrypted with the affected keys must be re-encrypted with the new keys to preserve data security. In the worst case, when the affected group is at the highest level of the hierarchy, the entire hierarchy is affected. This paper presents an algorithm that minimizes the cost of key replacement (rekeying) by associating a timestamp to each key. The timestamp and key are used to compute a verification signature that is used to authenticate users before data access is granted. Thus, whenever group membership changes, instead of rekeying and re-encrypting the affected data, only the timestamp is updated and a new verification signature computed. The new scheme is analyzed using both a time complexity and experimental analysis. [ABSTRACT FROM AUTHOR]

Wireless body area network (WBAN) provides a medium through which physiological information could be harvested and transmitted to application provider (AP) in real time. Integrating WBAN in a heterogeneous Internet of Things (IoT) ecosystem would enable an AP to monitor patients from anywhere and at anytime. However, the IoT roadmap of interconnected ‘Things’ is still faced with many challenges. One of the challenges in healthcare is security and privacy of streamed medical data from heterogeneously networked devices. In this paper, we first propose a heterogeneous signcryption scheme where a sender is in a certificateless cryptographic (CLC) environment while a receiver is in identity-based cryptographic (IBC) environment. We then use this scheme to design a heterogeneous access control protocol. Formal security proof for indistinguishability against adaptive chosen ciphertext attack and unforgeability against adaptive chosen message attack in random oracle model is presented. In comparison with some of the existing access control schemes, our scheme has lower computation and communication cost. [ABSTRACT FROM AUTHOR]