Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things
When executing a program or storing data in a medical Internet of Things (mIoT) system, physical side-channels analysis, such as recent-timing, cold-reboot, and virtual-machine attacks, might obtain partial information about internal sensitive medical data/states in memory that the attacker can gain...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2018-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8379544/ |
| _version_ | 1818558620302835712 |
|---|---|
| author | Mingwu Zhang Wentao Leng Yong Ding Chunming Tang |
| author_facet | Mingwu Zhang Wentao Leng Yong Ding Chunming Tang |
| author_sort | Mingwu Zhang |
| collection | DOAJ |
| description | When executing a program or storing data in a medical Internet of Things (mIoT) system, physical side-channels analysis, such as recent-timing, cold-reboot, and virtual-machine attacks, might obtain partial information about internal sensitive medical data/states in memory that the attacker can gain partial privacy information. Leakage-resilient cryptography has led to better implementation of many cryptographic primitives that can be proven secure against attackers who can obtain limited sensitive information about private keys, randomness, and other internal states, and therefore prevents from breaking the security. In this paper, to tolerate the sensitive information leakage in mIoT, we first present a leakage-resilient public-key encryption mechanism that is semantically secure against adaptively chosen-ciphertext attacks in the presence of key leakage under standard decisional Diffie-Hellman assumption. Our construction employs a special universal hashing in multiplicative group to provide an efficient strong extractor, and a key derivation function to derive one or more symmetric keys from a single value. Also, the plaintext space of the scheme is extended to the full domain field of group so as to provide a larger space for the message. We emphasis that our scheme can be deployed in mIoT since the limited power and energy budgets, the communication and computation cost, and the leakage attack are taken into account. Using the first scheme as a building block, we also give a protocol construction to achieve the security resilient to randomness leakage and key leakage. Our schemes feature with a shorter key size and a larger plaintext space. Concretely, the private-key contains only four elements in the finite field, and the allowable key-leakage rate is 25%, which provides a higher leakage rate than Naor Segev (leakage rate is 16.7%) and its variants. It is worth highlighting of the construction resilient to both key leakage and randomness leakage, simultaneously, and is flexible to deploy in easy-to-attack outdoor nodes such as in medical IoT and smart grids, since in these nodes the private keys and randomness are either stored or generated in outdoor privacy-aware environments. |
| first_indexed | 2024-12-14T00:14:40Z |
| format | Article |
| id | doaj.art-9905ae47603249229a110b6970dca215 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-14T00:14:40Z |
| publishDate | 2018-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-9905ae47603249229a110b6970dca2152022-12-21T23:25:35ZengIEEEIEEE Access2169-35362018-01-016338593387010.1109/ACCESS.2018.28427138379544Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-ThingsMingwu Zhang0https://orcid.org/0000-0001-8551-8826Wentao Leng1Yong Ding2Chunming Tang3School of Computer Sciences, Hubei University of Technology, Wuhan, ChinaSchool of Computer Sciences, Hubei University of Technology, Wuhan, ChinaSchool of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin, ChinaSchool of Mathematics and Information Science, Guangzhou University, Guangzhou, ChinaWhen executing a program or storing data in a medical Internet of Things (mIoT) system, physical side-channels analysis, such as recent-timing, cold-reboot, and virtual-machine attacks, might obtain partial information about internal sensitive medical data/states in memory that the attacker can gain partial privacy information. Leakage-resilient cryptography has led to better implementation of many cryptographic primitives that can be proven secure against attackers who can obtain limited sensitive information about private keys, randomness, and other internal states, and therefore prevents from breaking the security. In this paper, to tolerate the sensitive information leakage in mIoT, we first present a leakage-resilient public-key encryption mechanism that is semantically secure against adaptively chosen-ciphertext attacks in the presence of key leakage under standard decisional Diffie-Hellman assumption. Our construction employs a special universal hashing in multiplicative group to provide an efficient strong extractor, and a key derivation function to derive one or more symmetric keys from a single value. Also, the plaintext space of the scheme is extended to the full domain field of group so as to provide a larger space for the message. We emphasis that our scheme can be deployed in mIoT since the limited power and energy budgets, the communication and computation cost, and the leakage attack are taken into account. Using the first scheme as a building block, we also give a protocol construction to achieve the security resilient to randomness leakage and key leakage. Our schemes feature with a shorter key size and a larger plaintext space. Concretely, the private-key contains only four elements in the finite field, and the allowable key-leakage rate is 25%, which provides a higher leakage rate than Naor Segev (leakage rate is 16.7%) and its variants. It is worth highlighting of the construction resilient to both key leakage and randomness leakage, simultaneously, and is flexible to deploy in easy-to-attack outdoor nodes such as in medical IoT and smart grids, since in these nodes the private keys and randomness are either stored or generated in outdoor privacy-aware environments.https://ieeexplore.ieee.org/document/8379544/Sensitive information leakagekey entropyrandomness leakageleakage ratemedical Internet of Things |
| spellingShingle | Mingwu Zhang Wentao Leng Yong Ding Chunming Tang Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things IEEE Access Sensitive information leakage key entropy randomness leakage leakage rate medical Internet of Things |
| title | Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things |
| title_full | Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things |
| title_fullStr | Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things |
| title_full_unstemmed | Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things |
| title_short | Tolerating Sensitive-Leakage With Larger Plaintext-Space and Higher Leakage-Rate in Privacy-Aware Internet-of-Things |
| title_sort | tolerating sensitive leakage with larger plaintext space and higher leakage rate in privacy aware internet of things |
| topic | Sensitive information leakage key entropy randomness leakage leakage rate medical Internet of Things |
| url | https://ieeexplore.ieee.org/document/8379544/ |
| work_keys_str_mv | AT mingwuzhang toleratingsensitiveleakagewithlargerplaintextspaceandhigherleakagerateinprivacyawareinternetofthings AT wentaoleng toleratingsensitiveleakagewithlargerplaintextspaceandhigherleakagerateinprivacyawareinternetofthings AT yongding toleratingsensitiveleakagewithlargerplaintextspaceandhigherleakagerateinprivacyawareinternetofthings AT chunmingtang toleratingsensitiveleakagewithlargerplaintextspaceandhigherleakagerateinprivacyawareinternetofthings |