Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach

Jongkil Kim; Willy Susilo; Joonsang Baek; Surya Nepal; Dongxi Liu

doi:10.1007/978-3-030-21548-4_1

Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach

Jongkil Kim, Willy Susilo, Joonsang Baek, Surya Nepal, Dongxi Liu

Department of Cyber Security

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

6 Scopus citations

Abstract

We introduce a new technique converting Ciphertext-policy Attribute-based Encryption (CP-ABE) to Ciphertext-delegatable CP-ABE (CD-CP-ABE). Ciphertext delegation is an important technique to deal with dynamic credentials, which enable users to be joined and revoked at any time while the system is operating. The delegation of CD-CP-ABE allows third parties such as cloud or proxy servers to convert a ciphertext to the other one with a more restrictive policy. Therefore, it can be used to revoke users dynamically in an access control system. Prior to our work, a delegation algorithm of CD-CP-ABE is not generic and the completeness of the delegation is shown when the size of the delegated access structure increases quadratically with the sizes of original and revocation access structures. In this paper, we provide a generic delegation algorithm to reform CP-ABE to CD-CP-ABE. We generalize properties necessary for the ciphertext delegation using the syntax of encodings for the modularity and construct a generic delegation algorithm based on those properties. In our new technique, we build the delegated access structures, which generally determines the size of the ciphertext, in a defined way. The size of delegated access structures grows only linearly with those of original and revocation access structures. Through presenting instances, we show that our technique is readily applicable to existing CP-ABE schemes including CP-ABE scheme with non-monotonic access structures.

Original language	English
Title of host publication	Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings
Editors	Julian Jang-Jaccard, Fuchun Guo
Publisher	Springer Verlag
Pages	3-20
Number of pages	18
ISBN (Print)	9783030215477
DOIs	https://doi.org/10.1007/978-3-030-21548-4_1
State	Published - 2019
Event	24th Australasian Conference on Information Security and Privacy, ACISP 2019 - Christchurch, New Zealand Duration: 3 Jul 2019 → 5 Jul 2019

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11547 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	24th Australasian Conference on Information Security and Privacy, ACISP 2019
Country/Territory	New Zealand
City	Christchurch
Period	3/07/19 → 5/07/19

Bibliographical note

Publisher Copyright:
© 2019, Springer Nature Switzerland AG.

Keywords

Attribute-based Encryption
Ciphertext-delegation
Dynamic access control
Revocation

Access to Document

10.1007/978-3-030-21548-4_1

Cite this

Kim, J., Susilo, W., Baek, J., Nepal, S., & Liu, D. (2019). Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach. In J. Jang-Jaccard, & F. Guo (Eds.), Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings (pp. 3-20). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11547 LNCS). Springer Verlag. https://doi.org/10.1007/978-3-030-21548-4_1

Kim, Jongkil ; Susilo, Willy ; Baek, Joonsang et al. / Ciphertext-Delegatable CP-ABE for a Dynamic Credential : A Modular Approach. Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings. editor / Julian Jang-Jaccard ; Fuchun Guo. Springer Verlag, 2019. pp. 3-20 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{8665df0c54f64e75a6c2527930a0565b,

title = "Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach",

abstract = "We introduce a new technique converting Ciphertext-policy Attribute-based Encryption (CP-ABE) to Ciphertext-delegatable CP-ABE (CD-CP-ABE). Ciphertext delegation is an important technique to deal with dynamic credentials, which enable users to be joined and revoked at any time while the system is operating. The delegation of CD-CP-ABE allows third parties such as cloud or proxy servers to convert a ciphertext to the other one with a more restrictive policy. Therefore, it can be used to revoke users dynamically in an access control system. Prior to our work, a delegation algorithm of CD-CP-ABE is not generic and the completeness of the delegation is shown when the size of the delegated access structure increases quadratically with the sizes of original and revocation access structures. In this paper, we provide a generic delegation algorithm to reform CP-ABE to CD-CP-ABE. We generalize properties necessary for the ciphertext delegation using the syntax of encodings for the modularity and construct a generic delegation algorithm based on those properties. In our new technique, we build the delegated access structures, which generally determines the size of the ciphertext, in a defined way. The size of delegated access structures grows only linearly with those of original and revocation access structures. Through presenting instances, we show that our technique is readily applicable to existing CP-ABE schemes including CP-ABE scheme with non-monotonic access structures.",

keywords = "Attribute-based Encryption, Ciphertext-delegation, Dynamic access control, Revocation",

author = "Jongkil Kim and Willy Susilo and Joonsang Baek and Surya Nepal and Dongxi Liu",

