Abstract:In recent years, to address the security defect that the explicit attribute values in access policies may reveal the privacy, a new variant of ciphertext-policy attribute-based encryption(CP-ABE)——hidden policy CP-ABE (HP-CP-ABE) is proposed in some recent works. But there are two tremendous flaws in most existing HP-CP-ABE schemes. The one issue is that an attacker can launch the attribute values guessing attacks (AVGA) to detect the attribute values in access policies of many HP-CP-ABE schemes. And another issue is that, if the HP-CP-ABE schemes are using the “Linear Secret Sharing Schemes (LSSS)” as their access structures, as the rows of the LSSS matrix grows, the time complexity of the decryption testing algorithm will boost rapidly which will greatly aggravate the computing burden of the user. So in this paper, we propose a partially HP-CP-ABE (PHP-CP-ABE) scheme which can perfectly withstand the attribute values guessing attacks (AVGA). As our access structure is using the LSSS, to alleviate the computing burden of the user, we design a online privacy-protective decryption testing algorithm for the users to privately and securely outsource the decryption testing phase to the cloud server. Our online testing algorithm is privacy-protective which means during running the privacy-protective decryption testing algorithm, the cloud server has no chance to know anything about the attribute values in the access policy and the attribute values of the user. This will prevent the privacy from leaking out to the third party cloud server. Then we rigorously prove that our scheme is selectively indistinguishable secure under chosen plaintext attacks (IND-CPA). Next, by reduction to the computational q-PBDHE assumption which is firstly proposed in our paper, we prove that our HP-CP-ABE scheme is indistinguishable secure under the attribute values guessing attacks (IND-AVGA). Finally through the comparison with the state-of-art HP-CP-ABE schemes from the perspective of functionality and efficiency, it is easily to observe that our scheme has high-security and high-efficiency. In appendix, we give a straightaway analysis to some relevant works to point out the security vulnerabilities in their schemes.

PCPHE: A Privacy Comparison Protocol for Vulnerability Detection Based on Homomorphic Encryption

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

A General Framework to Design Secure Cloud Storage Protocol Using Homomorphic Encryption Scheme.

Feature Homomorphism -- A Cryptographic Scheme For Data Verification Under Ciphertext-Only Conditions

An Efficient Protocol for Private Comparison Problem

Privacy Preserving Intrusion Detection Via Homomorphic Encryption

A Pervasive, Efficient and Private Future: Realizing Privacy-Preserving Machine Learning Through Hybrid Homomorphic Encryption

A Partially Hidden Policy CP-ABE Scheme Against Attribute Values Guessing Attacks with Online Privacy-Protective Decryption Testing in IoT Assisted Cloud Computing.

Private Compound Wildcard Queries Using Fully Homomorphic Encryption

cuXCMP: CUDA-Accelerated Private Comparison Based on Homomorphic Encryption

Privacy preserving IoT-based crowd-sensing network with comparable homomorphic encryption and its application in combating COVID19

A survey on implementations of homomorphic encryption schemes

Secure Two-Party Comparing Protocol Based on Evaluation of Encrypted Functions

Verifiable privacy data comparison and ranking query method

Protocols for Checking Compromised Credentials

Towards practical privacy-preserving genome-wide association study

Secure outsourced calculations with homomorphic encryption

Improved multiparty quantum private comparison based on quantum homomorphic encryption

Privacy-Preserving Similarity Computation in Cloud-Based Mobile Social Networks