The Experts below are selected from a list of 9315 Experts worldwide ranked by ideXlab platform

Hussein T. Mouftah - One of the best experts on this subject based on the ideXlab platform.

  • Encryption as a Service for smart grid advanced metering infrastructure
    International Symposium on Computers and Communications, 2015
    Co-Authors: Md Mahmud Hasan, Hussein T. Mouftah
    Abstract:

    Smart grid advanced metering infrastructure (AMI) bridges between consumers, utilities, and market. Its operation relies on large scale communication networks. At the lowest level, information are acquired by smart meters and sensors. At the highest level, information are stored and processed by smart grid control centers for various purposes. The AMI conveys a big amount of sensitive information. Prevention of unauthorized access to these information is a major concern for smart grid operators. Encryption is the primary security measure for preventing unauthorized access. It incurs various overheads and deployment costs. In recent times, the security as a Service (SECaaS) model has introduced a number cloud-based security solutions such as Encryption as a Service (EaaS). It promises the speed and cost-effectiveness of cloud computing. In this paper, we propose a framework named Encryption Service for smart grid AMI (ES4AM). The ES4AM framework focuses on lightweight Encryption of in-flight AMI data. We also study the feasibility of the framework using relevant simulation results.

  • ISCC - Encryption as a Service for smart grid advanced metering infrastructure
    2015 IEEE Symposium on Computers and Communication (ISCC), 2015
    Co-Authors: Mahmud Hasan, Hussein T. Mouftah
    Abstract:

    Smart grid advanced metering infrastructure (AMI) bridges between consumers, utilities, and market. Its operation relies on large scale communication networks. At the lowest level, information are acquired by smart meters and sensors. At the highest level, information are stored and processed by smart grid control centers for various purposes. The AMI conveys a big amount of sensitive information. Prevention of unauthorized access to these information is a major concern for smart grid operators. Encryption is the primary security measure for preventing unauthorized access. It incurs various overheads and deployment costs. In recent times, the security as a Service (SECaaS) model has introduced a number cloud-based security solutions such as Encryption as a Service (EaaS). It promises the speed and cost-effectiveness of cloud computing. In this paper, we propose a framework named Encryption Service for smart grid AMI (ES4AM). The ES4AM framework focuses on lightweight Encryption of in-flight AMI data. We also study the feasibility of the framework using relevant simulation results.

Ling Liu - One of the best experts on this subject based on the ideXlab platform.

  • pvsae a public verifiable searchable Encryption Service framework for outsourced encrypted data
    International Conference on Web Services, 2016
    Co-Authors: Rui Zhang, Rui Xue, Ling Liu
    Abstract:

    Outsource encrypted data is a popular trend for storing sensitive data in third party clouds. Many cloud applications need privacy preserving data Encryption Services with two capabilities: On one hand, they need querying over encrypted data in Web based data hosting Services. On the other hand, they also need to keep the query keywords and associated search operations private such that data hosting Service providers cannot gain access to unauthorized content or trace and infer sensitive data stored in the third party data hosting servers. In this paper we present a novel Service oriented framework for verifiable searchable asymmetric Encryption, called PVSAE. PVSAE offers strong support for outsourced encrypted data with two formal security properties in terms of IND-CKA security and search pattern privacy. Our framework supports two concrete PVSAE schemes. The first scheme l-PVSAE is based on the l-dimensional vectors and achieves strong security notions, namely statistical IND-CKA security and statistical search pattern privacy. The second scheme 3-PVSAE is a light-weight version based on 3-dimensional vectors. 3-PVSAE maintains the strong security properties and offers higher efficiency for search over encrypted data compared with existing verifiable searchable asymmetric Encryption schemes. We experimentally evaluate the proposed PVSAE schemes and show that they not only offer strong security but also are practical and deployable.

