R&D: Adaptively Secure Certificate-based Broadcast Encryption and Application to Cloud Storage Service

Information Sciences has published an article written by Liqing Chen, College of Computer and Information, Hohai University, Nanjing 211100, Jiangsu, China, and Faculty of Computer & Software Engineering, Huaiyin Institute of Technology, Huai’an 223003, Jiangsu, China, Jiguo Li, College of Computer and Information, Hohai University, Nanjing 211100, Jiangsu, China^, College of Mathematics and Informatics, Fujian Normal University, Fuzhou 350117, Fujian, China^, Fujian Provincial Key Laboratory of Network Security and Cryptology, Fuzhou 350117, Fujian, China, and State Key Laboratory of Cryptology, P.O. Box 5159, Beijing 100878, China, Yang Lu, School of Computer Science and Technology, Nanjing Normal University, Nanjing 210023, Jiangsu, China, and Yichen Zhang, College of Mathematics and Informatics, Fujian Normal University, Fuzhou 350117, Fujian, China, and Fujian Provincial Key Laboratory of Network Security and Cryptology, Fuzhou 350117, Fujian, China.

Abstract: “The existing public key broadcast encryption schemes are mainly constructed in identity-based cryptosystem, which bears the inherent problems of key escrow and key distribution. The certificate-based encryption mechanism can effectively address the problems in identity-based cryptosystem. Meanwhile, it simplifies the certificate revocation issue for traditional public key cryptosystem. Inspired by the idea of certificate-based encryption, we put forward the new primitive certificate-based broadcast encryption as well as its formal definition and security model. In virtue of prime order bilinear groups, we present an instantiation scheme of certificate-based broadcast encryption. To our best knowledge, the proposed scheme is the first adaptively secure scheme for certificate-based broadcast encryption in the standard model against chosen-ciphertext attack. Compared with the previous work, our scheme has advantages in the respects of computation cost as well as security properties. Furthermore, we present an application scenario of the proposed scheme for data access control in cloud storage service.“