Conditional Identity-Based Broadcast Proxy Re-Encryption and Its Application to Cloud Email
Authors:
- 27 March 2015
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Computers
- Vol. 65 (1) , 66-79
Abstract
Recently, a number of extended Proxy Re-Encryptions (PRE), e.g. Conditional (CPRE), identity-based PRE (IPRE) and broadcast PRE (BPRE), have been proposed for flexible applications. By incorporating CPRE, IPRE and BPRE, this paper proposes a versatile primitive referred to as conditional identity-based broadcast PRE (CIBPRE) and formalizes its semantic security. CIBPRE allows a sender to encrypt a message to multiple receivers by specifying these receivers' identities, and the sender can delegate a re-encryption key to a proxy so that he can convert the initial ciphertext into a new one to a new set of intended receivers. Moreover, the re-encryption key can be associated with a condition such that only the matching ciphertexts can be re-encrypted, which allows the original sender to enforce access control over his remote ciphertexts in a fine-grained manner. We propose an efficient CIBPRE scheme with provable security. In the instantiated scheme, the initial ciphertext, the re-encrypted ciphertext and the re-encryption key are all in constant size, and the parameters to generate a re-encryption key are independent of the original receivers of any initial ciphertext. Finally, we show an application of our CIBPRE to secure cloud email system advantageous over existing secure email systems based on Pretty Good Privacy protocol or identity-based encryption.Keywords
Funding Information
- National Natural Science Foundation of China (61472156)
- National Program on Key Basic Research Project (2014CB340600)
- Chinese National Key Basic Research Program (2012CB315905)
- Natural Science Foundation of China (61370190, 61173154, 61472429, 61402029, 61272501, 61202465, 61321064, 61003214)
- Beijing Natural Science Foundation (4132056)
- Central Universities
- Renmin University of China (14XNLF02)
- Open Research Fund of Beijing Key Laboratory of Trusted Computing
This publication has 17 references indexed in Scilit:
- A DFA-Based Functional Proxy Re-Encryption Scheme for Secure Public Cloud Data SharingIEEE Transactions on Information Forensics and Security, 2014
- An Efficient Cloud-Based Revocable Identity-Based Proxy Re-encryption Scheme for Public Clouds Data Sharing2014
- CCA Proxy Re-Encryption without Bilinear Maps in the Standard ModelLecture Notes in Computer Science, 2010
- Conditional proxy re-encryption secure against chosen-ciphertext attack2009
- Anonymous Conditional Proxy Re-encryption without Random OracleLecture Notes in Computer Science, 2009
- Efficient Conditional Proxy Re-encryption with Chosen-Ciphertext Security2009
- Type-Based Proxy Re-encryption and Its Construction2008
- Identity-Based Proxy Re-encryption2007
- Identity-Based Broadcast Encryption with Constant Size Ciphertexts and Private Keys2007
- Improved proxy re-encryption schemes with applications to secure distributed storageACM Transactions on Information and System Security, 2006