note = "Publisher Copyright: {\textcopyright} 2019, Springer Nature Switzerland AG.; 24th Australasian Conference on Information Security and Privacy, ACISP 2019 ; Conference date: 03-07-2019 Through 05-07-2019",

year = "2019",

doi = "10.1007/978-3-030-21548-4_1",

language = "English",

isbn = "9783030215477",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "3--20",

editor = "Julian Jang-Jaccard and Fuchun Guo",

booktitle = "Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings",

}

Kim, J, Susilo, W, Baek, J, Nepal, S & Liu, D 2019, Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach. in J Jang-Jaccard & F Guo (eds), Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11547 LNCS, Springer Verlag, pp. 3-20, 24th Australasian Conference on Information Security and Privacy, ACISP 2019, Christchurch, New Zealand, 3/07/19. https://doi.org/10.1007/978-3-030-21548-4_1

Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach. / Kim, Jongkil; Susilo, Willy; Baek, Joonsang et al.
Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings. ed. / Julian Jang-Jaccard; Fuchun Guo. Springer Verlag, 2019. p. 3-20 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11547 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Ciphertext-Delegatable CP-ABE for a Dynamic Credential

T2 - 24th Australasian Conference on Information Security and Privacy, ACISP 2019

AU - Kim, Jongkil

AU - Susilo, Willy

AU - Baek, Joonsang

AU - Nepal, Surya

AU - Liu, Dongxi

PY - 2019

Y1 - 2019

N2 - We introduce a new technique converting Ciphertext-policy Attribute-based Encryption (CP-ABE) to Ciphertext-delegatable CP-ABE (CD-CP-ABE). Ciphertext delegation is an important technique to deal with dynamic credentials, which enable users to be joined and revoked at any time while the system is operating. The delegation of CD-CP-ABE allows third parties such as cloud or proxy servers to convert a ciphertext to the other one with a more restrictive policy. Therefore, it can be used to revoke users dynamically in an access control system. Prior to our work, a delegation algorithm of CD-CP-ABE is not generic and the completeness of the delegation is shown when the size of the delegated access structure increases quadratically with the sizes of original and revocation access structures. In this paper, we provide a generic delegation algorithm to reform CP-ABE to CD-CP-ABE. We generalize properties necessary for the ciphertext delegation using the syntax of encodings for the modularity and construct a generic delegation algorithm based on those properties. In our new technique, we build the delegated access structures, which generally determines the size of the ciphertext, in a defined way. The size of delegated access structures grows only linearly with those of original and revocation access structures. Through presenting instances, we show that our technique is readily applicable to existing CP-ABE schemes including CP-ABE scheme with non-monotonic access structures.

AB - We introduce a new technique converting Ciphertext-policy Attribute-based Encryption (CP-ABE) to Ciphertext-delegatable CP-ABE (CD-CP-ABE). Ciphertext delegation is an important technique to deal with dynamic credentials, which enable users to be joined and revoked at any time while the system is operating. The delegation of CD-CP-ABE allows third parties such as cloud or proxy servers to convert a ciphertext to the other one with a more restrictive policy. Therefore, it can be used to revoke users dynamically in an access control system. Prior to our work, a delegation algorithm of CD-CP-ABE is not generic and the completeness of the delegation is shown when the size of the delegated access structure increases quadratically with the sizes of original and revocation access structures. In this paper, we provide a generic delegation algorithm to reform CP-ABE to CD-CP-ABE. We generalize properties necessary for the ciphertext delegation using the syntax of encodings for the modularity and construct a generic delegation algorithm based on those properties. In our new technique, we build the delegated access structures, which generally determines the size of the ciphertext, in a defined way. The size of delegated access structures grows only linearly with those of original and revocation access structures. Through presenting instances, we show that our technique is readily applicable to existing CP-ABE schemes including CP-ABE scheme with non-monotonic access structures.

KW - Attribute-based Encryption

KW - Ciphertext-delegation

KW - Dynamic access control

KW - Revocation

UR - http://www.scopus.com/inward/record.url?scp=85068700539&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-21548-4_1

DO - 10.1007/978-3-030-21548-4_1

M3 - Conference contribution

AN - SCOPUS:85068700539

SN - 9783030215477

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 3

EP - 20

BT - Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings

A2 - Jang-Jaccard, Julian

A2 - Guo, Fuchun

PB - Springer Verlag

Y2 - 3 July 2019 through 5 July 2019

ER -

Kim J, Susilo W, Baek J, Nepal S, Liu D. Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach. In Jang-Jaccard J, Guo F, editors, Information Security and Privacy - 24th Australasian Conference, ACISP 2019, Proceedings. Springer Verlag. 2019. p. 3-20. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-21548-4_1

Ciphertext-Delegatable CP-ABE for a Dynamic Credential: A Modular Approach

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Fingerprint

Cite this