Skip to main content

Questions tagged [access-control]

Access-control is a possible goal of cryptography, where the idea is to restrict access to documents, equipment, locations, or keys to individuals who are authorized such access.

Filter by
Sorted by
Tagged with
0 votes
1 answer
45 views

Authenticate with roles without a server

Introduction part I'm writing an application that requires authentication to be used, specifically the database and config file can only be read an authenticated user. However this authentication is ...
Nifil's user avatar
  • 101
0 votes
1 answer
60 views

Attribute-Based Access control for nested attributes

Nested attributes were introduced for the first time in the paper with the title "SmartABAC: Enabling Constrained IoT Devices to Make Complex Policy-Based Access Control Decisions". What is ...
Mahdi Mahdavi's user avatar
1 vote
1 answer
79 views

What is the meaning of the power notation in the access structure?

In the paper about ABE (like this), the access structure is defined as follow: Let ${P_1,P_2,...,P_n}$ be a set of parties. A collection $A⊆2^{\{P_1,P_2,...,P_n\}}$ is monotone if $∀B,C$: if $B∈A$ ...
Z. Chen's user avatar
  • 185
2 votes
1 answer
95 views

Data Security and Encryption

I have a research paper on data security using proxy re-encryption, and I need to provide an answer to a reviewer's comment. However, I have no idea on what to do or how to answer it. The security ...
Kwame's user avatar
  • 21
5 votes
0 answers
1k views

Can I alter encrypted data without decrypting it? [duplicate]

I didn't find a direct solution for it. Can I modify encrypted data without accessing it? If there is an example, I would appreciate it.
user5520049's user avatar
1 vote
1 answer
789 views

Use of crypto on QR codes for access control [closed]

I want to create a process whereby registered users receive a QR code on their phone and then they present this code to a camera. The camera should scan the QR code and then decide if the QR code is ...
gmarais's user avatar
  • 129
0 votes
0 answers
52 views

Is there a protocol for granting access rights to publicly stored encrypted data?

Alice is a data provider and Bob and Charlie are consumers. Alice has a set of data assets $A_*$. Alice wants to share some of her assets with Bob, some with Charlie (they are not necessarily mutually ...
zetaprime's user avatar
  • 591
2 votes
1 answer
446 views

What is the relationship between attribute based encryption (ABE) and access control?

So if possible could someone tell me or at least recommend a book.
user658961's user avatar
1 vote
1 answer
132 views

authentication and access control in IoT

I am researching in authentication and access control in IoT. Is there any difference between working in wireless sensor nodes and IoT in the topic authentication and access control as both require ...
Richa's user avatar
  • 83
2 votes
2 answers
568 views

Access control versus authorization

What is the difference between access control and authorization? They do not mean same as there is a fine line between the two.
Richa's user avatar
  • 83
1 vote
1 answer
458 views

ABE (attribute based encryption) vs ABS (attribute based signature)

I want to know if there is any shortcoming that ABE cannot achieve and that the ABS complete it. I mean why the ABS is included if the authentication and the authorization are already ensured by the ...
A.Gh's user avatar
  • 19
3 votes
1 answer
107 views

Enabling Oblivious Access Control via Function Encryption

Abstract With Functional Encryption, would access control between two parties be possible without revealing the entirety of one party's policy to the other? E.g. such that a server would be incapable ...
ruffsl's user avatar
  • 201
0 votes
1 answer
63 views

Is it possible to have interactive decryption?

Is it possible to have an encryption and decryption scheme so that decryption is a 2-party process? For instance, Alice sends an encrypted message to Bob along with the key for that message. Bob, by ...
Daffy's user avatar
  • 2,409
1 vote
0 answers
116 views

Decrypting partial message.