  • ICWS - PVSAE: A Public Verifiable Searchable Encryption Service Framework for Outsourced Encrypted Data
    2016 IEEE International Conference on Web Services (ICWS), 2016
    Co-Authors: Rui Zhang, Rui Xue, Ling Liu
    Abstract:

    Outsource encrypted data is a popular trend for storing sensitive data in third party clouds. Many cloud applications need privacy preserving data Encryption Services with two capabilities: On one hand, they need querying over encrypted data in Web based data hosting Services. On the other hand, they also need to keep the query keywords and associated search operations private such that data hosting Service providers cannot gain access to unauthorized content or trace and infer sensitive data stored in the third party data hosting servers. In this paper we present a novel Service oriented framework for verifiable searchable asymmetric Encryption, called PVSAE. PVSAE offers strong support for outsourced encrypted data with two formal security properties in terms of IND-CKA security and search pattern privacy. Our framework supports two concrete PVSAE schemes. The first scheme l-PVSAE is based on the l-dimensional vectors and achieves strong security notions, namely statistical IND-CKA security and statistical search pattern privacy. The second scheme 3-PVSAE is a light-weight version based on 3-dimensional vectors. 3-PVSAE maintains the strong security properties and offers higher efficiency for search over encrypted data compared with existing verifiable searchable asymmetric Encryption schemes. We experimentally evaluate the proposed PVSAE schemes and show that they not only offer strong security but also are practical and deployable.

Rui Zhang - One of the best experts on this subject based on the ideXlab platform.

  • Verifiable and Exculpable Outsourced Attribute-Based Encryption for Access Control in Cloud Computing
    IEEE Transactions on Dependable and Secure Computing, 2017
    Co-Authors: Rui Zhang, Zhiguo Wan, Suqing Lin
    Abstract:

    We propose two ciphertext-policy attribute-based key encapsulation mechanism (CP-AB-KEM) schemes that for the first time achieve both outsourced Encryption and outsourced decryption in two system storage models and give corresponding security analysis. In our schemes, heavy computations are outsourced to Encryption Service Providers (ESPs) or Decryption Service Providers (DSPs), leaving only one modular exponentiation computation for the sender or the receiver. Moreover, we propose a general verification mechanism for a wide class of ciphertext-policy (cf. key-policy) AB-KEM schemes, which can check the correctness of the outsourced Encryption and decryption efficiently. Concretely, we introduce a stronger version of verifiability (cf.  [1] ) and a new security notion for outsourced decryption called exculpability, which guarantees that a user cannot accuse DSP of returning incorrect results while it is not the case. With all these mechanisms, any dispute between a user and an outsource computation Service provider can be easily resolved, furthermore, a Service provider will be less motivated to give out wrong results. Finally, we implement our schemes in Charm  [2] , and the results indicate that the proposed schemes/mechanisms are efficient and practical.

  • pvsae a public verifiable searchable Encryption Service framework for outsourced encrypted data
    International Conference on Web Services, 2016
    Co-Authors: Rui Zhang, Rui Xue, Ling Liu
    Abstract:

    Outsource encrypted data is a popular trend for storing sensitive data in third party clouds. Many cloud applications need privacy preserving data Encryption Services with two capabilities: On one hand, they need querying over encrypted data in Web based data hosting Services. On the other hand, they also need to keep the query keywords and associated search operations private such that data hosting Service providers cannot gain access to unauthorized content or trace and infer sensitive data stored in the third party data hosting servers. In this paper we present a novel Service oriented framework for verifiable searchable asymmetric Encryption, called PVSAE. PVSAE offers strong support for outsourced encrypted data with two formal security properties in terms of IND-CKA security and search pattern privacy. Our framework supports two concrete PVSAE schemes. The first scheme l-PVSAE is based on the l-dimensional vectors and achieves strong security notions, namely statistical IND-CKA security and statistical search pattern privacy. The second scheme 3-PVSAE is a light-weight version based on 3-dimensional vectors. 3-PVSAE maintains the strong security properties and offers higher efficiency for search over encrypted data compared with existing verifiable searchable asymmetric Encryption schemes. We experimentally evaluate the proposed PVSAE schemes and show that they not only offer strong security but also are practical and deployable.

  • ICWS - PVSAE: A Public Verifiable Searchable Encryption Service Framework for Outsourced Encrypted Data
    2016 IEEE International Conference on Web Services (ICWS), 2016
    Co-Authors: Rui Zhang, Rui Xue, Ling Liu
    Abstract:

    Outsource encrypted data is a popular trend for storing sensitive data in third party clouds. Many cloud applications need privacy preserving data Encryption Services with two capabilities: On one hand, they need querying over encrypted data in Web based data hosting Services. On the other hand, they also need to keep the query keywords and associated search operations private such that data hosting Service providers cannot gain access to unauthorized content or trace and infer sensitive data stored in the third party data hosting servers. In this paper we present a novel Service oriented framework for verifiable searchable asymmetric Encryption, called PVSAE. PVSAE offers strong support for outsourced encrypted data with two formal security properties in terms of IND-CKA security and search pattern privacy. Our framework supports two concrete PVSAE schemes. The first scheme l-PVSAE is based on the l-dimensional vectors and achieves strong security notions, namely statistical IND-CKA security and statistical search pattern privacy. The second scheme 3-PVSAE is a light-weight version based on 3-dimensional vectors. 3-PVSAE maintains the strong security properties and offers higher efficiency for search over encrypted data compared with existing verifiable searchable asymmetric Encryption schemes. We experimentally evaluate the proposed PVSAE schemes and show that they not only offer strong security but also are practical and deployable.

Mahmud Hasan - One of the best experts on this subject based on the ideXlab platform.

  • ISCC - Encryption as a Service for smart grid advanced metering infrastructure
    2015 IEEE Symposium on Computers and Communication (ISCC), 2015
    Co-Authors: Mahmud Hasan, Hussein T. Mouftah
    Abstract:

    Smart grid advanced metering infrastructure (AMI) bridges between consumers, utilities, and market. Its operation relies on large scale communication networks. At the lowest level, information are acquired by smart meters and sensors. At the highest level, information are stored and processed by smart grid control centers for various purposes. The AMI conveys a big amount of sensitive information. Prevention of unauthorized access to these information is a major concern for smart grid operators. Encryption is the primary security measure for preventing unauthorized access. It incurs various overheads and deployment costs. In recent times, the security as a Service (SECaaS) model has introduced a number cloud-based security solutions such as Encryption as a Service (EaaS). It promises the speed and cost-effectiveness of cloud computing. In this paper, we propose a framework named Encryption Service for smart grid AMI (ES4AM). The ES4AM framework focuses on lightweight Encryption of in-flight AMI data. We also study the feasibility of the framework using relevant simulation results.

Jun Kurihara - One of the best experts on this subject based on the ideXlab platform.

  • LCN - In-Device Proxy Re-Encryption Service for Information-Centric Networking Access Control
    2018 IEEE 43rd Conference on Local Computer Networks (LCN), 2018
    Co-Authors: Kalika Suksomboon, Atsushi Tagami, Anirban Basu, Jun Kurihara
    Abstract:

    Information Centric Networking (ICN), the security, privacy and access control mechanisms are deployed directly in the network layer. However, the gap between security in the network and application layers creates a vulnerable space for cyber attacks from inside a device. We adopt a proxy reEncryption technique to facilitate a flexible ICN access control specific to applications. Unlike the existing work in which the proxy re-Encryption is done in the network, we propose an In-device Proxy Re-Encryption Service (IPRES) for filling this security gap and for efficiency in both access control management and resource usage. We present the architecture and protocol of IPRES incorporating principles from security management specific to each application. Our evaluation shows that IPRES improves the state of the art by closing the security gap while it introduces acceptable operational and memory overheads at the device level.

  • ipres in device proxy re Encryption Service for secure icn
    Conference on Information-Centric Networking, 2017
    Co-Authors: Kalika Suksomboon, Atsushi Tagami, Anirban Basu, Jun Kurihara
    Abstract:

    A key paradigm of Information Centric Networking (ICN) is that the content-based security, privacy and access control are deployed directly in the network layer. However, there is a gap between security in the network and application layers. This creates a vulnerable space for cyber attacks from inside a device. To address this problem, we discuss and present a guideline on ICN access control. Since a semi-trusted proxy has been seen as an advantageous solution for access control and efficiency in content sharing Services, we introduce the proxy in a consumer's device and propose an in-device proxy re-Encryption Service (IPRES) architecture for efficiency in both access control management and resource usage.

  • ICN - IPRES: in-device proxy re-Encryption Service for secure ICN
    Proceedings of the 4th ACM Conference on Information-Centric Networking, 2017
    Co-Authors: Kalika Suksomboon, Atsushi Tagami, Anirban Basu, Jun Kurihara
    Abstract:

    A key paradigm of Information Centric Networking (ICN) is that the content-based security, privacy and access control are deployed directly in the network layer. However, there is a gap between security in the network and application layers. This creates a vulnerable space for cyber attacks from inside a device. To address this problem, we discuss and present a guideline on ICN access control. Since a semi-trusted proxy has been seen as an advantageous solution for access control and efficiency in content sharing Services, we introduce the proxy in a consumer's device and propose an in-device proxy re-Encryption Service (IPRES) architecture for efficiency in both access control management and resource usage.