An Efficient Searchable Public-Key Authenticated Encryption for Cloud-Assisted Medical Internet of Things

In recent years, it has become popular to upload patients’ medical data to a third-party cloud server (TCS) for storage through medical Internet of things. It can reduce the local maintenance burden of the medical data and importantly improve accuracy in the medical treatment. As remote TCS cannot be fully trusted, medical data should be encrypted before uploading, to protect patients’ privacy. However, encryption makes search capabilities difficult for patients and doctors. To address this issue, Huang et al. recently put forward the notion of Public-key Authenticated Encryption with Keyword Search (PAEKS) against inside keyword guessing attacks. However, the existing PAEKS schemes rely on time-consuming computation of parings. Moreover, some PAEKS schemes still have security issues in a multiuser setting. In this paper, we propose a new and efficient PAEKS scheme, which uses the idea of Diffie-Hellman key agreement to generate a shared secret key between each sender and receiver. The shared key will be used to encrypt keywords by the sender and to generate search trapdoors by the receiver. We prove that our scheme is semantically secure against inside keyword guessing attacks in a multiuser setting, under the oracle Diffie-Hellman assumption. Experimental results demonstrate that our PAEKS scheme is more efficient than that of previous ones, especially in terms of keyword searching time.

Download Full-text

Efficient KDM-CCA Secure Public-Key Encryption via Auxiliary-Input Authenticated Encryption

Security and Communication Networks ◽

10.1155/2017/2148534 ◽

2017 ◽

Vol 2017 ◽

pp. 1-27 ◽

Cited By ~ 1

Author(s):

Shuai Han ◽

Shengli Liu ◽

Lin Lyu

Keyword(s):

Public Key ◽

Authenticated Encryption ◽

Public Key Encryption ◽

Secret Key ◽

Diffie Hellman ◽

Affine Functions ◽

Generic Construction ◽

Hash Proof System ◽

Auxiliary Input ◽

Ddh Assumption

KDM[F]-CCA security of public-key encryption (PKE) ensures the privacy of key-dependent messages f(sk) which are closely related to the secret key sk, where f∈F, even if the adversary is allowed to make decryption queries. In this paper, we study the design of KDM-CCA secure PKE. To this end, we develop a new primitive named Auxiliary-Input Authenticated Encryption (AIAE). For AIAE, we introduce two related-key attack (RKA) security notions, including IND-RKA and weak-INT-RKA. We present a generic construction of AIAE from tag-based hash proof system (HPS) and one-time secure authenticated encryption (AE) and give an instantiation of AIAE under the Decisional Diffie-Hellman (DDH) assumption. Using AIAE as an essential building block, we give two constructions of efficient KDM-CCA secure PKE based on the DDH and the Decisional Composite Residuosity (DCR) assumptions. Specifically, (i) our first PKE construction is the first one achieving KDM[Faff]-CCA security for the set of affine functions and compactness of ciphertexts simultaneously. (ii) Our second PKE construction is the first one achieving KDM[Fpolyd]-CCA security for the set of polynomial functions and almost compactness of ciphertexts simultaneously. Our PKE constructions are very efficient; in particular, they are pairing-free and NIZK-free.

Download Full-text

Certificateless Public Key Authenticated Encryption With Keyword Search for Industrial Internet of Things

IEEE Transactions on Industrial Informatics ◽

10.1109/tii.2017.2771382 ◽

2018 ◽

Vol 14 (8) ◽

pp. 3618-3627 ◽

Cited By ~ 37

Author(s):

Debiao He ◽

Mimi Ma ◽

Sherali Zeadally ◽

Neeraj Kumar ◽

Kaitai Liang

Keyword(s):

Internet Of Things ◽

Keyword Search ◽

Public Key ◽

Authenticated Encryption ◽

Industrial Internet Of Things ◽

Industrial Internet

Download Full-text

A designated cloud server-based multi-user certificateless public key authenticated encryption with conjunctive keyword search against IKGA

Computer Standards & Interfaces ◽

10.1016/j.csi.2021.103603 ◽

2021 ◽

pp. 103603

Author(s):

Mr Venkata Bhikshapathi Chenam ◽

Syed Taqi Ali

Keyword(s):

Keyword Search ◽

Public Key ◽

Authenticated Encryption ◽

Cloud Server

Download Full-text

Design and development of a secure certificateless proxy signature based (SE-CLPS) encryption scheme for cloud storage

International Journal of Engineering & Technology ◽

10.14419/ijet.v10i1.21480 ◽

2021 ◽

Vol 10 (1) ◽

pp. 57

Author(s):

Ms. K. Sudharani ◽

Dr. N. K. Sakthivel

Keyword(s):

