Search

In the last couple of decades, Attribute-Based Encryption (ABE) has been a promising encryption technique to realize fine-grained access control over encrypted data. ABE has appealing functionalities such as (i) access control through encryption and (ii) encrypting a message to a group of recipients without knowing their actual identities. However, the existing state-of-the-art ABEs are based on number-theoretic hardness assumptions. These designs are not secure against attacks by quantum algorithms such as Shor algorithm. Moreover, existing Post-Quantum Cryptography (PQC)-based ABEs fail to provide long-term security. Therefore, there is a need for quantum secure ABE that can withstand quantum attacks and provides long-term security. In this work, for the first time, we introduce the notion of a quantum-secure ABE (qABE) framework that preserves the classical ABE's functionalities and resists quantum attacks. Next, we provide a generic construction of qABE which is able to transform any existing ABE into qABE scheme. Thereafter, we illustrate a concrete construction of a quantum ABE based on our generic transformation qABE and the Waters' ciphertext-policy ABE scheme. [ABSTRACT FROM AUTHOR]

As an emerging and efficient paradigm for multimedia systems, fog networking has attracted widespread attention over the last few years. However, an increasing number of attacks in the current virtualized environments underlines the importance of secure data sharing. Unfortunately, existing multimedia data sharing schemes are not suitable for the networking systems because of the heavy computational operations, latency-sensitive service, and resource-limited devices. Additionally, authenticated and secure communications are crucial issues related to privacy and trust. In this paper, we propose a secure and efficient data sharing scheme with the computation outsourcing capability in a fog networking system by employing ciphertext-policy attribute-based encryption. The scheme supports dynamic policy updating and delegates attribute revocation processes to the cloud and fog by proxy re-encryption. In particular, we build a secure communication protocol for the revocation parameter transmission. We adopt a chaotic map to generate a one-time key, by which the revocation parameters are encrypted. Then, to ensure legal user accessing to the system, we establish a privacy-preserving communication architecture between the user and cloud, which provides authentication. In addition, our scheme provides a verifiable auditing service for the decryption key and shared file, thus ensuring its correctness. Finally, we analyze the security of the scheme, evaluate its performance, and compare it with related works. [ABSTRACT FROM AUTHOR]