Notes on Broadcast Encryption Scheme

KUANG Jianmin,GU Dawu

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.02.052

2006-01-01

Abstract:Broadcast encryption communication is a wildly used group communication mode. The paper concisely analyses four typical protocols. A new broadcast encrypt frame and scheme are proposed. This scheme has the abiliity of user scalable, and its message length is similar with other schemes.

What problem does this paper attempt to address?

Broadcast group-oriented encryption for group communication

Chunbo Ma,Qixiang Mei,Jianhua Li

2007-01-01

Journal of Computational Information Systems

Abstract:A novel broadcast encryption scheme for group communication scenarios in distributed networks is presented in this paper. In the scheme, user can encrypt a message and distribute it to a designated group and member in the designated group can decrypt the ciphertext. Compared with the traditional broadcast encryption schemes, the new one has the following significances: first, both ciphertext and public key are of constant size. Second, user in the scheme can verify the validity of the ciphertext. This property is very important to the large-scale group communication since the gateway can filter the incorrect ciphertext and alleviate the receiver's workload. Finally, a proof is given in random oracle model and show that the proposed scheme is secure against adaptively chosen ciphertext attack.
Broadcast Group-oriented Encryption in Group Communication

Chunbo Ma,Yue Wu,Jianhua Li

DOI: https://doi.org/10.1109/ICCCAS.2006.284984

2006-01-01

Abstract:In this paper, we present a novel broadcast group oriented encryption. In our scheme, any receiver in the designated group can independently decrypt the ciphertext. In addition, compared with other schemes, both ciphertext and private keys are of constant size. Therefore, it is more efficient than the ordinary measures for a sender to encrypt a message for a group
Broadcast Group-Oriented Encryption Secure Against Chosen Ciphertext Attack

Ma Chunbo,Ao Jun,Li Jianhua

DOI: https://doi.org/10.1016/s1004-4132(08)60025-0

2007-01-01

Abstract:A novel broadcast encryption scheme for group communication scenarios in distributed networks is presented. In the scheme, anyone is allowed to encrypt a message and distribute it to a designated group. Each member in the designated group has the ability to independently decrypt a ciphertext. In contrast to traditional broadcast encryption, all the valid receivers in the proposed scheme compose the designated group. To take advantage of this property, a tab for the group is set and the matching private key for each member is generated. In addition, before decrypting a ciphertext, anyone in the scheme can verify the ciphertext, to ensure that the ciphertext is correct. This property is very important for large-scale group communication, as the gateway can filter incorrect ciphertext and alleviate the receiver’s workload. Finally, a proof in the random oracle model is given, to show that the proposed scheme is secure against the adaptively chosen ciphertext attack.
THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

SHAO Bing,LU Dong-ming

2000-01-01

Abstract:Data encryption is one of the key techniques for information security. In the beginning of this paper, the present encryption methods are analyzed. Next, we design one practical system which can transmits data in the Internet and has the capacity of digital signature and authentication. Finally, some technical issues encountered in the system implementation are discussed
A Scheme Study of Broadcast Conference Key in Network

Zhanguo Li

2006-01-01

Abstract:This paper gives a new scheme based on broadcast keys in the network.The protocol structure uses TA(Trusted Authority) as a key distribution center,and users get the keys from TA.Every user is able to decrypt the information in the network through his known keys.Considering the security of the communication we use a simple and efficient method to authenticate the senders and receivers.
A Transmission Scheme of the Advanced Digital Television Broadcasting System

张文军,夏劲松,王匡,葛建华

DOI: https://doi.org/10.3969/j.issn.1002-8692.2002.01.003

2002-01-01

Abstract:With the co-efforts from Zhejiang University,Shanghai Jiao Tong University and Xidian Universi-ty,a transmission scheme of the Advanced Digital Television Broadcasting System(ADTB)is presented in this paper.The simulated system functions and performance are superior to that of international DTV transmission standards.A stable fixed,portable and even mobile reception of large volume broadcasting data can be attained with a consumer grade tuner and various modulation modes.The scheme is also designed to support SFN and on-channel repeater functions,to incorporate efficient digital cable transmission modes,and to be easily compatible with some foreign standards.The presented scheme is one of the ideal candidates of DTV broadcasting standards being defined in our country.[
Design and Implementation of Secure and Live StreamMedia System

GUAN Guo-chen,XING Wei,LU Dong-ming

DOI: https://doi.org/10.3969/j.issn.1002-8692.2006.02.021

2006-01-01

Abstract:In order to make StreamMedia system to be secure and Real-time, technique of DCT encryption and reliable key distribution is used, also some especial work is done in such aspects as thread creation, memory allocation and procedure′s running mode and sequence.
Adaptively secure certificate-based broadcast encryption and its application to cloud storage service

