Formal Analyze of a Private Access Control Protocol to a Cloud Storage - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

Formal Analyze of a Private Access Control Protocol to a Cloud Storage

Résumé

Keywords: Cloud storage, formal methods, attribute based signature, attribute based encryption, data and user privacy. Abstract: Storing data in the Cloud makes challenging data's security and users' privacy. To address these problems cryptographic protocols are usually designed. Cryptographic primitives have to guarantee some security properties such that data and user privacy or authentication. Attribute-Based Signature (ABS) and Attribute-Based Encryption (ABE) are very suitable for storing data on an untrusted remote entity. In this work, we formally analyze the Ruj et al. protocol of cloud storage based on ABS and ABE schemes. We clarify several ambiguities in the design of this protocol and model the protocol and its security properties with ProVerif an automatic tool for the verification of cryptographic protocols. We discover an unknown attack against user privacy. We propose a correction, and automatically prove the security of the corrected protocol with ProVerif.
Fichier principal
Vignette du fichier
BLGR17.pdf (188.4 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01689790 , version 1 (22-01-2018)

Identifiants

Citer

Narjes Ben Rajeb, Mouhebeddine Berrima, Matthieu Giraud, Pascal Lafourcade. Formal Analyze of a Private Access Control Protocol to a Cloud Storage. 14th International Conference on Security and Cryptography SECRYPT 2017, Jul 2017, Madrid, France. ⟨10.5220/0006461604950500⟩. ⟨hal-01689790⟩
160 Consultations
284 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More