Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [access-control]

Access-control is a possible goal of cryptography, where the idea is to restrict access to documents, equipment, locations, or keys to individuals who are authorized such access.

2
votes
1answer
125 views

What is the relationship between attribute based encryption (ABE) and access control?

So if possible could someone tell me or at least recommend a book.
1
vote
1answer
87 views

authentication and access control in IoT

I am researching in authentication and access control in IoT. Is there any difference between working in wireless sensor nodes and IoT in the topic authentication and access control as both require ...
1
vote
2answers
43 views

Access control versus authorization

What is the difference between access control and authorization? They do not mean same as there is a fine line between the two.
0
votes
1answer
97 views

ABE (attribute based encryption) vs ABS (attribute based signature)

I want to know if there is any shortcoming that ABE cannot achieve and that the ABS complete it. I mean why the ABS is included if the authentication and the authorization are already ensured by the ...
0
votes
0answers
76 views

How to express access structure (access tree, linear secret sharing, etc.)

What are the differences and similarities between access trees (binary decision diagrams) and linear secret sharing in the use of attribute-based encryption schemes for access control?
3
votes
1answer
55 views

Enabling Oblivious Access Control via Function Encryption

Abstract With Functional Encryption, would access control between two parties be possible without revealing the entirety of one party's policy to the other? E.g. such that a server would be incapable ...
0
votes
1answer
45 views

Is it possible to have interactive decryption?

Is it possible to have an encryption and decryption scheme so that decryption is a 2-party process? For instance, Alice sends an encrypted message to Bob along with the key for that message. Bob, by ...
1
vote
0answers
62 views

Decrypting partial message.

I'm wondering whether such interesting symmetric-key encryption exists or not (from theoretical perspective): We encrypt a vector of messages $(m_1,m_2,\cdots,m_\ell)$ using the symmetric key $K$ to ...
0
votes
0answers
57 views

Non-trivial access structures

I am currently working with this paper about a searchable encryption scheme where access to search operations is restricted via monotone access structures and sets of attributes. In the definition of ...
1
vote
0answers
47 views

Role-based access control security

How secure is role-based access control (RBAC). What kind of security does it incorporate to make sure no data is leaked and protected, especially from the admins responsible for assigning roles to ...
10
votes
0answers
112 views

How exactly does ASKE (Alpha Secure Key Establishment) in Zigbee work?

I am working on Zigbee security. For key establishment, some approaches are given in Zigbee. Some of them are: ASKE (Alpha Secure Key Establishment), ASAC (Alpha Secure Access Control), and SKKE (...
2
votes
2answers
194 views

Hierarchical access control using CP-ABE

Is it possible to use CP-ABE to provide a layered (hierarchical) organization? For example, If I have 100 records, I will encrypt the first 10 records (lowest level) to be decrypted using certain ...
0
votes
1answer
121 views

How to implement access control for Automotive Embedded Systems using mbedTLS?

I am trying to implement a security access scheme for Automotive Embedded Systems.I need to be able to generate a Random number(of my desired length), combine it with some secret data to send a Seed/...
3
votes
2answers
188 views

Can the access policies defined using different access structures (Monotone Span Program and Access Trees) be used together in CP-ABE scheme?

In order to add authentication features to this CP-ABE scheme, I have tried to combine it with the ABS scheme proposed by Maji et. al. I want to use the sign() and verify() algorithms of ABS scheme. ...
2
votes
0answers
22 views

hash function notations and existing cryptographic hash algorithms [duplicate]

I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
1
vote
0answers
35 views

Hash function notations and their corresponding existing cryptographic hash algorithm

I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
1
vote
1answer
70 views

Access control problem in oblivious transfer

I am not sure whether the title is proper or not, but this question comes to my mind when I was reading $k-n$ oblivious transfers. In a $k-n$ oblivious transfer (OT) protocol, a party A has $n$ ...
1
vote
0answers
51 views

Attribute based access control and role based, online bookstore example

I am asked to answer a question that says: One online book-store wants to grand access to clients regarding their subscription. There are 3 types of subscriptions A , B and C. Customers get access ...
2
votes
1answer
149 views

Multiple levels of encryption

Is it feasible to have data encrypted at different levels of hierarchy I'd like to encrypt an xml database (such as used in www.keepass.info) whereby two or more keys can exist. For example: Key #1 ...
2
votes
1answer
105 views

Cryptographic enforcement schemes using Diffie-Hellman

If one wants to set up a decentralized cryptographic enforcement scheme in which the level of 'confidentiality' of information is marked by its position in a poset, why not use Diffie-Hellman to ...
0
votes
1answer
92 views

How do I control an access code safely?

Upon registration an user has to specify an access code of five digits. This access code is also used as a password for the encryption and decryption of certain strings. The user types in "12345" (...
8
votes
0answers
260 views

What are the current limitations (and capabilities) of Functional Encryption used for access control?

I'm trying to make my way in Functional Encryption used for access control. I read a lot of papers such as "How to Run Turing Machines on Encrypted Data", "Functional Encryption: New Perspectives and ...
5
votes
4answers
315 views

Can we give access to controlled functionality in Fully homomorphic encryption schemes?

Homomorphic encryption schemes are PKE schemes with an additional special method Evaluate. Evaluate method takes input any function (as boolean circuit) and encrypted inputs of the function and ...