Liqing Chen,Jiguo Li,Yang Lu,Yichen Zhang

DOI: https://doi.org/10.1016/j.ins.2020.05.092

IF: 8.1

2020-10-01

Information Sciences

Abstract:<p>The existing public key broadcast encryption schemes are mainly constructed in identity-based cryptosystem, which bears the inherent problems of key escrow and key distribution. The certificate-based encryption mechanism can effectively address the problems in identity-based cryptosystem. Meanwhile, it simplifies the certificate revocation issue for traditional public key cryptosystem. Inspired by the idea of certificate-based encryption, we put forward the new primitive certificate-based broadcast encryption as well as its formal definition and security model. In virtue of prime order bilinear groups, we present an instantiation scheme of certificate-based broadcast encryption. To our best knowledge, the proposed scheme is the first adaptively secure scheme for certificate-based broadcast encryption in the standard model against chosen-ciphertext attack. Compared with the previous work, our scheme has advantages in the respects of computation cost as well as security properties. Furthermore, we present an application scenario of the proposed scheme for data access control in cloud storage service.</p>

computer science, information systems
Indentity-based broadcast signcryption

Fagen Li,Xiangjun Xin,Yupu Hu

DOI: https://doi.org/10.1016/j.csi.2007.08.005

IF: 3.721

2008-01-01

Computer Standards & Interfaces

Abstract:Broadcast encryption schemes allow a center to deliver encrypted data to a large set of users so that only a particular subset of privileged users can decrypt it. Most of previous works about broadcast encryption only provide confidentiality of the message. However, when a broadcast system is composed of multiple broadcasters, it raises an issue of authentication and non-repudiation of the message or broadcaster. This issue is especially important for multicasting in computer networks. In this paper, a new concept called broadcast signcryption by combining the concepts of broadcast encryption and signcryption together is proposed to resolve the authentication and non-repudiation problem in a broadcast system. We also propose an identity-based broadcast signcryption scheme using Chen and Malone-Lee's identity-based signcryption scheme.
Broadcast Encryption Tree's Regrowth Method

WU Bei,WANG Jin-lin,NI Hong,CHEN Jun

DOI: https://doi.org/10.3969/j.issn.1000-3428.2007.22.058

2007-01-01

Abstract:Broadcast encryption can allow a center to broadcast secure transmission to an arbitrary set of recipients,which is popular in pay TV,telephone conference and so on.Based on the comparison and analysis of the existing broadcast encryption schemes,this paper proposes a broadcast encryption tree’s regrowth method.By making the logical key tree grow bottom-up,this method can add new users in batches without influencing the previous users.So it solves subset and layered subset difference scheme’s unscalability.
Quantum broadcast communication

Jian Wang,Quan Zhang,Chao-jing Tang

DOI: https://doi.org/10.1088/1009-1963/16/7/011

2006-04-28

Abstract:Broadcast encryption allows the sender to securely distribute his/her secret to a dynamically changing group of users over a broadcast channel. In this paper, we just consider a simple broadcast communication task in quantum scenario, which the central party broadcasts his secret to multi-receiver via quantum channel. We present three quantum broadcast communication schemes. The first scheme utilizes entanglement swapping and Greenberger-Horne-Zeilinger state to realize a task that the central party broadcasts his secret to a group of receivers who share a group key with him. In the second scheme, based on dense coding, the central party broadcasts the secret to multi-receiver who share each of their authentication key with him. The third scheme is a quantum broadcast communication scheme with quantum encryption, which the central party can broadcast the secret to any subset of the legal receivers.

Quantum Physics
Analysis And Improvement Of A Secret Broadcast With Binding Encryption In Broadcasting Networks

Mingwu Zhang,Fagen Li,Tsuyoshi Takagi

DOI: https://doi.org/10.1587/transinf.E95.D.686

2012-01-01

IEICE Transactions on Information and Systems

Abstract:A secret broadcasting scheme deals with secure transmission of a message so that more than one privileged receiver can decrypt it. Jeong et al. proposed an efficient secret broadcast scheme using binding encryption to obtain the security properties of IND-CPA semantic security and decryption consistency. Thereafter, Wu et al. showed that the Jeong et al.'s scheme just achieves consistency in relatively weak condition and is also inefficient, and they constructed a more efficient scheme to improve the security. In this letter, we demonstrate that the Wu et al.'s scheme is also a weak decryption consistency and cannot achieve the decryption consistency if an adversary has the ability to tamper with the ciphertext. We also present an improved and more efficient secret broadcast scheme to remedy the weakness. The proposed scheme achieves decryption consistency and IND-CCA security, which can protect against stronger adversary's attacks and allows us to broadcast a digital message securely.
Lightweight Identity-Based Broadcast Encryption over Wireless Ad Hoc Networks

