Abstract:In recent years, to address the security defect that the explicit attribute values in access policies may reveal the privacy, a new variant of ciphertext-policy attribute-based encryption(CP-ABE)——hidden policy CP-ABE (HP-CP-ABE) is proposed in some recent works. But there are two tremendous flaws in most existing HP-CP-ABE schemes. The one issue is that an attacker can launch the attribute values guessing attacks (AVGA) to detect the attribute values in access policies of many HP-CP-ABE schemes. And another issue is that, if the HP-CP-ABE schemes are using the “Linear Secret Sharing Schemes (LSSS)” as their access structures, as the rows of the LSSS matrix grows, the time complexity of the decryption testing algorithm will boost rapidly which will greatly aggravate the computing burden of the user. So in this paper, we propose a partially HP-CP-ABE (PHP-CP-ABE) scheme which can perfectly withstand the attribute values guessing attacks (AVGA). As our access structure is using the LSSS, to alleviate the computing burden of the user, we design a online privacy-protective decryption testing algorithm for the users to privately and securely outsource the decryption testing phase to the cloud server. Our online testing algorithm is privacy-protective which means during running the privacy-protective decryption testing algorithm, the cloud server has no chance to know anything about the attribute values in the access policy and the attribute values of the user. This will prevent the privacy from leaking out to the third party cloud server. Then we rigorously prove that our scheme is selectively indistinguishable secure under chosen plaintext attacks (IND-CPA). Next, by reduction to the computational q-PBDHE assumption which is firstly proposed in our paper, we prove that our HP-CP-ABE scheme is indistinguishable secure under the attribute values guessing attacks (IND-AVGA). Finally through the comparison with the state-of-art HP-CP-ABE schemes from the perspective of functionality and efficiency, it is easily to observe that our scheme has high-security and high-efficiency. In appendix, we give a straightaway analysis to some relevant works to point out the security vulnerabilities in their schemes.

Hidden Policy Ciphertext-Policy Attribute Based Encryption With Conjunctive Keyword Search

Secure and Efficient Attribute-Based Encryption with Keyword Search.

Attribute-Based Encryption with Efficient Keyword Search and User Revocation.

Efficient Attribute-Based Searchable Encryption with Policy Hiding over Personal Health Records

On the Security of Privacy-Preserving Attribute-Based Keyword Search in Shared Multi-owner Setting

An Efficient Key-Policy Attribute-Based Searchable Encryption In Prime-Order Groups

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

ABKS-SKGA: Attribute-based keyword search secure against keyword guessing attack

Efficient ciphertext-policy attribute based encryption with hidden policy

Certificateless Public Key Authenticated Encryption with Keyword Search Achieving Stronger Security.

Fully Secure Hidden Ciphertext Policy Attribute-Based Encryption with Short Ciphertext Size

Multi-client Verifiable Encrypted Keyword Search Scheme with Authorization over Outsourced Encrypted Data

On the Security of Secure Keyword Search and Data Sharing Mechanism for Cloud Computing

A Partially Hidden Policy CP-ABE Scheme Against Attribute Values Guessing Attacks with Online Privacy-Protective Decryption Testing in IoT Assisted Cloud Computing.

Optimized Verifiable Fine-Grained Keyword Search in Dynamic Multi-Owner Settings

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

Security Analysis for a Ciphertext-Policy Attribute-Based Encryption Scheme

Privacy-preserving Conjunctive Keyword Search on Encrypted Data with Enhanced Fine-Grained Access Control

PHAS-HEKR-CP-ABE: Partially Policy-Hidden CP-ABE with Highly Efficient Key Revocation in Cloud Data Sharing System

Data Querying with Ciphertext Policy Attribute Based Encryption

Privacy-Aware Attribute-Based Encryption with User Accountability