Malabika Das, Rajdeep Chakraborty, Chandan Banerjee · Advances in civil and industrial engineering book series · 2023
Identity and attribute-based cryptosystems have now become the most interesting research area in cryptography. Id-based and attribute-based cryptography both are improved variants of public-key cryptography. The identity-based cryptography is based on the identity of the user, such as email address, IP address, or mobile number. On the other hand, in attribute-based cryptography users encrypt and decrypt the message based on their attributes. Both IBE and ABE are based on mathematical concepts like Integer factorization, Quadratic Residues, Discrete logarithm Problems, Diffie-Hellman problems, and Bilinear pairings. IBE allows users to encrypt and decrypt messages using their identities whereas ABE provides fine-grain access control, it allows organizations and individuals to access data based on specific attributes or properties. IBE and ABE have various applications in cloud computing, digital signatures, and secure data sharing in IoT. Most ABE schemes based on access structure can be categorized as Key-Policy ABE (KP-ABE) and ciphertext-based ABE (CP-ABE).
Cited by 1Open access
Muzna Junaid Chishti, Shariq Mahmood Khan · SHILAP Revista de lepidopterología · 2020
Healthcare is one of the largest sectors where the influence of major scientific interventions has assistedpractitioners in a variety of ways. Today, majority of the diagnosis and patient care methods are vulnerable due tolimitations in fulfilling security objectives. Thus, both the doctors and the patients have to suffer from many medicinalcomplications. With analyzing such problems in the current healthcare industry, a technology-based mechanism isintroduced with a purpose to monitor patient’s health in a supervised manner. The present study followed a qualitativeresearch method in which the main focus was secondary resources for gathering essential information regarding theconcept. The researcher developed a conceptual framework and an algorithm to minimize security concerns that arerelated to sharing information between a doctor and a patient and developing a valid diagnosis.
Cited by 0Open access
Gurjeet Singh Puri, Himanshu Gupta · 2016
Now a days, ATM is used for money transaction for the convenience of the user by providing round the clock 24*7 services in financial transaction. Bank provides the Debit or Credit card to its user along with particular PIN number (which is only known by the Bank and User). Sometimes, user's card may be stolen by someone and this person can access all confidential information as Credit card number, Card holder name, Expiry date and CVV number through which he/she can complete fake transaction. In this paper, we introduced the biometric encryption of "EYE RETINA" to enhance the security over the wireless and unreliable network as internet. In this method user can authorizeasthird person his/her behalf to make the transaction using Debit or Credit card. In proposed method, third person can also perform financial transaction by providing his/her eye retina for the authorization & identification purpose.
Cited by 7
Chris J. Mitchell, Fred Piper, Peter Wild · Designs Codes and Cryptography · 2007
Cited by 0
Nesrine Kaaniche, Aymen Boudguiga, Maryline Laurent · 2013
This paper addresses the security issues of storing sensitive data in a cloud storage service and the need for users to trust the commercial cloud providers. It proposes a cryptographic scheme for cloud storage, based on an original usage of ID-Based Cryptography. Our solution has several advantages. First, it provides secrecy for encrypted data which are stored in public servers. Second, it offers controlled data access and sharing among users, so that unauthorized users or untrusted servers cannot access or search over data without client's authorization.