Chun Yuan,Hongyang Gao,Wenshuo Zhou

DOI: https://doi.org/10.1109/wicom.2011.6040166

2011-01-01

Abstract:Due to wireless ad hoc networks' properties of low bandwidth, high delay, high loss rate, and mobility, the implementation of broadcast encryption over wireless ad hoc networks has been a tough problem. This paper describes a lightweight identity-based broadcast encryption scheme including traitor tracing function, which achieves constant size ciphertexts, constant size private keys, and constant size public key. When adding new users, system doesn't have to change previous setups. In addition, by adjusting symmetric key life cycle, system can make tradeoff between security level and efficiency.
A Certificateless Broadcast Threshold De-signcryption Scheme and its Application to DRM

Xiaofeng Wang,Lihua Tian

DOI: https://doi.org/10.1109/ICCIT.2009.141

2009-01-01

Abstract:In this paper, we propose a variation of broadcast encryption, called certificateless broadcast threshold de-signcryption (CL-BTDS), and present a concrete CL-BTDS scheme from the multilinear form. This variation provides the functionality that ensures both confidentiality and authenticity of the broadcast message, and non-repudiation of the broadcaster in a logically single step, meanwhile, overcomes the key escrow limitation of the identity-based cryptography. Multilinear forms are applied here to provide constant size ciphertext. We construct an application case to demonstrate that proposed scheme can be used to provide encryption and authentication simultaneously to distribute digital content in multiple DRM formats.
The Barth-Boneh-Waters Private Broadcast Encryption Scheme Revisited

Zhengjun Cao,Lihua Liu

DOI: https://doi.org/10.48550/arXiv.1408.6610

2014-08-28

Abstract:The primitive of private broadcast encryption introduced by Barth, Boneh and Waters, is used to encrypt a message to several recipients while hiding the identities of the recipients. In their construction, a recipient has to first decrypt the received ciphertext to extract the verification key for one-time signature. He then uses the verification key to check whether the ciphertext is malformed. The authors did not consider that information delivered over a channel, especially over a broadcast channel, should be authenticated as to its origin. We remark that the conventional public key signature suffices to authenticate data origin and filter out all malformed ciphertexts. We also discuss the disadvantages of the primitive of one-time signature used in their construction.

Cryptography and Security
Fully Anonymous Identity-Based Broadcast Signcryption with Public Verification

Zhaoman Liu,Yanbo Chen,Jianting Ning,Yunlei Zhao

DOI: https://doi.org/10.1016/j.tcs.2024.114464

IF: 1.002

2024-01-01

Theoretical Computer Science

Abstract:In the multicast communication scenario, compared with broadcast encryption, broadcast signcryption or multi-receiver signcryption has additional ability to authenticate the source of the message. With the enhanced awareness of privacy preservation, ordinary users pay more attention to the identity leakage in the communication process. The primitive of anonymous broadcast signcryption has been proposed to solve this problem, which provides additional anonymity compared with the existing broadcast signcryption. However, most anonymous broadcast signcryption schemes only ensure the sender's identity concealment but ignore the anonymity of the receiver set. In this paper, we present a fully anonymous identity-based broadcast signcryption scheme, which meets insider unforgeability, outsider confidentiality, identity concealment of sender and full anonymity of the receiver set. In addition, our scheme has two further desirable characteristics. One is public verifiability which means any third party can verify the validity of the message source without knowing the private key provided by the receiver. The other is statelessness which means the user does not need to update the private key due to the join or revocation of other users. Moreover, our scheme has constant-size public parameters and private key as well as constant decryption complexity, which makes the scheme more suitable for deployment in devices with limited storage or low computing power such as IoT devices.
A New Privacy-Preserving Broadcast Encryption Scheme from DPVS

Hao Wang,Zhihua Zheng,Yilei Wang

DOI: https://doi.org/10.1109/INCoS.2013.61

2013-01-01

Abstract:In this paper, we consider the privacy-preserving problem in the context of broadcast encryption. We provide a security definition for privacy-preserving broadcast encryption, and construct a new scheme. To achieve privacy-preserving, we blind the cipher texts using the random factors. Moreover, we use a pair of orthonormal bases to construct secret key and cipher texts for proper decryption. Our privacy-preserving broadcast encryption scheme can be proven in the adaptive model without random oracle. The key technique used to obtain our result is an elaborate combination of the dual system encryption proposed by Waters and a new approach on bilinear pairings using the notion of dual pairing vector spaces (DPVS) proposed by Okamoto and Takasima.
Fully Privacy-Preserving ID-Based Broadcast Encryption with Authorization

