Decentralizing Attribute-Based Encryption

Decentralizing Attribute-Based Encryption

2011 | Allison Lewko* and Brent Waters**
This paper presents a decentralized multi-authority Attribute-Based Encryption (ABE) system. The system allows any party to become an authority without requiring global coordination beyond the initial setup of common reference parameters. Authorities can issue private keys to users based on their attributes, and users can encrypt data according to boolean formulas over attributes from any chosen set of authorities. The system is designed to be collusion-resistant, ensuring that unauthorized users cannot combine their attributes to decrypt data. The main technical challenge is achieving collusion resistance in a decentralized setting where authorities operate independently. Traditional ABE systems achieve this by randomizing key components, but in this system, each component may come from a different authority with no coordination. To address this, the authors develop new techniques to tie key components together and prevent collusion attacks between users with different global identifiers. The system is proven secure using the dual system encryption methodology. This involves converting challenge ciphertexts and private keys to a semi-functional form and then arguing security. The system uses bilinear groups of composite order and is secure under similar static assumptions to previous work in the random oracle model. The system allows for complex policies and does not require a central authority, making it more scalable and robust. It avoids the performance bottleneck of relying on a central authority and reduces the risk of a single point of failure. The system is also more efficient and secure, as it allows authorities to function independently without affecting the operation of other authorities. The paper also discusses related work, including the roots of ABE in Identity-Based Encryption (IBE) and the development of different ABE systems. It outlines the security definition for multi-authority Ciphertext-Policy ABE and presents a construction of a fully secure multi-authority ABE system. The system is proven secure using a combination of dual system encryption techniques and assumptions about the hardness of certain subgroup decision problems in bilinear groups.This paper presents a decentralized multi-authority Attribute-Based Encryption (ABE) system. The system allows any party to become an authority without requiring global coordination beyond the initial setup of common reference parameters. Authorities can issue private keys to users based on their attributes, and users can encrypt data according to boolean formulas over attributes from any chosen set of authorities. The system is designed to be collusion-resistant, ensuring that unauthorized users cannot combine their attributes to decrypt data. The main technical challenge is achieving collusion resistance in a decentralized setting where authorities operate independently. Traditional ABE systems achieve this by randomizing key components, but in this system, each component may come from a different authority with no coordination. To address this, the authors develop new techniques to tie key components together and prevent collusion attacks between users with different global identifiers. The system is proven secure using the dual system encryption methodology. This involves converting challenge ciphertexts and private keys to a semi-functional form and then arguing security. The system uses bilinear groups of composite order and is secure under similar static assumptions to previous work in the random oracle model. The system allows for complex policies and does not require a central authority, making it more scalable and robust. It avoids the performance bottleneck of relying on a central authority and reduces the risk of a single point of failure. The system is also more efficient and secure, as it allows authorities to function independently without affecting the operation of other authorities. The paper also discusses related work, including the roots of ABE in Identity-Based Encryption (IBE) and the development of different ABE systems. It outlines the security definition for multi-authority Ciphertext-Policy ABE and presents a construction of a fully secure multi-authority ABE system. The system is proven secure using a combination of dual system encryption techniques and assumptions about the hardness of certain subgroup decision problems in bilinear groups.
Reach us at info@futurestudyspace.com
Understanding Decentralizing Attribute-Based Encryption