IEEETIFS_IBET_Deng.pdf (1.61 MB)
Download file

Identity-based encryption transformation for flexible sharing of encrypted data in public cloud

Download (1.61 MB)
journal contribution
posted on 30.03.2021, 12:48 by Hua DENG, Zheng QIN, Qianhong WU, Zhenyu GUAN, Huijie Robert DENGHuijie Robert DENG, Yujue WANG, Yunya ZHOU

With the rapid development of cloud computing, an increasing number of individuals and organizations are sharing data in the public cloud. To protect the privacy of data stored in the cloud, a data owner usually encrypts his data in such a way that certain designated data users can decrypt the data. This raises a serious problem when the encrypted data needs to be shared to more people beyond those initially designated by the data owner. To address this problem, we introduce and formalize an identity-based encryption transformation (IBET) model by seamlessly integrating two well-established encryption mechanisms, namely identity-based
encryption (IBE) and identity-based broadcast encryption (IBBE). In IBET, data users are identified and authorized for data access based on their recognizable identities, which avoids complicated certificate management in usual secure distributed systems. More importantly, IBET provides a transformation mechanism that converts an IBE ciphertext into an IBBE ciphertext so that a new group of users not specified during the IBE encryption can access the underlying data. We design a concrete IBET scheme based on bilinear groups and prove its security against powerful attacks. Thorough theoretical and experimental analyses demonstrate the high efficiency and practicability of the proposed scheme.

Funding

National Basic Research Program of China (973 Program)

History

Publication Date

01/04/2020

Journal

IEEE Transactions on Information Forensics and Security

Volume

15

Pages

3168-3180

ISSN

1556-6013

School

School of Computing and Information Systems

IRIS ID

129170936