Jianchang Lai,Yi Mu,Fuchun Guo,Rongmao Chen

DOI: https://doi.org/10.1093/comjnl/bxx060

2017-06-07

The Computer Journal

Abstract:A revocable ID-based broadcast encryption scheme allows an authorized third party to revoke any receiver (decryptor) from the initial receiver set S of the original broadcast ciphertext without the need of decryption. However, the existing revocable ID-based broadcast encryption schemes in the literature cannot fully preserve the receiver privacy and have a large size of ciphertext when the revoked user sets are large. To solve these problems, in this paper, we propose a novel scheme: fully privacy-preserving ID-based broadcast encryption with authorization. Our scheme allows an authorized party to dynamically handle the decryption rights of receivers via an authorized user set L without knowing the message and the identities of the initial receivers. Only those users who are both in S and L can decrypt the ciphertext successfully. The final ciphertext reveals nothing about the identity information of receivers and the authorized users. Our scheme achieves full collusion resistance and is applicable to anonymous data sharing where the receivers are decided by the authorized third party (or multiple authorized third parties) excluding the data owner. We show that our proposed scheme is provably secure under the defined security models in the random oracle model.
Broadcast Encryption-Based P2P DRM without Central License Server

Lie Liu,Chun Yuan

DOI: https://doi.org/10.1007/978-3-642-10467-1_39

2009-01-01

Abstract:As P2P technique is broadly used for content distribution today, copyright infringement becomes a big problem. Thus we propose a DRM scheme over P2P network by establishing an access control mechanism for shared digital content. Compared with the traditional PKI, broadcast encryption is considered as more suitable for constructing P2P DRM system. But the existence of a central license server would not only cause single point of failure but also bring bottleneck problem. In this paper, we describe a basic implementation of broadcast encryption-based P2P DRM system first. Then we present a general scheme with focus on how to decentralize the license agency to reserve the flexibility of P2P network. At last we analyze its security, evaluate its efficiency and point out a tradeoff between the two system parameters.
Fully Cca2 Secure Identity Based Broadcast Encryption Without Random Oracles

Yanli Ren,Dawu Gu

DOI: https://doi.org/10.1016/j.ipl.2009.01.017

IF: 0.851

2009-01-01

Information Processing Letters

Abstract:In broadcast encryption schemes, a broadcaster encrypts messages and transmits them to some subset S of users who are listening to a broadcast channel. Any user in S can use his private key to decrypt the broadcast. An identity based cryptosystem is a public key cryptosystem where the public key can be represented as an arbitrary string. In this paper, we propose the first identity based broadcast encryption (IBBE) scheme that is IND-ID-CCA2 secure without random oracles. The public key and ciphertext are constant size, and the private key size is linear in the total number of receivers. To the best of our knowledge, it is the first IBBE scheme that is fully CCA2 secure without random oracles. Moreover, our IBBE scheme is collusion resistant for arbitrarily large collusion of users.

Notes on Broadcast Encryption Scheme

Broadcast group-oriented encryption for group communication

Broadcast Group-oriented Encryption in Group Communication

Broadcast Group-Oriented Encryption Secure Against Chosen Ciphertext Attack

THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

A Scheme Study of Broadcast Conference Key in Network

A Transmission Scheme of the Advanced Digital Television Broadcasting System

Design and Implementation of Secure and Live StreamMedia System

Adaptively secure certificate-based broadcast encryption and its application to cloud storage service

Indentity-based broadcast signcryption

Broadcast Encryption Tree's Regrowth Method

Quantum broadcast communication

Analysis And Improvement Of A Secret Broadcast With Binding Encryption In Broadcasting Networks

Lightweight Identity-Based Broadcast Encryption over Wireless Ad Hoc Networks

A Certificateless Broadcast Threshold De-signcryption Scheme and its Application to DRM

The Barth-Boneh-Waters Private Broadcast Encryption Scheme Revisited

Fully Anonymous Identity-Based Broadcast Signcryption with Public Verification

A New Privacy-Preserving Broadcast Encryption Scheme from DPVS

Fully Privacy-Preserving ID-Based Broadcast Encryption with Authorization

Broadcast Encryption-Based P2P DRM without Central License Server

Fully Cca2 Secure Identity Based Broadcast Encryption Without Random Oracles