Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes
Attribute spoofing is a major security threat in information exchange solutions based on Ciphertext-Policy Attribute-Based-Encryption (CP-ABE) and distributed CP-ABE (dCP-ABE), which can compromise privacy and security. This threat occurs when an attacker forces the Attribute Authorities to generate...
| Autores: | ; ; ; |
|---|---|
| Tipo de documento: | Artigo |
| Data de publicação: | 2023 |
| País: | España |
| Recursos: | Universidad del País Vasco |
| Repositório: | Addi. Archivo Digital para la Docencia y la Investigación |
| OAI Identifier: | oai:addi.ehu.eus:10810/60966 |
| Acesso em linha: | http://hdl.handle.net/10810/60966 |
| Nível de acesso: | Acesso aberto |
| Palavra-chave: | CP-ABE dCP-ABE IOTA IPFS FIM value chain industry 4.0 |
| _version_ | 1878731175776747520 |
|---|---|
| author | Mosteiro Sánchez, Aintzane |
| author2 | Barceló, Marc Astorga Burgo, Jasone Urbieta Aizpurua, Aitor |
| author2_role | author author author |
| author_browse | Astorga Burgo, Jasone Barceló, Marc Mosteiro Sánchez, Aintzane Urbieta Aizpurua, Aitor |
| author_facet | Mosteiro Sánchez, Aintzane Barceló, Marc Astorga Burgo, Jasone Urbieta Aizpurua, Aitor |
| author_role | author |
| collection | Addi. Archivo Digital para la Docencia y la Investigación |
| description | Attribute spoofing is a major security threat in information exchange solutions based on Ciphertext-Policy Attribute-Based-Encryption (CP-ABE) and distributed CP-ABE (dCP-ABE), which can compromise privacy and security. This threat occurs when an attacker forces the Attribute Authorities to generate keys for attributes they do not possess. This paper analyzes the threat of attribute spoofing and identifies the primary attack vectors, including direct interference with the Attribute Authority and compromise of the shared attribute storage database. The authors propose a solution based on IOTA, a DAG-type DLT, and Interplanetary File System (IPFS) to prevent attribute spoofing. The solution requires distributed attribute storage, validation, and user authentication to counteract the two attack vectors effectively. The proposed solution mitigates the consequences of attribute spoofing, including privilege escalation and reduction, acquisition of private keys, and cutoff of data access. The authors also evaluate their proposal through a value-chain use case and conclude that it effectively mitigates the consequences of attribute spoofing. |
| eu_rights_str_mv | openAccess |
| format | article |
| id | ES_2a5b2e4b2fc9d8fa01a6d4e1ac0ec3a3 |
| institution | Universidad del País Vasco |
| instname_str | Universidad del País Vasco |
| network_acronym_str | ES |
| network_name_str | España |
| oai_identifier_str | oai:addi.ehu.eus:10810/60966 |
| publishDate | 2023 |
| publishDateSort | 2023 |
| publisher | MDPI |
| publisherStr | MDPI |
| reponame_str | Addi. Archivo Digital para la Docencia y la Investigación |
| spelling | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes Mosteiro Sánchez, Aintzane Barceló, Marc Astorga Burgo, Jasone Urbieta Aizpurua, Aitor CP-ABE dCP-ABE IOTA IPFS FIM value chain industry 4.0 Attribute spoofing is a major security threat in information exchange solutions based on Ciphertext-Policy Attribute-Based-Encryption (CP-ABE) and distributed CP-ABE (dCP-ABE), which can compromise privacy and security. This threat occurs when an attacker forces the Attribute Authorities to generate keys for attributes they do not possess. This paper analyzes the threat of attribute spoofing and identifies the primary attack vectors, including direct interference with the Attribute Authority and compromise of the shared attribute storage database. The authors propose a solution based on IOTA, a DAG-type DLT, and Interplanetary File System (IPFS) to prevent attribute spoofing. The solution requires distributed attribute storage, validation, and user authentication to counteract the two attack vectors effectively. The proposed solution mitigates the consequences of attribute spoofing, including privilege escalation and reduction, acquisition of private keys, and cutoff of data access. The authors also evaluate their proposal through a value-chain use case and conclude that it effectively mitigates the consequences of attribute spoofing. This work has been financed by The European commission through the Horizon Europe program under the ZDZW project (grant agreement number 101057404). MDPI http://hdl.handle.net/10810/60966 |
| spellingShingle | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes Mosteiro Sánchez, Aintzane CP-ABE dCP-ABE IOTA IPFS FIM value chain industry 4.0 |
| title | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| title_full | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| title_fullStr | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| title_full_unstemmed | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| title_short | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| title_sort | Trustworthy Users: Using IOTA and IPFS for Attribute Validation in CP-ABE and dCP-ABE Schemes |
| topic | CP-ABE dCP-ABE IOTA IPFS FIM value chain industry 4.0 |
| topic_facet | CP-ABE dCP-ABE IOTA IPFS FIM value chain industry 4.0 |
| url | http://hdl.handle.net/10810/60966 |