Abstract:In recent years, to address the security defect that the explicit attribute values in access policies may reveal the privacy, a new variant of ciphertext-policy attribute-based encryption(CP-ABE)——hidden policy CP-ABE (HP-CP-ABE) is proposed in some recent works. But there are two tremendous flaws in most existing HP-CP-ABE schemes. The one issue is that an attacker can launch the attribute values guessing attacks (AVGA) to detect the attribute values in access policies of many HP-CP-ABE schemes. And another issue is that, if the HP-CP-ABE schemes are using the “Linear Secret Sharing Schemes (LSSS)” as their access structures, as the rows of the LSSS matrix grows, the time complexity of the decryption testing algorithm will boost rapidly which will greatly aggravate the computing burden of the user. So in this paper, we propose a partially HP-CP-ABE (PHP-CP-ABE) scheme which can perfectly withstand the attribute values guessing attacks (AVGA). As our access structure is using the LSSS, to alleviate the computing burden of the user, we design a online privacy-protective decryption testing algorithm for the users to privately and securely outsource the decryption testing phase to the cloud server. Our online testing algorithm is privacy-protective which means during running the privacy-protective decryption testing algorithm, the cloud server has no chance to know anything about the attribute values in the access policy and the attribute values of the user. This will prevent the privacy from leaking out to the third party cloud server. Then we rigorously prove that our scheme is selectively indistinguishable secure under chosen plaintext attacks (IND-CPA). Next, by reduction to the computational q-PBDHE assumption which is firstly proposed in our paper, we prove that our HP-CP-ABE scheme is indistinguishable secure under the attribute values guessing attacks (IND-AVGA). Finally through the comparison with the state-of-art HP-CP-ABE schemes from the perspective of functionality and efficiency, it is easily to observe that our scheme has high-security and high-efficiency. In appendix, we give a straightaway analysis to some relevant works to point out the security vulnerabilities in their schemes.

A Verifiable Hidden Policy CP‐ABE with Decryption Testing Scheme and Its Application in VANET

Adaptive Multimedia Data Forwarding for Privacy Preservation in Vehicular Ad-Hoc Networks.

A Secure And Efficient Group Key Agreement Scheme For Vanet

A Lightweight CP-ABE Scheme with Direct Attribute Revocation for Vehicular Ad Hoc Network

SEMD: Secure and Efficient Message Dissemination with Policy Enforcement in VANET

An Identity-Based and Revocable Data-Sharing Scheme in VANETs

Publicly Accountable Data-sharing Scheme Supporting Privacy Protection for Fog-enabled VANETs

A lightweight CP‐ABE scheme in the IEEEP1363 standard with key tracing and verification and its application on the Internet of Vehicles

Partial Policy Hiding Attribute-Based Encryption in Vehicular Fog Computing

Dynamic fine-grained access control scheme for vehicular ad hoc networks

Accountable Attribute-Based Data-Sharing Scheme Based on Blockchain for Vehicular Ad Hoc Network

A Partially Hidden Policy CP-ABE Scheme Against Attribute Values Guessing Attacks with Online Privacy-Protective Decryption Testing in IoT Assisted Cloud Computing.

ACPN: A Novel Authentication Framework with Conditional Privacy-Preservation and Non-Repudiation for VANETs

Efficient and Secure Access Control Scheme in the Standard Model for Vehicular Cloud Computing

A Lightweight Attribute-Based Access Control Scheme for Intelligent Transportation System With Full Privacy Protection

EPAKA: An Efficient and Privacy-Preserving Authenticated Key Agreement Scheme Based on Physical Security for VANET

A Policy Enforcement Framework for Secure Data Dissemination in Vehicular Ad Hoc Network

An Efficient Identity-Based Conditional Privacy-Preserving Authentication Scheme for Vehicular Ad Hoc Networks

POSTER: Ciphertext-Policy Attribute-Based Encryption Method with Secure Decryption Key Generation and Outsourcing Decryption of ABE Ciphertexts

Efficient ciphertext-policy attribute based encryption with hidden policy

Partially Policy-Hidden Attribute-Based Broadcast Encryption with Secure Delegation in Edge Computing.