Outsourcing scheme of ABE encryption secure against malicious adversary. Issue 86 (September 2019)

• Record Type: Journal Article
• Authors: Ohtake, Go; Safavi-Naini, Reihaneh; Zhang, Liang Feng
• Is Part Of: Computers & security. Issue 86(2019)
• Page Start: 437
• Page End: 452
• Publication Date: 2019-09
• Subjects: Outsourcing scheme -- Attribute-based encryption -- Malicious adversary -- Random oracle model -- Integrated broadcast-broadband service -- Over-The-Top service -- Mobile service; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2018.10.012
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: This study presents an efficient attribute-based encryption scheme. Encryption process can be securely outsourced to a malicious cloud server. Our scheme can significantly reduce the computation cost for user terminal. Our scheme can be applied to various services using personal data. Abstract: Integrated broadcast-broadband services allow viewers to simultaneously receive broadcast content over the airwaves and additional information related to the content over the Internet. This integration provides opportunities for new services to be tailored and offered to individual viewers. Viewing histories provide a rich variety of data for service providers to learn the preferences of individual viewers and fine-tune their offerings. Each person's viewing history, however, is privacy-sensitive data and may reveal information that the viewer does not want revealed. In this paper, we propose a system that allows viewers to specify a policy that they would like to be applied to their viewing history, when shared with service providers, by using attribute-based encryption (ABE). A ciphertext is associated with a policy, and it can be decrypted only by service providers who conform to the policy. To reduce the computations of the user terminal, we develop a system with provable security that allows the encryption to be outsourced to a cloud server, without the need to trust the cloud server. To the best of our knowledge, our construction gives the first outsourcing scheme of ABE encryption that is secure against a malicious cloud server. Although our solution is described for integrated broadcast-broadband services, the architecture and results could also be used for sharing viewing histories of OTT (Over-The-Top) services such as Netflix and location histories of mobile services. We implemented our scheme and showed that it significantly reduces the computation cost of a user terminal: about one third that of the Waters' ABE scheme.