I'm wondering whether such interesting symmetric-key encryption exists or not (from theoretical perspective): We encrypt a vector of messages $(m_1,m_2,\cdots,m_\ell)$ using the symmetric key $K$ to ...
CryptoLover's user avatar
1 vote
0 answers
68 views

Role-based access control security

How secure is role-based access control (RBAC). What kind of security does it incorporate to make sure no data is leaked and protected, especially from the admins responsible for assigning roles to ...
user0011's user avatar
11 votes
0 answers
215 views

How exactly does ASKE (Alpha Secure Key Establishment) in Zigbee work?

I am working on Zigbee security. For key establishment, some approaches are given in Zigbee. Some of them are: ASKE (Alpha Secure Key Establishment), ASAC (Alpha Secure Access Control), and SKKE (...
Prasanth Kumar Arisetti's user avatar
2 votes
2 answers
333 views

Hierarchical access control using CP-ABE

Is it possible to use CP-ABE to provide a layered (hierarchical) organization? For example, If I have 100 records, I will encrypt the first 10 records (lowest level) to be decrypted using certain ...
user avatar
0 votes
1 answer
174 views

How to implement access control for Automotive Embedded Systems using mbedTLS?

I am trying to implement a security access scheme for Automotive Embedded Systems.I need to be able to generate a Random number(of my desired length), combine it with some secret data to send a Seed/...
GeekTom's user avatar
3 votes
2 answers
447 views

Can the access policies defined using different access structures (Monotone Span Program and Access Trees) be used together in CP-ABE scheme?

In order to add authentication features to this CP-ABE scheme, I have tried to combine it with the ABS scheme proposed by Maji et. al. I want to use the sign() and verify() algorithms of ABS scheme. ...
Aisha's user avatar
  • 83
2 votes
0 answers
27 views

hash function notations and existing cryptographic hash algorithms [duplicate]

I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
user avatar
1 vote
0 answers
81 views

Hash function notations and their corresponding existing cryptographic hash algorithm

I am implementing Role-based access control by referencing the paper Enforcing Role-Based Access Control for Secure Data Storage in the Cloud. In page 6, they have mentioned to choose hash functions $...
Mariam's user avatar
  • 69
1 vote
1 answer
98 views

Access control problem in oblivious transfer

I am not sure whether the title is proper or not, but this question comes to my mind when I was reading $k-n$ oblivious transfers. In a $k-n$ oblivious transfer (OT) protocol, a party A has $n$ ...
Paradox's user avatar
  • 487
1 vote
0 answers
77 views

Attribute based access control and role based, online bookstore example

I am asked to answer a question that says: One online book-store wants to grand access to clients regarding their subscription. There are 3 types of subscriptions A , B and C. Customers get access in ...
Aereal's user avatar
  • 11
2 votes
1 answer
192 views

Multiple levels of encryption

Is it feasible to have data encrypted at different levels of hierarchy I'd like to encrypt an xml database (such as used in www.keepass.info) whereby two or more keys can exist. For example: Key #1 ...
Bendy's user avatar
  • 123
2 votes
1 answer
113 views

Cryptographic enforcement schemes using Diffie-Hellman

If one wants to set up a decentralized cryptographic enforcement scheme in which the level of 'confidentiality' of information is marked by its position in a poset, why not use Diffie-Hellman to ...
wlad's user avatar
  • 1,239
0 votes
1 answer
105 views

How do I control an access code safely?

Upon registration an user has to specify an access code of five digits. This access code is also used as a password for the encryption and decryption of certain strings. The user types in "12345" (...
WJA's user avatar
  • 227
10 votes
1 answer
435 views

What are the current limitations (and capabilities) of Functional Encryption used for access control?

I'm trying to make my way in Functional Encryption used for access control. I read a lot of papers such as "How to Run Turing Machines on Encrypted Data", "Functional Encryption: New Perspectives and ...
MaVVamaldo's user avatar
5 votes
4 answers
367 views

Can we give access to controlled functionality in Fully homomorphic encryption schemes?

Homomorphic encryption schemes are PKE schemes with an additional special method Evaluate. Evaluate method takes input any function (as boolean circuit) and encrypted inputs of the function and ...
sashank's user avatar
  • 6,194