Skip to main content
Disciplines
Automotive Business IT + Informatics Construction + Real Estate Electrical Engineering + Electronics Energy + Sustainability Insurance + Risk Finance + Banking Management + Leadership Marketing + Sales Mechanical Engineering + Materials
Events
DE
EN
Books
Journals
Topic Page
Marketing
Start single access now
Access for companies
EXTENDED SEARCH
Log in
Top
Published in:
ECDSA on Things: IoT Integrity Protection in Practise Read chapter Read first chapter

2016 | OriginalPaper | Chapter

Integrity and Authenticity Protection with Selective Disclosure Control in the Cloud & IoT

Authors : Christoph Frädrich, Henrich C. Pöhls, Wolfgang Popp, Noëlle Rakotondravony, Kai Samelin

Published in: Information and Communications Security

Publisher: Springer International Publishing

Log in

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

\(\mathsf {RSS}\) allow the redaction of parts from signed data. Updatable \(\mathsf {RSS}\) additionally enable the signatory to add new elements, while signatures can be merged by third parties under certain conditions.
We propose a framework for two new real-life application scenarios and implement it using an \(\mathsf {RSS}\) with sufficient functionality on three different platforms, ranging from a potent cloud to a very resource-constrained Android device. Our evaluation shows impractical run time especially on the IoT device for the existing construction that was proven to be secure in the standard model. Thus, we provide an adjusted scheme with far better performance, which we prove to be secure in the random oracle model. Furthermore, we show how to increase performance using parallelization and several optimizations.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

inform now
previous chapter SECapacity: A Secure Capacity Scheduler in YARN
next chapter MultiPol: Towards a Multi-policy Authorization Framework for RESTful Interfaces in the Cloud
Footnotes
1
By some data leakage prevention (DLP); depicted as ‘firewall’ in Fig. 2.
 
