Questions tagged [access-control]
Access-control is a possible goal of cryptography, where the idea is to restrict access to documents, equipment, locations, or keys to individuals who are authorized such access.
27
questions
0
votes
1
answer
53
views
Attribute-Based Access control for nested attributes
Nested attributes were introduced for the first time in the paper with the title "SmartABAC: Enabling Constrained IoT Devices to Make Complex Policy-Based Access Control Decisions".
What is ...
- 482
1
vote
1
answer
74
views
What is the meaning of the power notation in the access structure?
In the paper about ABE (like this), the access structure is defined as follow:
Let ${P_1,P_2,...,P_n}$ be a set of parties. A collection $A⊆2^{\{P_1,P_2,...,P_n\}}$ is monotone if $∀B,C$: if $B∈A$ ...
- 185
2
votes
1
answer
92
views
Data Security and Encryption
I have a research paper on data security using proxy re-encryption, and I need to provide an answer to a reviewer's comment. However, I have no idea on what to do or how to answer it.
The security ...
- 21
5
votes
0
answers
1k
views
Can I alter encrypted data without decrypting it? [duplicate]
I didn't find a direct solution for it. Can I modify encrypted data without accessing it?
If there is an example, I would appreciate it.
- 151
1
vote
1
answer
731
views
Use of crypto on QR codes for access control [closed]
I want to create a process whereby registered users receive a QR code on their phone and then they present this code to a camera. The camera should scan the QR code and then decide if the QR code is ...
- 129
0
votes
0
answers
51
views
Is there a protocol for granting access rights to publicly stored encrypted data?
Alice is a data provider and Bob and Charlie are consumers.
Alice has a set of data assets $A_*$. Alice wants to share some of her assets with Bob, some with Charlie (they are not necessarily mutually ...
- 591
2
votes
1
answer
438
views
What is the relationship between attribute based encryption (ABE) and access control?
So if possible could someone tell me or at least recommend a book.
- 45
1
vote
1
answer
130
views
authentication and access control in IoT
I am researching in authentication and access control in IoT. Is there any difference between working in wireless sensor nodes and IoT in the topic authentication and access control as both require ...
- 83
2
votes
2
answers
546
views
Access control versus authorization
What is the difference between access control and authorization? They do not mean same as there is a fine line between the two.
- 83
1
vote
1
answer
445
views
ABE (attribute based encryption) vs ABS (attribute based signature)
I want to know if there is any shortcoming that ABE cannot achieve and that the ABS complete it. I mean why the ABS is included if the authentication and the authorization are already ensured by the ...
- 19
3
votes
1
answer
103
views
Enabling Oblivious Access Control via Function Encryption
Abstract
With Functional Encryption, would access control between two parties be possible without revealing the entirety of one party's policy to the other? E.g. such that a server would be incapable ...
- 201
0
votes
1
answer
61
views
Is it possible to have interactive decryption?
Is it possible to have an encryption and decryption scheme so that decryption is a 2-party process?
For instance, Alice sends an encrypted message to Bob along with the key for that message. Bob, by ...
- 2,379
1
vote
0
answers
115
views
Decrypting partial message.
I'm wondering whether such interesting symmetric-key encryption exists or not (from theoretical perspective):
We encrypt a vector of messages $(m_1,m_2,\cdots,m_\ell)$ using the symmetric key $K$ to ...
- 932
1
vote
0
answers
67
views
Role-based access control security
How secure is role-based access control (RBAC). What kind of security does it incorporate to make sure no data is leaked and protected, especially from the admins responsible for assigning roles to ...
- 11
11
votes
0
answers
207
views
How exactly does ASKE (Alpha Secure Key Establishment) in Zigbee work?
I am working on Zigbee security. For key establishment, some approaches are given in Zigbee. Some of them are:
ASKE (Alpha Secure Key Establishment),
ASAC (Alpha Secure Access Control), and
SKKE (...
2
votes
2
answers
333
views
Hierarchical access control using CP-ABE
Is it possible to use CP-ABE to provide a layered (hierarchical) organization?
For example, If I have 100 records, I will encrypt the first 10 records (lowest level) to be decrypted using certain ...
user40428
0
votes
1
answer
170
views
How to implement access control for Automotive Embedded Systems using mbedTLS?
I am trying to implement a security access scheme for Automotive Embedded Systems.I need to be able to generate a Random number(of my desired length), combine it with some secret data to send a Seed/...
- 1
3
votes
2
answers
426
views
Can the access policies defined using different access structures (Monotone Span Program and Access Trees) be used together in CP-ABE scheme?
In order to add authentication features to this CP-ABE scheme, I have tried to combine it with the ABS scheme proposed by Maji et. al.
I want to use the sign() and verify() algorithms of ABS scheme. ...
- 83
2
votes
0
answers
27
views
hash function notations and existing cryptographic hash algorithms [duplicate]
I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
Mariam
1
vote
0
answers
81
views
Hash function notations and their corresponding existing cryptographic hash algorithm
I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
- 69
1
vote
1
answer
98
views
Access control problem in oblivious transfer
I am not sure whether the title is proper or not, but this question comes to my mind when I was reading $k-n$ oblivious transfers.
In a $k-n$ oblivious transfer (OT) protocol, a party A has $n$ ...
- 477
1
vote
0
answers
77
views
Attribute based access control and role based, online bookstore example
I am asked to answer a question that says:
One online book-store wants to grand access to clients regarding their subscription. There are 3 types of subscriptions A , B and C. Customers get access in ...
- 11
2
votes
1
answer
189
views
Multiple levels of encryption
Is it feasible to have data encrypted at different levels of hierarchy
I'd like to encrypt an xml database (such as used in www.keepass.info) whereby two or more keys can exist. For example:
Key #1 ...
- 123
2
votes
1
answer
113
views
Cryptographic enforcement schemes using Diffie-Hellman
If one wants to set up a decentralized cryptographic enforcement scheme in which the level of 'confidentiality' of information is marked by its position in a poset, why not use Diffie-Hellman to ...
- 1,239
0
votes
1
answer
105
views
How do I control an access code safely?
Upon registration an user has to specify an access code of five digits. This access code is also used as a password for the encryption and decryption of certain strings.
The user types in "12345" (...
- 227
10
votes
1
answer
427
views
What are the current limitations (and capabilities) of Functional Encryption used for access control?
I'm trying to make my way in Functional Encryption used for access control.
I read a lot of papers such as "How to Run Turing Machines on Encrypted Data", "Functional Encryption: New Perspectives and ...
- 201
5
votes
4
answers
363
views
Can we give access to controlled functionality in Fully homomorphic encryption schemes?
Homomorphic encryption schemes are PKE schemes with an additional special method Evaluate. Evaluate method takes input any function (as boolean circuit) and encrypted inputs of the function and ...
- 6,134