Cited by 20
Byoungcheon Lee, Colin Boyd, Ed Dawson et al. · 2004
ID-based cryptosystems have many advantages over PKI based cryptosystems in key distribution, but they also have an inherent drawback of key escrow problem, i.e. users' private keys are known to the key generation center (KGC). Therefore secure key issuing (SKI) is an important issue in ID-based cryptography. In multiple authority approach (Boneh & Franklin 2001, Chen et al. 2002), key generation function is distributed to multiple authorities. Keeping key privacy using user-chosen secret information (Gentry 2003, Al-Riyami & Paterson 2003) is a simple and efficient solution, but it loses the advantages of ID-based cryptosystems. In this
Cited by 122
Sarvesh Tanwar, Anil Kumar · Information Security Journal A Global Perspective · 2022
Recently security plays a crucial part throughout the communication framework. In the most recent decade, organizations have endeavored to move from a paper-concentrated environment to a sans paper environment where data security is one of the essential issues, and any weakness in this respect can have crushing impacts. Security implies the assurance of the data from any unauthorized access or manipulation through spying or scientific or probabilistic calculations and different strategies. For the security of information, researchers are doing more work on ID-based Cryptography (IDC). However, it has two limitations: one suffers from an inherent key escrow problem, and the second is how to revoke the misbehavior/compromised user. Tseng and Tsai have proposed a novel Revocable ID-Based Encryption (RIBE). Yet, they have not considered the key escrow problem. This paper proposed an approach in which secure key issuance is done only for non-revocable ID. This will reduce the key escrow problem as multiple entities rather than one Private Key Generator (PKG) issue the key. It will reduce the possibility of compromised PKG as the private key is cooperatively issued by PKG and multiple Key Privacy Authorities (KPAs).
Cited by 9
Sunam Ryu, Kevin Butler, Patrick Traynor et al. · 2007
Structured peer-to-peer systems have grown enormously because of their scalability, efficiency and reliability. These systems assign a unique identifier to each user and object. However, current assignment schemes allow an adversary to carefully select user IDs and/or simultaneously obtain many pseudo-identities—leading ultimately to an ability to disrupt the P2P system in very targeted (and dangerous) ways. In this paper, we propose novel ID assignment protocols based on identity-based cryptography. This approach permits the acquisition of node IDs to be tightly regulated without many of the complexities and costs associated with traditional certificate solutions. We broadly consider the security requirements of ID assignment and present three protocols representing distinct threat and trust models. A detailed empirical study of the protocols is given. Our analysis shows that the cost of our identity-based protocols is nominal, and that the associated identity services can scale to millions of users using a limited number of servers. 1.
Cited by 0
Mahdi Aiash, Ameer Al-Nemrat, David Preston · Lecture notes in computer science · 2013
Cited by 5Open access
Nanrun Zhou, Hui Wan · 2008
Ad hoc networks are more vulnerable to security threats than the traditional wireless networks. A secure communication scheme is proposed based on ID-based cryptography (IBC). The main problems discussed are nodes joining and session key agreement. In a hostile environment, the demand of concealing nodepsilas identity is studied. The proposed scheme uses symmetric cryptography and the properties of bilinear pairing. The analysis shows that the scheme has authentication, confidentiality, non-impersonation, forward security and anonymity properties with less computation and lower communication cost.
Cited by 1
Naveed Ahmad, Haitham Cruickshank, Zhili Sun · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · 2010
Cited by 6
Om Pal, Anupam Saxena, Uttam K. Kumawat et al. · Communications in computer and information science · 2011
Cited by 1
Y. V. Subba Rao, Yulia Sukonkina, Chakravarthy Bhagwati et al. · 2008
The main idea of this paper is to efficiently apply the Visual Cryptography (VC) techniques onto the area of authentication using fingerprints. We present an alternative approach of using the fingerprints, attempting to solve two major problems related to fingerprint based automatic access control systems, which are falsification and the costly maintenance of the large fingerprint database. In the proposed application we divide an input fingerprint image into two shares with the help of the basic VC techniques, keeping one with the participant in the form of ID card and saving the other one in the database. This share kept in the database will be the same for all of the participants. While accessing, we will stack the corresponding shares together and compare the obtained image with the provided fresh fingerprint using any modern minutia extraction algorithm.
Cited by 30
Francisco Martín-Fernández, Pino Caballero‐Gil, Cándido Caballero‐Gil · 2015
The management of fraudulent users of vehicular ad-hoc networks is one of the most important security issues
of these mobile networks. It is necessary to prevent the access of malicious users to the network so that they
cannot send false information to other users. This paper defines a new method for managing revoked users,
using identity-based authentication, what allows improving both efficiency and security through certificateless
authentication. The presented proposal optimizes the performance of classical revocation lists by building a
data structure based on two concepts: an authenticated dynamic hash k-ary tree, and the frequency with which
revoked pseudonyms are queried. Thus, revoked pseudonyms that are more frequently queried have a higher
level in the tree. This provides a better match to urban environments, where there are some types of vehicles
that spend more time on the road due to their work tasks.
Cited by 0
DR Ibrahim (17338951), R Abdullah (7794071), Je Sen Teh (17324902) et al. · Figshare · 2019
Cited by 0Open access
Byung‐Gil Lee, Hyun-gon Kim, Sungwon Sohn et al. · 2004
The mobile IP application of AAA (diameter protocol) provides authentication, authorization, and accounting (AAA) services in a wireless roaming Internet service. As such, the current paper proposes the application of identity-based cryptography to mobile IP with AAA authentication, thereby facilitating the introduction of public key cryptography through allowing a mobile IP entity's public key to be derived from an arbitrary identification value, such as e-mail styled NAI (network access identity). The diameter security association (DSA) provides a PKI-based key delivery between AAA server of the visited and home ISP network. Therefore, the proposed method combines the use of the DSA with an identity (ID)-based cryptographic security association (ISA). Consequently, the proposed concatenated security association of the DSA for an inter-ISP trust chain and an ISA for mobile IP user authentication can alleviate the problem of ID-based private distribution for visited network entities and greatly reduce the need for an reliance on public key certificates for mobile nodes. Furthermore, the proposed protocol can also establish a security association among all mobile IP related nodes and AAA related nodes.
Cited by 5
Dania Aljeaid, Xiaoqi Ma, Caroline Langensiepen · 2015
This paper presents a Petri net (PN) approach to modelling, simulating, and analysing the new protocol we have proposed. This new protocol is an enhanced authentication scheme based on a biometric verification mechanism and identity based cryptography. A formal approach like Petri nets allows one to represent cryptographic protocols. For the sake of simplicity, a complex PN model will not be discussed in this paper until all attacks are demonstrated and the model proved to be secure. This paper shows how Petri nets are used to model, analyse and detect flaws in our new protocol. First, our proposed protocol is modelled without an adversary, and then a generic adversary model is added to examine all possible adversary behaviours. Finally we demonstrate how Petri nets can be used to analyse security threats such as man-in-the-middle attack, reflection attack, and parallel session attack on this protocol.
Cited by 0
Shyi-Tsong Wu, Jung‐Hui Chiu, Bin‐Chang Chieu · 2006
Elliptic curve cryptography sustains equal security for afar small key size. Recently the pairings operations on elliptic curve have received considerable attention. In this paper, we apply the cryptographic primitive of pairings on elliptic curve to a remote password authentication scheme with smart cards. The proposed pairing-based remote authentication scheme requires no password table to verify the legitimacy of the login user and allows the users to choose and change their password. The distributed remote hosts do not need the knowledge of the secret of the key information center to authenticate the legitimacy of the users. It enhances the flexibility of the remote authentication scheme.
Cited by 27
Aymen Boudguiga, Maryline Laurent · HAL (Le Centre pour la Communication Scientifique Directe) · 2012
International audience
Cited by 0Open access
Jean‐Michel Combes, Ghada Arfaoui, Maryline Laurent · HAL (Le Centre pour la Communication Scientifique Directe) · 2012
This paper proposes a new security method for protecting signalling for Domain Name System (DNS) architecture. That is, it makes secure DNS update messages for binding a Fully Qualified Domain Name (FQDN) of an IPv6 node and the IPv6 address of the node owning this FQDN. This method is based on the use of Cryptographically Generated Addresses (CGA) and IDBased Cryptography (IBC). Combination of these two techniques allows DNS server to check the ownership of the IPv6 address and the FQDN, sent by the DNS client. In addition, this paper describes how this method has been implemented.
Cited by 0Open access