Skip to main content
4 votes

Data Security and Encryption

What is the "unknown attack" the reviewer is referring to? The reviewer did not say "the unknown attack", but "in front of unknown attacks". That refers to no attack in ...
fgrieu's user avatar
  • 146k
3 votes
Accepted

What is the relationship between attribute based encryption (ABE) and access control?

ABE provides a secure and automatic way to enforce access control, but access control may not involve encryption. In the ABE setting, the resources (that one wants to access) are encrypted by a "...
Shan Chen's user avatar
  • 2,755
3 votes

authentication and access control in IoT

Not much, my impression is that the problems are more or less the same. People change the term to IoT because it sounds sexier than wireless sensors (and they can sell the same thing again as new). ...
Changyu Dong's user avatar
  • 4,198
2 votes

How to implement access control for Automotive Embedded Systems using mbedTLS?

As stated in the comments we can't / won't advise on whether PolarSSL is suitable to perform the operations required. However, for your needs $N_1=N_2=N_3=32$ sounds like a reasonable choice, giving ...
SEJPM's user avatar
  • 46.4k
2 votes

Can the access policies defined using different access structures (Monotone Span Program and Access Trees) be used together in CP-ABE scheme?

Can the access policies defined using different access structures (Monotone Span Program and Access Trees) be used together in CP-ABE scheme? Yes. As Attribute-based signcryption with hybrid access ...
Artjom B.'s user avatar
  • 2,075
2 votes
Accepted

Use of crypto on QR codes for access control

The question is about using digital signature for signing access-control 2D-barcodes. In the simplest form, some authority will generate and hold a private key, with the corresponding public key ...
fgrieu's user avatar
  • 146k
2 votes

Hierarchical access control using CP-ABE

I can discern two cases here: A strict hierarchy A partial hierarchy Using 1, "Hierarchical access control" as a term used with encryption implies that some users have more decryption power than ...
Mikko_K_123's user avatar
2 votes
Accepted

What is the meaning of the power notation in the access structure?

It is the powerset of all subsets of $\{P_1,\ldots,P_n\}$. Therefore $$2^{\{P_1,P_2,P_3\}}=\{\{ \},\{P_1\},\{P_2\},\{P_3\},\{P_1,P_2\},\{P_1,P_3\}, \{P_2,P_3\},\{P_1,P_2,P_3\}\} $$ for example.
kodlu's user avatar
  • 23.7k
1 vote
Accepted

Authenticate with roles without a server

It's not possible to ensure file/data permissions locally without utilising OS permissions, as you have pointed out, but as you also pointed out it's possible to protect data with encryption. So if ...
n-l-i's user avatar
  • 921
1 vote

Attribute-Based Access control for nested attributes

Nested attributes are a form of hierarchy, but they are most useful for organization of attribute names. Examples: user.degree.university and ...
geonnave's user avatar
1 vote

Hierarchical access control using CP-ABE

Well, 1 way I could suggest is to encrypt the sensitive records with a more restrictive tree policy, obtain the cipher C and C', concatenate that ciphers with less sensitive records, encrypt that ...
INeedInsecticideToKillBugs's user avatar
1 vote

Access control versus authorization

Access control is a broader concept that includes authentication, authorisation, accounting and possibly other components contributing to the control of access. Authorisation only concerns granting or ...
Changyu Dong's user avatar
  • 4,198
1 vote

ABE (attribute based encryption) vs ABS (attribute based signature)

Attribute-Based Encryption (ABE) schemes are a way to securely send (i.e share) a plaintext (message) amongst some particular receivers. The data owner (sender) consider an access policy to encrypt ...
Mahdi's user avatar
  • 306
1 vote

Enabling Oblivious Access Control via Function Encryption

Potential Solution? Using Functional encryption, a trusted authority with a master secret key ($msk$) and public key ($pk$) would generate a "functional decryption" key ($sk$) from a participant's ...
ruffsl's user avatar
  • 201
1 vote

Is it possible to have interactive decryption?

Probably not. When Bob at the end of the interaction finally computes the plaintext, it must be a function of everything he has obtained thus far; there's nothing stopping him from running the same ...
fkraiem's user avatar
  • 8,202
1 vote

Cryptographic enforcement schemes using Diffie-Hellman

1) The meaning of a poset is that there may also be members $x,y \in X$, where neither $x \leqslant y$ nor $x \geqslant y$. Now consider such incomparable $x$ and $y$ with $parent(x)=parent(y)=w \in X$...
Mikko_K_123's user avatar
1 vote

What are the current limitations (and capabilities) of Functional Encryption used for access control?

In functional encryption, the function don't apply on access policy. In FE the receiver obtain the function of message. Attribute Based Encryption for arithmetic circuits may help you. Fully key ...
Mahdi Mahdavi's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible