A Secure Key Aggregate Searchable Encryption with Multi Delegation in Cloud Data Sharing Service
Source abstract
Abstract
As the amount of data generated in various distributed environments is rapidly increasing, cloud servers and computing technologies are attracting considerable attention. However, the cloud server has privacy issues, including personal information and requires the help of a Trusted Third Party (TTP) for data sharing. However, because the amount of data generated and value increases, the data owner who produces data must become the subject of data sharing. In this study, we use key aggregate searchable encryption (KASE) technology, which enables keyword search, to efficiently share data without using TTP. The traditional KASE scheme approach only discusses delegation of authority from the data owner to another user. However, if the delegated entity cannot perform time-critical tasks because the shared data are unavailable, the delegate must further delegate the rights given to other users. Consequently, this paper proposes a new KASE scheme that enables multi-delegation without TTP and includes an authentication technique between the user and the server. After that, we perform informal and formal analysis using BAN logic and AVISPA for security evaluation, and compare the security and performance aspects with existing schemes.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptography and Data Security · Advanced Authentication Protocols Security · Cloud Data Security Solutions
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, Korea
School of Electronics Engineering, Kyungpook National University, Daegu 41566, Korea
Blockchain Technology Research Center, Electronics and Telecommunications Research Institute, Daejeon 34129, Korea
References (35)
Show source-provided references
1. Holst, A., and Statista (2021, January 30). Volume of data/information created, captured, copied, and consumed worldwide from 2010 to 2024. Available online: https://www.statista.com/statistics/871513/worldwide-data-created/.
2. Kamara, S., and Lauter, K. (2010, January 25–28). Cryptographic Cloud Storage. Proceedings of the International Conference on Financial Cryptography and Data Security, Tenerife, Spain.10.1007/978-3-642-14992-4_13 ↗
3. Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework10.1016/j.jnca.2016.01.001 ↗
4. Cloud attack and risk assessment taxonomy10.1109/MCC.2015.2 ↗
5. MiData (2021, August 09). The Midata Project. Available online: https://www.midata.coop.
6. Fiat, A., and Naor, M. (1993, January 22–26). Broadcast encryption. Proceedings of the Annual International Cryptology Conference, Santa Barbara, CA, USA.
7. Ferrailol, D.F., and Kuhn, D.R. (1992, January 13–16). Role based access control national computer security conference. Proceedings of the 15th National Computer Security Conference (NCSC), Baltimore, ML, USA.
8. Sahai, A., and Waters, B. (2005, January 22–26). Fuzzy identity-based encryption. Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark.
9. Key-aggregate cryptosystem for scalable data sharing in cloud storage10.1109/TPDS.2013.112 ↗
10. Key-aggregate searchable encryption (KASE) for group data sharing via cloud storage10.1109/TC.2015.2389959 ↗
11. A logic of authentication10.1145/77648.77649 ↗
12. AVISPA (2021, August 09). Automated Validation of Internet Security Protocols and Applications. Available online: http://www.avispa-project.org/.
13. (2021, August 09). MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library. Available online: https://github.com/miracl/MIRACLAccessed.
14. Zheng, Q., Xu, S., and Atenise, G. (May, January 27). VABKS: Verifiable attribute-based keyword search over outsourced encrypted data. Proceedings of the IEEE INFOCOM 2014—IEEE Conference on Computer Communications, Toronto, ON, Canada.10.1109/INFOCOM.2014.6847976 ↗
15. Key-aggregate authentication cryptosystem for data sharing in dynamic cloud storage10.1016/j.future.2017.07.038 ↗
16. A secure key-aggregate authentication cryptosystem for data sharing in dynamic cloud storage10.1007/s11042-019-08292-8 ↗
17. File-centric multikey aggregate keyword searchable encryption for industrial internet of things10.1109/TII.2018.2794442 ↗
18. Li, T., Liu, Z., and Li, P. (2016, January 4–6). Verifiable searchable encryption with aggregate keys for data sharing in outsourcing storage. Proceedings of the Australasian Conference on Information Security and Privacy, Melbourne, VIC, Australia.10.1007/978-3-319-40367-0_10 ↗
19. MULKASE: A novel approach for key-aggregate searchable encryption for multi-owner data10.1631/FITEE.1800192 ↗
20. Verifiable searchable encryption with aggregate keys for data sharing system10.1016/j.future.2017.02.024 ↗
21. Yu, S., Lee, J., Lee, K., Park, K., and Park, Y. (2018). Secure authentication protocol for wireless sensor networks in vehicular communications. Sensors, 18.10.3390/s18103191 ↗
22. IoV-SMAP: Secure and efficient message authentication protocol for IoV in smart city environment10.1109/ACCESS.2020.3022778 ↗
23. Kwon, D., Yu, S., Lee, J., Son, S., and Park, Y. (2021). WSN-SLAP: Secure and lightweight mutual authentication protocol for wireless sensor networks. Sensors, 21.10.3390/s21030936 ↗
24. Oh, J., Yu, S., Lee, J., Son, S., Kim, M., and Park, Y. (2021). A secure and lightweight authentication protocol for IoT-based smart homes. Sensors, 21.10.3390/s21041488 ↗
25. Lee, J., Yu, S., Park, K., Park, Y., and Park, Y. (2019). Secure three-factor authentication protocol for multi-gateway IoT environments. Sensors, 19.10.3390/s19102358 ↗
26. LAKS-NVT: Provably secure and lightweight authentication and key agreement scheme without verification table in medical internet of things10.1109/ACCESS.2020.3005592 ↗
27. Secure and Efficient Honey List-Based Authentication Protocol for Vehicular Ad Hoc Networks10.1109/TNSE.2021.3093435 ↗
28. AKM-IoV: Authenticated key management protocol in fog computing-based Internet of vehicles deployment10.1109/JIOT.2019.2923611 ↗
29. Boneh, D., and Franklin, M. (2001, January 19–23). Identity-based encryption from the Weil pairing. Proceedings of the Annual International Cryptology Conference, Santa Barbara, CA, USA.10.1007/3-540-44647-8_13 ↗
30. On the security of public key protocols10.1109/TIT.1983.1056650 ↗
31. Canetti, R., and Krawczyk, H. (2002, January 17). Universally composable notions of key exchange and secure channels. Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques, Amsterdam, The Netherlands.10.1007/3-540-46035-7_22 ↗
32. Design of secure authentication protocol for cloud-assisted telecare medical information system using blockchain10.1109/ACCESS.2020.3032680 ↗
33. A dynamic privacy-preserving key management protocol for V2G in social internet of things10.1109/ACCESS.2019.2921399 ↗
34. Lee, J., Yu, S., Kim, M., Park, Y., Lee, S., and Chung, B. (2020). Secure key agreement and authentication protocol for message confirmation in vehicular cloud computing. Appl. Sci., 10.10.3390/app10186268 ↗
35. Design of Secure Decentralized Car-Sharing System Using Blockchain10.1109/ACCESS.2021.3071499 ↗