Attribute Revocable Multi-Authority Attribute-Based Encryption with Forward Secrecy for Cloud Storage

Kenta NOMURA; Masami MOHRI; Yoshiaki SHIRAISHI; Masakatu MORII

doi:10.1587/transinf.2016OFP0004

Attribute Revocable Multi-Authority Attribute-Based Encryption with Forward Secrecy for Cloud Storage

Kenta NOMURA, Masami MOHRI, Yoshiaki SHIRAISHI, Masakatu MORII

Full Text Views

0

Cite this

Summary :

Internet of Things (IoT) has been widely applied in various fields. IoT data can also be put to cloud, but there are still concerns regarding security and privacy. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is attracted attention in cloud storage as a suitable encryption scheme for confidential data share and transmission. In CP-ABE, the secret key of a user is associated with a set of attributes; when attributes satisfy the access structure, the ciphertext is able to be decrypted. It is necessary that multiple authorities issue and manage secret keys independently. Authorities that generate the secret key can be regarded as managing the attributes of a user in CP-ABE. CP-ABE schemes that have multiple authorities have been proposed. The other hand, it should consider that a user's operation at the terminals is not necessary when a user drop an attribute and key is updated and the design of the communication system is a simple. In this paper, we propose CP-ABE scheme that have multiple key authorities and can revoke attribute immediately with no updating user's secret key for attribute revocation. In addition, the length of ciphertext is fixed. The proposed scheme is IND-CPA secure in DBDH assumption under the standard model. We compare the proposed scheme and the other CP-ABE schemes and show that the proposed scheme is more suitable for cloud storage.

Publication: IEICE TRANSACTIONS on Information Vol.E100-D No.10 pp.2420-2431

Publication Date: 2017/10/01

Publicized: 2017/07/21

Online ISSN: 1745-1361

DOI: 10.1587/transinf.2016OFP0004

Type of Manuscript: Special Section PAPER (Special Section on Advanced Log Processing and Office Information Systems)

Category

Authors

Kenta NOMURA
  Kobe University
Masami MOHRI
  Gifu University
Yoshiaki SHIRAISHI
  Kobe University
Masakatu MORII
  Kobe University

Keyword

ciphertext-policy attribute-based encryption, multiple key authorities, attribute revocation, forward secrecy

Cite this

Copy

Kenta NOMURA, Masami MOHRI, Yoshiaki SHIRAISHI, Masakatu MORII, "Attribute Revocable Multi-Authority Attribute-Based Encryption with Forward Secrecy for Cloud Storage" in IEICE TRANSACTIONS on Information, vol. E100-D, no. 10, pp. 2420-2431, October 2017, doi: 10.1587/transinf.2016OFP0004.
Abstract: Internet of Things (IoT) has been widely applied in various fields. IoT data can also be put to cloud, but there are still concerns regarding security and privacy. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is attracted attention in cloud storage as a suitable encryption scheme for confidential data share and transmission. In CP-ABE, the secret key of a user is associated with a set of attributes; when attributes satisfy the access structure, the ciphertext is able to be decrypted. It is necessary that multiple authorities issue and manage secret keys independently. Authorities that generate the secret key can be regarded as managing the attributes of a user in CP-ABE. CP-ABE schemes that have multiple authorities have been proposed. The other hand, it should consider that a user's operation at the terminals is not necessary when a user drop an attribute and key is updated and the design of the communication system is a simple. In this paper, we propose CP-ABE scheme that have multiple key authorities and can revoke attribute immediately with no updating user's secret key for attribute revocation. In addition, the length of ciphertext is fixed. The proposed scheme is IND-CPA secure in DBDH assumption under the standard model. We compare the proposed scheme and the other CP-ABE schemes and show that the proposed scheme is more suitable for cloud storage.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2016OFP0004/_p

Copy

@ARTICLE{e100-d_10_2420,
author={Kenta NOMURA, Masami MOHRI, Yoshiaki SHIRAISHI, Masakatu MORII, },
journal={IEICE TRANSACTIONS on Information},
title={Attribute Revocable Multi-Authority Attribute-Based Encryption with Forward Secrecy for Cloud Storage},
year={2017},
volume={E100-D},
number={10},
pages={2420-2431},
abstract={Internet of Things (IoT) has been widely applied in various fields. IoT data can also be put to cloud, but there are still concerns regarding security and privacy. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is attracted attention in cloud storage as a suitable encryption scheme for confidential data share and transmission. In CP-ABE, the secret key of a user is associated with a set of attributes; when attributes satisfy the access structure, the ciphertext is able to be decrypted. It is necessary that multiple authorities issue and manage secret keys independently. Authorities that generate the secret key can be regarded as managing the attributes of a user in CP-ABE. CP-ABE schemes that have multiple authorities have been proposed. The other hand, it should consider that a user's operation at the terminals is not necessary when a user drop an attribute and key is updated and the design of the communication system is a simple. In this paper, we propose CP-ABE scheme that have multiple key authorities and can revoke attribute immediately with no updating user's secret key for attribute revocation. In addition, the length of ciphertext is fixed. The proposed scheme is IND-CPA secure in DBDH assumption under the standard model. We compare the proposed scheme and the other CP-ABE schemes and show that the proposed scheme is more suitable for cloud storage.},
keywords={},
doi={10.1587/transinf.2016OFP0004},
ISSN={1745-1361},
month={October},}

Copy

TY - JOUR
TI - Attribute Revocable Multi-Authority Attribute-Based Encryption with Forward Secrecy for Cloud Storage
T2 - IEICE TRANSACTIONS on Information
SP - 2420
EP - 2431
AU - Kenta NOMURA
AU - Masami MOHRI
AU - Yoshiaki SHIRAISHI
AU - Masakatu MORII
PY - 2017
DO - 10.1587/transinf.2016OFP0004
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E100-D
IS - 10
JA - IEICE TRANSACTIONS on Information
Y1 - October 2017
AB - Internet of Things (IoT) has been widely applied in various fields. IoT data can also be put to cloud, but there are still concerns regarding security and privacy. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is attracted attention in cloud storage as a suitable encryption scheme for confidential data share and transmission. In CP-ABE, the secret key of a user is associated with a set of attributes; when attributes satisfy the access structure, the ciphertext is able to be decrypted. It is necessary that multiple authorities issue and manage secret keys independently. Authorities that generate the secret key can be regarded as managing the attributes of a user in CP-ABE. CP-ABE schemes that have multiple authorities have been proposed. The other hand, it should consider that a user's operation at the terminals is not necessary when a user drop an attribute and key is updated and the design of the communication system is a simple. In this paper, we propose CP-ABE scheme that have multiple key authorities and can revoke attribute immediately with no updating user's secret key for attribute revocation. In addition, the length of ciphertext is fixed. The proposed scheme is IND-CPA secure in DBDH assumption under the standard model. We compare the proposed scheme and the other CP-ABE schemes and show that the proposed scheme is more suitable for cloud storage.
ER -