Computational Cost ◽

Public Key Cryptography ◽

True Positive Rate ◽

Proxy Signature ◽

Attack Detection ◽

Third Party ◽

Public Key ◽

Secret Key ◽

True Negative ◽

The Public

Certificateless Public Key Cryptography (CL-PKC) scheme is a new standard that combines Identity (ID)-based cryptography and tradi- tional PKC. It yields better security than the ID-based cryptography scheme without requiring digital certificates. In the CL-PKC scheme, as the Key Generation Center (KGC) generates a public key using a partial secret key, the need for authenticating the public key by a trusted third party is avoided. Due to the lack of authentication, the public key associated with the private key of a user may be replaced by anyone. Therefore, the ciphertext cannot be decrypted accurately. To mitigate this issue, an Enhanced Certificateless Proxy Signature (E-CLPS) is proposed to offer high security guarantee and requires minimum computational cost. In this work, the Hackman tool is used for detecting the dictionary attacks in the cloud. From the experimental analysis, it is observed that the proposed E-CLPS scheme yields better Attack Detection Rate, True Positive Rate, True Negative Rate and Minimum False Positives and False Negatives than the existing schemes.

Download Full-text

Public-key authenticated encryption with keyword search revisited: Security model and constructions

Information Sciences ◽

10.1016/j.ins.2019.12.063 ◽

2020 ◽

Vol 516 ◽

pp. 515-528 ◽

Cited By ~ 6

Author(s):

Baodong Qin ◽

Yu Chen ◽

Qiong Huang ◽

Ximeng Liu ◽

Dong Zheng

Keyword(s):

Keyword Search ◽

Public Key ◽

Security Model ◽

Authenticated Encryption

Download Full-text

Dual-Server Public-Key Authenticated Encryption With Keyword Search

IEEE Transactions on Cloud Computing ◽

10.1109/tcc.2019.2945714 ◽

2019 ◽

pp. 1-1

Author(s):

Biwen Chen ◽

Libing Wu ◽

Sherali Zeadally ◽

Debiao He

Keyword(s):

Keyword Search ◽

Public Key ◽

Authenticated Encryption

Download Full-text

Certificateless Public Key Encryption Scheme with Hybrid Problems and Its Application to Internet of Things

Mathematical Problems in Engineering ◽

10.1155/2014/980274 ◽

2014 ◽

Vol 2014 ◽

pp. 1-9 ◽

Cited By ~ 5

Author(s):

Rui Guo ◽

Qiaoyan Wen ◽

Huixian Shi ◽

Zhengping Jin ◽

Hua Zhang

Keyword(s):

Internet Of Things ◽

Public Key Cryptography ◽

Public Key ◽

Encryption Scheme ◽

Public Key Encryption ◽

Certificateless Cryptography ◽

Diffie Hellman ◽

Identity Based ◽

Certificate Management ◽

Certificateless Public Key Encryption

Certificateless cryptography aims at combining the advantages of public key cryptography and identity based cryptography to avoid the certificate management and the key escrow problem. In this paper, we present a novel certificateless public key encryption scheme on the elliptic curve over the ring, whose security is based on the hardness assumption of Bilinear Diffie-Hellman problem and factoring the large number as in an RSA protocol. Moreover, since our scheme requires only one pairing operation in decryption, it is significantly more efficient than other related schemes. In addition, based on our encryption system, we also propose a protocol to protect the confidentiality and integrity of information in the scenario of Internet of Things with constrained resource nodes.

Download Full-text

Secure Cloud Storage using Secret Key Sharing and Proxy Re-Encryption Based Third Party Auditing Service

International Journal of Engineering and Advanced Technology - Regular Issue ◽

10.35940/ijeat.f7925.088619 ◽

2019 ◽

Vol 8 (6) ◽

pp. 1927-1931

Keyword(s):

Research Work ◽

Personal Data ◽

Cloud Service ◽

Third Party ◽

Secret Key ◽

Sensitive Data ◽

Cloud Service Provider ◽

Security Issues ◽

Secure Cloud Storage ◽

Third Party Auditing

Cloud Computing (CC) provides an easy way to access and store the information by vast remote servers, instead of using personal computer. There is no physical control over personal data by user, hence some security issues may arise for users and organization to secure the data in cloud. The sensitive data can be hacked by attackers, so the integrity of data stored in cloud is a major concern for users. In this research work, the data integrity can be ensured by using Third Party Storage Auditing Service (TPSAS), where it satisfies all the requirements of users in cloud. The ultimate aim of this research is to avoid the unauthorized access of user’s data stored in the cloud. In this paper, two major problems are considered for attaining the integrity of data in the cloud. The first one is, the unauthorized user tries to modify the data, which is solved by the proposed TPSAS. The second problem considered in this research is, since the Cloud Service Provider (CSP) is semi trustable it can be malfunctioned at any time, which can be solved based on the secure secret key sharing algorithm and proxy re-encryption methodology. The secure secret key sharing is implemented based on the Shamir key sharing algorithm and the proxy re-encryption process is implemented based on the bear and lion proxy re-encryption methodology.

Download Full-text