New large-universe multi-authority ciphertext-policy ABE scheme and its application in cloud storage systems

Abstract

We propose a new large-universe multi-authority ciphertext-policy attribute-based encryption system. In this system, any string can be used as an attribute of the system, and there are several authorities, each of which is responsible for the authorized key distribution of a specific set of attributes. Then, we prove its security under two static assumptions without random oracle. The main techniques used in this work are “Waters’ hash” over global identifier and attribute information in the construction, as well as dual system encryption in the security proof. To the best of our knowledge, this is the first ciphertext-policy attribute-based encryption system satisfying both of “large-universe” property and “multi-authority” property without random oracle. Finally, as the application of our new scheme, we propose a new data access control scheme for cloud storage systems.

Keywords

Large-universe multi-authority CP-ABE Waters’ hash without random oracle cloud storage systems

Get full access to this article

View all access options for this article.

References

[1]

Beimel, Secure schemes for secret sharing and key distribution, PhD thesis, Israel Institute of Technology, Technion, Haifa, Israel, 1996.

[2]

Bethencourt,

Sahai and

Waters, Ciphertext-policy attribute-based encryption, in: S&P 2007, IEEE, 2007, pp. 321–334.

[3]

Boneh,

Goh and

Nissim, Evaluating 2-dnf formulas on ciphertexts, in: TCC 2005, Springer, Heidelberg, 2005, pp. 325–341.

[4]

Castiglione,

A.D.

Santis and

Masucci, Hierarchical and shared key assignment, in: NBiS 2014, IEEE, 2014, pp. 263–270.

[5]

Castiglione,

A.D.

Santis and

Masucci, Key indistinguishability vs. strong key indistinguishability for hierarchical key assignment schemes, IEEE Transactions on Dependable and Secure Computing (2015). doi:10.1109/TDSC.2015.2413415.

[6]

Chase, Multi-authority attribute based encryption, in: TCC 2007, Springer, Heidelberg, 2007, pp. 515–534.

[7]

Chase and

S.S.M.

Chow, Improving privacy and security in multi-authority attribute-based encryption, in: CCS 2009, ACM, New York, 2009, pp. 121–130.

[8]

Chen,

Li,

Ma,

Tang and

Lou, New algorithms for secure outsourcing of modular exponentiations, IEEE Transactions on Parallel and Distributed Systems 25(9) (2014), 2386–2396.

[9]

Cheung and

C.C.

Newport, Provably secure ciphertext policy ABE, in: CCS 2007, ACM, New York, 2007, pp. 456–465.

10.

[10]

Esposito,

Ficco,

Palmieri and

Castiglione, Interconnecting federated clouds by using publish-subscribe service, Cluster Computing 16(4) (2013), 887–903.

11.

[11]

Esposito,

Ficco,

Palmieri and

Castiglione, Smart cloud storage service selection based on fuzzy logic, theory of evidence and game theory, IEEE Transactions on Computers (2015). doi:10.1109/TC.2015.2389952.

12.

[12]

Goyal,

Jain,

Pandey and

Sahai, Bounded ciphertext policy attribute based encryption, in: ICALP 2008, Springer, Heidelberg, 2008, pp. 579–591.

13.

[13]

Goyal,

Pandey,

Sahai and

Waters, Attribute-based encryption for fine-grained access control of encrypted data, in: CCS 2006, ACM, New York, 2006, pp. 89–98.

14.

[14]

Green,

Hohenberger and

Waters, Outsourcing the decryption of ABE ciphertexts, in: SEC 2011, ACM, New York, 2011, pp. 34–49.

15.

[15]

Hohenberger and

Waters, Online/offline attribute-based encryption, in: PKC 2014, Springer, Heidelberg, 2014, pp. 293–310.

16.

[16]

Jiang,

Chen,

Li,

D.S.

Wong,

Ma and

J.K.

Liu, TIMER: Secure and reliable cloud storage against data re-outsourcing, in: ISPEC 2014, Springer, Heidelberg, 2014, pp. 346–358.

17.

[17]

Lai,

R.H.

Deng,

Guan and

Weng, Attribute-based encryption with verifiable outsourced decryption, IEEE Transactions on Information Forensics and Security 8(8) (2013), 1343–1354.

