| Description |
1 online resource |
| Series |
Data-enabled engineering |
|
Data-enabled engineering.
|
| Contents |
Cover -- Half Title -- Series Page -- Title Page -- Copyright Page -- Dedication -- Contents -- Preface -- Authors -- Contributors -- Part I: Foundations of Attribute-Based Encryption for Attribute-Based Access Control -- Chapter 1: Foundations of Attribute-Based Encryption -- 1.1 Attribute-Based Access Control-An ABE Approach -- 1.1.1 Motivation of ABE-Based Attribute-Based Access Control -- 1.1.2 Potentials and Issues of ABAC -- 1.2 Mathematical Background -- 1.2.1 Group and Cyclic Group -- 1.2.2 Prime-Order Bilinear Pairing -- 1.2.3 Composite-Order Bilinear Pairing |
|
1.3 Basic Construction Components of ABE -- 1.3.1 Access Structure -- 1.3.2 Linear Secret-Sharing Scheme -- 1.3.3 Conversion Algorithm -- 1.3.4 Access Structure Example -- 1.3.5 Key-Policy Attribute-Based Encryption -- 1.3.6 Ciphertext-Policy Attribute-Based Encryption -- 1.4 Notations -- 1.5 Summary -- Chapter 2: Comparable Attribute-based Encryption -- 2.1 CCP-CABE Application Framework -- 2.2 Definition of Attribute Range and Problem Formulation -- 2.3 Composite Order Bilinear Map -- 2.4 Multi-Dimensional Range Derivation Function -- 2.5 CCP-CABE Overview -- 2.6 Security Model |
|
2.7 Construction -- 2.7.1 System Setup (Setup) -- 2.7.2 Key Generation (KeyGen) -- 2.7.3 Encryption Delegation (EncDelegate) -- 2.7.4 Encryption (Encrypt) -- 2.7.5 Decryption Delegation (DecDelegate) -- 2.7.6 Decryption (Decrypt) -- 2.7.7 Application Scenarios -- 2.8 Extended Construction -- 2.8.1 ECCP-CABE Encryption -- 2.8.2 ECCP-CABE Decryption -- 2.9 Performance Evaluation -- 2.9.1 Complexity Analysis -- 2.9.2 Experiment -- 2.10 Security Analysis -- 2.10.1 Security for MRDF -- 2.10.2 Security for Key Collusion Attacks -- 2.10.3 Security for Chosen Delegation Key and Ciphertext Attacks |
|
2.11 Summary -- Chapter 3: Privacy-Preserving Attribute-Based Encryption -- 3.1 Introduction -- 3.2 Related Works -- 3.3 Models -- 3.3.1 Attributes, Policy, and Anonymity -- 3.3.2 Broadcast with Attribute-Based Encryption -- 3.3.3 Bilinear Maps -- 3.3.4 Complexity Assumption -- 3.4 PP-CP-ABE Construction -- 3.4.1 PP-CP-ABE Construction Overview -- 3.4.2 Setup -- 3.4.3 Key Generation -- 3.4.4 Encryption -- 3.4.5 Decryption -- 3.4.6 Security Analysis -- 3.5 Privacy-Preserving Attribute-Based Broadcast Encryption -- 3.5.1 PP-AB-BE Setup -- 3.5.2 Broadcast Encryption |
|
3.5.3 Information Theoretical Optimality -- 3.6 System Performance Assessment -- 3.6.1 Communication Overhead -- 3.6.2 Storage Overhead -- 3.6.3 Computation Overhead -- 3.7 Summary -- Chapter 4: Identity Revocable CP-ABE -- 4.1 Introduction -- 4.1.1 Research Contribution -- 4.2 Flexible Group Construction -- 4.3 Why Is the Two-Step ID-Revocable CP-ABE Approach NOT Secure? -- 4.4 Syntax and Security Model -- 4.4.1 Syntax of IR-CP-ABE -- 4.4.2 Security Model -- 4.4.3 Assumptions -- 4.5 Scheme Construction -- 4.5.1 One-ID Revocation for CP-ABE Scheme (OIDR-CP-ABE) |
| Summary |
This book covers a broader scope of Attribute-Based Encryption (ABE), from the background knowledge, to specific constructions, theoretic proofs, and applications. The goal is to provide in-depth knowledge usable for college students and researchers who want to have a comprehensive understanding of ABE schemes and novel ABE-enabled research and applications. The specific focus is to present the development of using new ABE features such as group-based access, ID-based revocation, and attributes management functions such as delegation, federation, and interoperability. These new capabilities can build a new ABE-based Attribute-Based Access Control (ABAC) solution that can incorporate data access policies and control into ciphertext. This