Identity-Based Encryption Transformation for Flexible Sharing of Encrypted Data in Public Cloud
- 3 April 2020
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Information Forensics and Security
- Vol. 15 (15566013) , 3168-3180
Abstract
With the rapid development of cloud computing, an increasing number of individuals and organizations are sharing data in the public cloud. To protect the privacy of data stored in the cloud, a data owner usually encrypts his data in such a way that certain designated data users can decrypt the data. This raises a serious problem when the encrypted data needs to be shared to more people beyond those initially designated by the data owner. To address this problem, we introduce and formalize an identity-based encryption transformation (IBET) model by seamlessly integrating two well-established encryption mechanisms, namely identity-based encryption (IBE) and identity-based broadcast encryption (IBBE). In IBET, data users are identified and authorized for data access based on their recognizable identities, which avoids complicated certificate management in usual secure distributed systems. More importantly, IBET provides a transformation mechanism that converts an IBE ciphertext into an IBBE ciphertext so that a new group of users not specified during the IBE encryption can access the underlying data. We design a concrete IBET scheme based on bilinear groups and prove its security against powerful attacks. Thorough theoretical and experimental analyses demonstrate the high efficiency and practicability of the proposed scheme.Keywords
Funding Information
- National Basic Research Program of China (2017YFB0902904, 2018YFB0704000, 2019QY(Y)0602)
- National Natural Science Foundation of China (61902123, 61972058, 61932011, 61972019, 61872130, 61862012, 61772191, 61702028, 61772538, 61672083, 91646203)
- China Postdoctoral Science Foundation (2019M662769)
- Science and Technology Key Projects of Hunan Province (2015TP1004, 2018TP2023, 2018TP3001, 2019GK2082)
- Science and Technology Key Projects of Changsha City (kq1801008, kq1804008)
- National Cryptography Development Fund (MMJJ20170106)
- Aeronautical Science Foundation of China (2017ZC51038)
- Foundation of Science and Technology on Information Assurance Laboratory (61421120305162112006)
- Singapore National Research Foundation (NRF2018NCR-NSOE004-0001)
- AXA Research Fund
- Guangxi Natural Science Foundation (2019GXNSFFA245015, AD19245048)
This publication has 31 references indexed in Scilit:
- A DFA-Based Functional Proxy Re-Encryption Scheme for Secure Public Cloud Data SharingIEEE Transactions on Information Forensics and Security, 2014
- Unidirectional Chosen-Ciphertext Secure Proxy Re-encryption2008
- Identity-Based Proxy Re-encryption Without Random Oracles2007
- Proxy Re-encryption Systems for Identity-Based Encryption2007
- Short Signatures Without Random Oracles and the SDH Assumption in Bilinear GroupsJournal of Cryptology, 2007
- Identity-Based Proxy Re-encryption2007
- Identity-Based Broadcast Encryption with Constant Size Ciphertexts and Private Keys2007
- Improved proxy re-encryption schemes with applications to secure distributed storageACM Transactions on Information and System Security, 2006
- Efficient Selective-ID Secure Identity-Based Encryption Without Random Oracles2004
- Identity-Based Encryption from the Weil PairingSIAM Journal on Computing, 2003