18.

[18]

A.B.

Lewko, Tools for simulating features of composite order bilinear groups in the prime order setting, in: EUROCRYPT 2012, Springer, Heidelberg, 2012, pp. 318–335.

19.

[19]

A.B.

Lewko,

Okamoto,

Sahai,

Takashima and

Waters, Fully secure functional encryption: Attribute-based encryption and (hierarchical) inner product encryption, in: EUROCRYPT 2010, Springer, Heidelberg, 2010, pp. 62–91.

20.

[20]

A.B.

Lewko and

Waters, Decentralizing attribute-based encryption, in: EUROCRYPT 2011, Springer, Heidelberg, 2011, pp. 568–588.

21.

[21]

A.B.

Lewko and

Waters, Unbounded HIBE and attribute-based encryption, in: EUROCRYPT 2011, Springer, Heidelberg, 2011, pp. 547–567.

22.

[22]

A.B.

Lewko and

Waters, New proof methods for attribute-based encryption: Achieving full security through selective techniques, in: CRYPTO 2012, Springer, Heidelberg, 2012, pp. 180–198.

23.

[23]

Li,

Jia,

Li and

Chen, Outsourcing encryption of attribute-based encryption with MapReduce, in: ICICS 2012, Springer, Heidelberg, 2012, pp. 191–201.

24.

[24]

Li,

Chen,

Jia and

D.S.

Wong, Securely outsourcing attribute-based encryption with checkability, IEEE Transactions on Parallel and Distributed Systems 25(8) (2014), 2201–2210.

25.

[25]

Lin,

Cao,

Liang and

Shao, Secure threshold multi authority attribute based encryption without a central authority, in: INDOCRYPT 2008, Springer, Heidelberg, 2008, pp. 426–436.

26.

[26]

Okamoto and

Takashima, Homomorphic encryption and signatures from vector decomposition, in: Pairing 2008, Springer, Heidelberg, 2008, pp. 57–74.

27.

[27]

Okamoto and

Takashima, Hierarchical predicate encryption for inner-products, in: ASIACRYPT 2009, Springer, Heidelberg, 2009, pp. 214–231.

28.

[28]

Okamoto and

Takashima, Fully secure functional encryption with general relations from the decisional linear assumption, in: CRYPTO 2010, Springer, Heidelberg, 2010, pp. 191–208.

29.

[29]

Ostrovsky,

Sahai and

Waters, Attribute-based encryption with non-monotonic access structures, in: CCS 2007, ACM, New York, 2007, pp. 195–203.

30.

[30]

Palmieri,

Fiore,

Ricciardi and

Castiglione, Grasp-based resource re-optimization for effective big data access in federated clouds, Future Generation Computer Systems 54 (2016), 168–179. doi:10.1016/j.future.2015.01.017.

31.

[31]

Rouselakis and

Waters, Practical constructions and new proof methods for large universe attribute-based encryption, in: CCS 2013, ACM, New York, 2013, pp. 463–474.

32.

[32]

Rouselakis and

Waters, Efficient statically-secure large-universe multi-authority attribute-based encryption, IACR Cryptology ePrint archive, 2015, available at: http://eprint.iacr.org/2015/016.

33.

[33]

Sahai and

Waters, Fuzzy identity-based encryption, in: EUROCRYPT 2005, Springer, Heidelberg, 2005, pp. 457–473.

34.

[34]

Wang,

Yang and

Wang, Server aided ciphertext-policy attribute-based encryption, in: WAINA 2015, IEEE, 2015, pp. 440–444.

35.

[35]

Wang,

Zheng,

Wu and

Wang, Adaptively secure outsourcing ciphertext-policy attribute-based encryption, Journal of Computer Research and Development 52(10) (2015), 2270–2280 (in Chinese).

36.

[36]

Waters, Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization, in: PKC 2011, Springer, Heidelberg, 2011, pp. 53–70.

37.

[37]

Yang,

Jia,

Ren,

Zhang and

Xie, DAC-MACS: Effective data access control for multiauthority cloud storage systems, IEEE Transactions on Information Forensics and Security 8(11) (2013), 1790–1801.