Access control encryption: enforcing information flow with cryptography
From MaRDI portal
Abstract: We initiate the study of Access Control Encryption (ACE), a novel cryptographic primitive that allows fine-grained access control, by giving different rights to different users not only in terms of which messages they are allowed to receive, but also which messages they are allowed to send. Classical examples of security policies for information flow are the well known Bell-Lapadula [BL73] or Biba [Bib75] model: in a nutshell, the Bell-Lapadula model assigns roles to every user in the system (e.g., public, secret and top-secret). A users' role specifies which messages the user is allowed to receive (i.e., the no read-up rule, meaning that users with public clearance should not be able to read messages marked as secret or top-secret) but also which messages the user is allowed to send (i.e., the no write-down rule, meaning that a user with top-secret clearance should not be able to write messages marked as secret or public). To the best of our knowledge, no existing cryptographic primitive allows for even this simple form of access control, since no existing cryptographic primitive enforces any restriction on what kind of messages one should be able to encrypt. Our contributions are: - Introducing and formally defining access control encryption (ACE); - A construction of ACE with complexity linear in the number of the roles based on classic number theoretic assumptions (DDH, Paillier); - A construction of ACE with complexity polylogarithmic in the number of roles based on recent results on cryptographic obfuscation;
Recommendations
Cites work
- A public key cryptosystem and a signature scheme based on discrete logarithms
- Access control encryption: enforcing information flow with cryptography
- Candidate indistinguishability obfuscation and functional encryption for all circuits
- Cryptographic reverse firewalls
- Functional encryption: definitions and challenges
- scientific article; zbMATH DE number 1942414 (Why is no real title available?)
- Message transmission with reverse firewalls -- secure communication on corrupted machines
- Predicate encryption supporting disjunctions, polynomial equations, and inner products
- Rerandomizable RCCA Encryption
- Topics in Cryptology – CT-RSA 2004
Cited in
(25)- An efficient CCA-secure access control encryption for any policy
- Access control encryption from group encryption
- Cross-domain attribute-based access control encryption
- Vetted encryption
- Access control encryption with efficient verifiable sanitized decryption
- Access control encryption for general policies from standard assumptions
- Strengthening access control encryption
- Structure-preserving signatures on equivalence classes and constant-size anonymous credentials
- Policy-compliant signatures
- Public key based searchable encryption with fine-grained sender permission control
- Universally composable cryptographic role-based access control
- Privacy enhanced access control by means of policy blinding
- Access control encryption: enforcing information flow with cryptography
- Typing access control and secure information flow in sessions
- scientific article; zbMATH DE number 6874618 (Why is no real title available?)
- scientific article; zbMATH DE number 761918 (Why is no real title available?)
- ACE with compact ciphertext size and decentralized sanitizers
- Access Control Encryption for Equality, Comparison, and More
- Match me if you can: matchmaking encryption and its applications
- Unlinkable policy-based sanitizable signatures
- On access control encryption without sanitization
- On proving equivalence class signatures secure from non-interactive assumptions
- Efficient and verifiable multi-server framework for secure information classification and storage
- Efficient privacy-preserving data sharing mechanisms against malicious senders in smart grid
- Adaptive cryptographic access control. Foreword by Sylvia L. Osborn
This page was built for publication: Access control encryption: enforcing information flow with cryptography
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q3181040)
