Abstract:As technology advances rapidly, a diverse array of Internet of Things (IoT) devices finds widespread application across numerous fields. The intelligent nature of these devices not only gives people more convenience, but also introduces new challenges especially in security when transmitting data in fog-based cloud environments. In fog computing environments, data need to be transmitted across multiple devices, increasing the risk of data being intercepted or tampered with during transmission. To securely share cloud ciphertexts, an alleged proxy re-encryption approach is a commonly adopted solution. Without decrypting the original ciphertext, such a mechanism permits a ciphertext intended for user A to be easily converted into the one intended for user B. However, to revoke the decryption privilege of data users usually relies on the system authority to maintain a user revocation list which inevitably increases the storage space. In this research, the authors come up with a fog-based proxy re-encryption system with revocable identity. Without maintaining the traditional user revocation list, the proposed scheme introduces a time-updated key mechanism. The time-update key could be viewed as a partial private key and should be renewed with different time periods. A revoked user is unable to obtain the renewed time-update key and hence cannot share or decrypt cloud ciphertexts. We formally demonstrate that the introduced scheme satisfies the security of indistinguishability against adaptively chosen identity and chosen plaintext attacks (IND-PrID-CPA) assuming the hardness of the Decisional Bilinear Diffie-Hellman (DBDH) problem in the random oracle model. Furthermore, compared with similar systems, the proposed one also has lower computational complexity as a whole.

A No-Pairing Proxy Re-Encryption Scheme for Data Sharing in Untrusted Cloud.

Pairing-Free Certificate-Based Proxy Re-Encryption Plus Scheme for Secure Cloud Data Sharing

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

��计算中基于可转换代理签密的可证安全的认证协议

A Key-insulated Proxy Re-encryption Scheme for Data Sharing in a Cloud Environment.

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

A Blockchain-Based Secure Data Sharing Approach with Proxy Re-Encryption

Weighted Attribute-Based Proxy Re-Encryption Scheme with Distributed Multi-Authority Attributes

Conditional Proxy Re-Encryption-Based Key Sharing Mechanism for Clustered Federated Learning

Anonymous deduplication of encrypted data with proof of ownership in cloud storage

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

Revocable and Fog-Enabled Proxy Re-Encryption Scheme for IoT Environments

Sharing Data Homomorphically Encrypted with Different Encryption Keys

Multi-Keyword Searchable Identity-Based Proxy Re-Encryption from Lattices

Secure K-Nn Query on Encrypted Cloud Data with Multiple Keys

A Dynamic Secure Group Sharing Framework in Public Cloud Computing

A Secured Proxy-Based Data Sharing Module in IoT Environments Using Blockchain

Attribute-based Searchable Proxy Re-encryption Blockchain Data Sharing Scheme