book is also ideal for IT companies to provide them with the most recent technologies and research on how to implement data access control models for mobile and data-centric applications, where data access control does not need to rely on a fixed access control infrastructure. It's also of interested to those working in security, to enable them to have the most recent developments in data access control such as ICN and Blockchain technologies. Features Covers cryptographic background knowledge for ABE and ABAC Features various ABE constructions to achieve integrated access control capabilities Offers a comprehensive coverage of ABE-based ABAC Provides ABE applications with real-world examples Advances the ABE research to support new mobile and data-centric applications |
| Notes |
4.5.2 Multiple-ID Revocation for CP-ABE Scheme (MIDR-CP-ABE) |
| Bibliography |
Includes bibliographical references and index |
| Notes |
Dr. Dijiang Huang received his Bachelor of Science degree in Telecommunications from Beijing University of Posts & Telecommunications, China. He received his Master of Science and PhD degrees from University of Missouri-Kansas City majored in Computer Science and Telecommunications. He is currently an associate professor in the School of Computing Informatics and Decision Systems Engineering at Arizona State University. His research interests are in computer and network security, mobile ad hoc networks, network virtualization, and mobile cloud computing. Dr. Huang's research is supported by federal agencies NSF, ONR, ARO, and NATO, and organizations such as Consortium of Embedded System (CES), Hewlett-Packard, and China Mobile. He is a recipient of ONR Young Investigator Award and HP Innovation Research Program (IRP) Award. He is a co-founder of Athena Network Solutions LLC (ATHENETS). He is currently leading the Secure Networking and Computing (SNAC) research group at ASU. Dr. Qiuxiang Dong received his Bachelor of Science degree from Zhijiang University, and PhD from Peking University in computer science. His research focuses are applied cryptography and computer systems. Qiuxiang Dong is currently a PhD student at School of Computing, Informatics and Decision Systems Engineering Ira A. Fulton Schools of Engineering, Arizona State University. Yan (Vicent) Zhu receivedhis Ph. D. degree in computer science from Harbin Engineering University, China, in 2005. He is currently a full professor of computer science at the University of Science and Technology Beijing (USTB), China. He was an associate professor at Peking University, China, from 2007 to 2012. He was a visiting associate professor at the Arizona State University, from 2008 to 2009, and a visiting research investigator of the University of Michigan-Dearborn in 2012. He has authored over 100 journal and conference papers in computer and network security. His research interests include cryptography, secure computation, and access control |
|
Online resource; title from digital title page (viewed on April 06, 2020) |
| Subject |
Computer networks -- Security measures.
|
|
Computer security.
|
|
Identification.
|
|
Data encryption (Computer science)
|
|
Computers -- Access control.
|
|
Computer Security
|
|
COMPUTERS -- Database Management -- Data Mining.
|
|
COMPUTERS -- Security -- General.
|
|
TECHNOLOGY -- Engineering -- Industrial.
|
|
Computer networks -- Security measures.
|
|
Computer security.
|
|
Computers -- Access control.
|
|
Data encryption (Computer science)
|
|
Identification.
|
| Form |
Electronic book
|
| Author |
Dong, Qiuxiang, author.
|
|
Zhu, Yan (Professor of computer security), author.
|
| ISBN |
9781351210591 |
|
1351210599 |
|
9781351210584 |
|
1351210580 |
|
9781351210577 |
|
1351210572 |
|
1351210602 |
|
9781351210607 |
|
