6G Data Access Sharing with Quantum-Resistant Attribute Revocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current algorithms for fine-grained data access control in 6G networks are vulnerable to quantum computing attacks and lack efficient attribute revocation mechanisms, particularly in both cloud and fog computing environments.
Innovation Solution
A method combining lattice-based encryption with CP-ABE, utilizing an Attribute Authority to manage user keys, enable secure attribute revocation, and resist quantum computing attacks by updating private and ciphertext keys, ensuring only authorized users with conforming attribute sets can decrypt data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If CP-ABE algorithms are used for fine-grained data access control, then access control flexibility is improved, but vulnerability to quantum computing attacks increases
Solution Approach 1:
The patent combines CP-ABE algorithms with lattice-based encryption algorithms to create a hybrid encryption system. This merging integrates the access control flexibility of CP-ABE with the quantum resistance of lattice-based cryptography, allowing the system to maintain both fine-grained access control capabilities and security against quantum computing attacks simultaneously
Solution Approach 2:
The patent employs a composite encryption scheme that integrates multiple cryptographic primitives (CP-ABE and lattice-based encryption) into a unified system. This composite approach leverages the strengths of each component while mitigating their individual weaknesses, achieving both access control flexibility and quantum security
2Reliability
If lattice-based encryption algorithms are used for quantum resistance, then security against quantum attacks is improved, but computational overhead increases
Solution Approach 1:
The patent segments the encryption system into distinct functional components: CP-ABE for access control policy enforcement and lattice-based encryption for quantum resistance. This segmentation allows each component to be optimized independently, with the lattice-based layer providing quantum security while the CP-ABE layer handling access control, thereby managing computational complexity through modular design
Solution Approach 2:
The patent applies lattice-based encryption selectively to the extent necessary for quantum resistance rather than applying it to all encryption operations. By using CP-ABE for access control and only incorporating lattice-based encryption where quantum security is critical, the system achieves quantum resistance with minimized computational overhead
3Reliability
If attribute revocation is implemented in CP-ABE, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements a feedback mechanism where the Attribute Authority continuously monitors attribute changes and automatically updates encryption keys accordingly. When attributes are revoked or modified, the system receives feedback about these changes and responds by updating the corresponding cryptographic keys, enabling dynamic security management without requiring complex manual intervention
Solution Approach 2:
The patent employs preliminary key generation and distribution mechanisms where keys are pre-generated and distributed to users based on their attributes. This preliminary action allows the system to quickly respond to attribute changes by only updating affected keys rather than redistributing all keys, simplifying the attribute revocation process while maintaining security
Data Source
AI summary
A method for implementing fine-grained data access sharing in 6G network based on fog computing and cloud computing environment includes: (1) a security parameter is given for initialization; (2) each user is registered as a user with the said attribute authority AA; (3) a corresponding user private key is generated given a set of attributes S of a user; (4) an access policy is given by the owner of the data and data encryption is performed; (5) the user performs the data decryption process according to the embedded policy for the set of owned attributes in different environments; (6) the update key generation process is performed; (7) after receiving the private key update key from the attribute authority AA, the user updates the private key component associated with the revoked attribute in order to complete the private key update process; (8) upon receiving the ciphertext update key from the attribute authority AA, the cloud server updates the ciphertext component associated with the revocation attribute to complete the ciphertext update process.