2
A prime p is safe, if \(p = 2p'+1\), where \(p'\) is also prime.
 
3
Does not need a result of a previous calculation.
 
Literature
1.
Ahn, J.H., Boneh, D., Camenisch, J., Hohenberger, S., Shelat, A., Waters, B.: Computing on authenticated data. Cryptology ePrint Archive, Report 2011/096 (2011). http://​eprint.​iacr.​org/​
2.
Attrapadung, N., Libert, B., Peters, T.: Computing on authenticated data: new privacy definitions and constructions. In: Wang, X., Sako, K. (eds.) ASIACRYPT 2012. LNCS, vol. 7658, pp. 367–385. Springer, Heidelberg (2012). doi:10.​1007/​978-3-642-34961-4_​23 CrossRef
3.
Barić, N., Pfitzmann, B.: Collision-free accumulators and fail-stop signature schemes without trees. In: Fumy, W. (ed.) EUROCRYPT 1997. LNCS, vol. 1233, pp. 480–494. Springer, Heidelberg (1997). doi:10.​1007/​3-540-69053-0_​33
4.
Bellare, M., Rogaway, P.: Random oracles are practical: a paradigm for designing efficient protocols. In: CCS, pp. 62–73 (1993)
5.
Brzuska, C., et al.: Redactable signatures for tree-structured data: definitions and constructions. In: Zhou, J., Yung, M. (eds.) ACNS 2010. LNCS, vol. 6123, pp. 87–104. Springer, Heidelberg (2010). doi:10.​1007/​978-3-642-13708-2_​6 CrossRef
6.
7.
Coron, J.-S., Naccache, D.: Security analysis of the Gennaro-Halevi-Rabin signature scheme. In: Preneel, B. (ed.) EUROCRYPT 2000. LNCS, vol. 1807, pp. 91–101. Springer, Heidelberg (2000). doi:10.​1007/​3-540-45539-6_​7 CrossRef
8.
Derler, D., Hanser, C., Slamanig, D.: Revisiting cryptographic accumulators, additional properties and relations to other primitives. In: Nyberg, K. (ed.) CT-RSA 2015. LNCS, vol. 9048, pp. 127–144. Springer, Heidelberg (2015). doi:10.​1007/​978-3-319-16715-2_​7
9.
Derler, D., Pöhls, H.C., Samelin, K., Slamanig, D.: A general framework for redactable signatures and new constructions. In: Kwon, S., Yun, A. (eds.) ICISC 2015. LNCS, vol. 9558, pp. 3–19. Springer, Heidelberg (2016). doi:10.​1007/​978-3-319-30840-1_​1 CrossRef
10.
Gennaro, R., Halevi, S., Rabin, T.: Secure hash-and-sign signatures without the random oracle. In: Stern, J. (ed.) EUROCRYPT 1999. LNCS, vol. 1592, pp. 123–139. Springer, Heidelberg (1999). doi:10.​1007/​3-540-48910-X_​9
11.
Ghosh, E., Ohrimenko, O., Tamassia, R.: Verifiable member and order queries on a list in zero-knowledge. IACR Cryptology ePrint Archive, p. 632 (2014)
12.
13.
14.
15.
de Meer, H., Liedel, M., Pöhls, H.C., Posegga, J., Samelin, K.: Indistinguishability of one-way accumulators. Technical report MIP-1210, University of Passau (2012)
16.
Miyazaki, K., Hanaoka, G., Imai, H.: Digitally signed document sanitizing scheme based on bilinear maps. In: AsiaCCS, pp. 343–354 (2006)
17.
Pöhls, H.C., Angelakis, V., Suppan, S., Fischer, K., Oikonomou, G., Tragos, E.Z., Rodriguez, R.D., Mouroutis, T.: Rerum: building a reliable IoT upon privacy- and security- enabled smart objects. In: IEEE WCNC (2014)
18.
Pöhls, H.C., Höhne, F.: The role of data integrity in EU digital signature legislation — achieving statutory trust for sanitizable signature schemes. In: Meadows, C., Fernandez-Gago, C. (eds.) STM 2011. LNCS, vol. 7170, pp. 175–192. Springer, Heidelberg (2012). doi:10.​1007/​978-3-642-29963-6_​13 CrossRef
19.
Pöhls, H.C., Samelin, K.: On updatable redactable signatures. In: Boureanu, I., Owesarski, P., Vaudenay, S. (eds.) ACNS 2014. LNCS, vol. 8479, pp. 457–475. Springer, Heidelberg (2014). doi:10.​1007/​978-3-319-07536-5_​27
20.
Pöhls, H.C., Samelin, K., Posegga, J.: Sanitizable signatures in XML signature — performance, mixing properties, and revisiting the property of transparency. In: Lopez, J., Tsudik, G. (eds.) ACNS 2011. LNCS, vol. 6715, pp. 166–182. Springer, Heidelberg (2011). doi:10.​1007/​978-3-642-21554-4_​10 CrossRef
21.
Samelin, K., Pöhls, H.C., Bilzhause, A., Posegga, J., de Meer, H.: On structural signatures for tree data structures. In: Bao, F., Samarati, P., Zhou, J. (eds.) ACNS 2012. LNCS, vol. 7341, pp. 171–187. Springer, Heidelberg (2012). doi:10.​1007/​978-3-642-31284-7_​11 CrossRef
22.
Samelin, K., Pöhls, H.C., Bilzhause, A., Posegga, J., de Meer, H.: Redactable signatures for independent removal of structure and content. In: Ryan, M.D., Smyth, B., Wang, G. (eds.) ISPEC 2012. LNCS, vol. 7232, pp. 17–33. Springer, Heidelberg (2012). doi:10.​1007/​978-3-642-29101-2_​2 CrossRef
23.
Slamanig, D., Stingl, C.: Disclosing verifiable partial information of signed CDA documents using generalized redactable signatures. In: Healthcom, pp. 146–152 (2009)
24.
Steinfeld, R., Bull, L., Zheng, Y.: Content extraction signatures. In: Kim, K. (ed.) ICISC 2002. LNCS, vol. 2288, pp. 163–205. Springer, Heidelberg (2002). doi:10.​1007/​3-540-45861-1_​22
25.
Stranacher, K., Krnjic, V., Zefferer, T.: Trust and reliability for public sector data. In: Proceedings of International Conference on e-Business and e-Government, vol. 73, pp. 124–132 (2013)
26.
Tragos, E.Z., Angelakis, V., Fragkiadakis, A., Gundlegard, D., Nechifor, S., Oikonomou, G., Pöhls, H.C., Gavras, A.: Enabling reliable and secure IOT-based smart city applications. In: IEEE PERCOM, pp. 111–116 (2014)
27.
Metadata
Title
Integrity and Authenticity Protection with Selective Disclosure Control in the Cloud & IoT
Authors
Christoph Frädrich
Henrich C. Pöhls
Wolfgang Popp
Noëlle Rakotondravony
Kai Samelin
Copyright Year
2016
Book
Information and Communications Security

Print ISBN: 978-3-319-50010-2

Electronic ISBN: 978-3-319-50011-9

Copyright Year: 2016

DOI
https://doi.org/10.1007/978-3-319-50011-9_16

Premium Partner

    Image Credits