Encrypted data sharing with multi-owner based on digital rights management in online social networks  

作　　者：HUANG Qin-long FU Jing-yi MA Zhao-feng YANG Yi-xian NIU Xin-xin 

机构地区：[1]Information Security Center,Beijing University of Posts and Telecommunications [2]National Engineering Laboratory for Disaster Backup and Recovery,Beijing University of Posts and Telecommunications [3]Beijing National Security Science and Technology Co.,Ltd

出　　处：《The Journal of China Universities of Posts and Telecommunications》2014年第1期86-93,共8页中国邮电高校学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(60803157,90812001,61272519)

摘　　要：The online social networks（OSNs） offer attractive means for social interactions and data sharing, as well as raise a number of security and privacy issues. Although current solutions propose to encrypt data before sharing, the access control of encrypted data has become a challenging task. Moreover, multiple owners may enforce different access policy to the same data because of their different privacy concerns. A digital rights management（DRM） scheme is proposed for encrypted data in OSNs. In order to protect users＇ sensitive data, the scheme allows users outsource encrypted data to the OSNs service provider for sharing and customize the access policy of their data based on ciphertext-policy attribute-based encryption. Furthermore, the scheme presents a multiparty access control model based on identity-based broadcast encryption and ciphertext-policy attribute-based proxy re-encryption, which enables multiple owners, such as tagged users who appear in a single data, customize the access policy collaboratively, and also allows the disseminators update the access policy if their attributes satisfy the existing access policy. Security analysis and comparison indicate that the proposed scheme is secure and efficient.The online social networks（OSNs） offer attractive means for social interactions and data sharing, as well as raise a number of security and privacy issues. Although current solutions propose to encrypt data before sharing, the access control of encrypted data has become a challenging task. Moreover, multiple owners may enforce different access policy to the same data because of their different privacy concerns. A digital rights management（DRM） scheme is proposed for encrypted data in OSNs. In order to protect users＇ sensitive data, the scheme allows users outsource encrypted data to the OSNs service provider for sharing and customize the access policy of their data based on ciphertext-policy attribute-based encryption. Furthermore, the scheme presents a multiparty access control model based on identity-based broadcast encryption and ciphertext-policy attribute-based proxy re-encryption, which enables multiple owners, such as tagged users who appear in a single data, customize the access policy collaboratively, and also allows the disseminators update the access policy if their attributes satisfy the existing access policy. Security analysis and comparison indicate that the proposed scheme is secure and efficient.

关 键 词：digital rights management online social networks multi-owner attribute-based encryption broadcast encryption 

分 类 号：TN918.4[电子电信—通信与信息系统]