Abstract:In this paper, we introduce a new cryptographic primitive, called autonomous path proxy re-encryption (AP-PRE), which is motivated by several application scenarios where the delegator would like to control the whole delegation path in a multi-hop delegation process. Compared with the traditional proxy re-encryption, AP-PRE provides much better fine-grained access control to delegation path. Briefly speaking, in an AP-PRE scheme, the delegator designates a path of his preferred delegatees. The path consists of several delegatees with the privilege from high to low. If the delegatee in the path cannot complete the decryption, the decryption right is automatically delegated to the next one in the path. In this way, the delegator can ensure that the delegation has always been done among those delegatees the delegator trusts. Moreover, an AP-PRE scheme has to obey the following path rules. The delegation, for ciphertexts of a delegator i, can only be carried out on the autonomous path Pa-i designated by the delegator i, in the sense that (1) re-encrypted ciphertexts along the autonomous path Pa-i cannot branch off Pa-i with meaningful decryption, and (2) original ciphertexts generated under pk(j) for j not equal i (i.e., for a path Pa-j different from Pa-i) cannot be inserted into (i.e., cannot be transformed along) the autonomous path Pa-i with meaningful decryption. We give the formal definition, as well as the formal security model, for this cryptographic primitive. Under this concept, we construct an IND-CPA secure AP-PRE scheme under the decisional bilinear Diffie-Hellman (DBDH) assumption in the random oracle model. Our scheme is with the useful properties of proxy re-encryption, i.e., unidirectionality and multi-hop.

Ciphertext Policy Attribute-Based Proxy Re-Encryption

Proxy Re-encryption with Keyword Search from Anonymous Conditional Proxy Re-encryption

Attribute Based Data Sharing with Attribute Revocation.

K-times Proxy Re-encryption

Time-based attribute-based proxy re-encryption with decryption key update

Fully secure unidirectional identity-based proxy re-encryption

New Construction of Identity-based Proxy Re-encryption.

AP-PRE: Autonomous Path Proxy Re-Encryption and Its Applications

Fully Secure Hidden Ciphertext-Policy Attribute-Based Proxy Re-Encryption

Improved AB‐CPREs with Revocability and HRA Security under LWE

Burn after Reading: Adaptively Secure Puncturable Identity-Based Proxy Re-Encryption Scheme for Securing Group Message

Further Improvement of a Dynamic Type and Identity-Based Proxy Re-Encryption Scheme

Ciphertext Policy Attribute based Encryption with anonymous access policy

Weighted Attribute-Based Proxy Re-Encryption Scheme with Distributed Multi-Authority Attributes

On The Security Of A Bidirectional Proxy Re-Encryption Scheme From Pkc 2010

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

Key escrow-free attribute based encryption with user revocation

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

Lattice-based key private PREs with HRA security and PCS security

A Lightweight Access Control Scheme Supporting Policy Hidden Based on Path Bloom Filter.