Identity-based encryption with equality test (IBEET) is a special form of searchable encryption that has broad applications in cloud computing. It enables users to perform equality tests on encrypted data without decryption, thereby achieving secure data search while ensuring data privacy and confidentiality. However, in the context of mobile cloud computing, the susceptibility of mobile devices to loss significantly increases the risk of private key exposure. Existing IBEET schemes struggle to address this issue effectively, limiting their practical applicability. Moreover, with the rapid advancement of quantum computing, the security of traditional cryptographic hardness assumptions faces potential threats. To address these challenges and enhance system efficiency, we proposes the first lattice-based revocable IBEET (RIBEET) scheme, which supports user key revocation. We prove that our scheme satisfies adaptive CCA security under the assumption of DLWE hard problem. Additionally, performance evaluations comparing our scheme with existing ones demonstrate that our scheme offers significant efficiency advantages. Furthermore, we apply the proposed scheme to mobile health services, showcasing its practicality and reliability in mobile cloud computing environments.

Differential privacy (DP) is introduced into many fields of AI to preserve privacy. However, introducing DP into AI models is extremely error-prone. To verify whether DP AI models can provide privacy guarantee (quantified by privacy budget) as these models claim, existing methods utilize attack methods to audit whether privacy budget of these models is the same as these models claim. To further improve precision of privacy budget auditing, we propose a brand new way to audit privacy budget, namely directly utilizing the parameters of DP AI models to audit privacy budget. In particular, our method utilizes statistical characteristics variance of the output distribution of DP mechanism to audit privacy budget of DP mechanism. DP AI models are regarded as data samples from output distribution of DP AI model training method and are utilized to approximate the variance of output distribution. The approximated variance is leveraged to estimate the variance of noise distribution of DP mechanism and through the relationship between noise variance and privacy budget, our method calculates the audited privacy budget through estimated noise variance. In addition, to reduce computation overhead, our method constructs parameter selection strategy to identify position whose parameter is suitable for privacy budget auditing. Comprehensive experiments are conducted to verify the effectiveness of our auditing method. Comparison results of five competitive auditing methods demonstrate that our method decreases MAE by 18.29% and decreases MSE by 23.17% on experiment datasets.

Auditing the privacy budget of differential privacy (DP) artificial intelligence (AI) models is necessary to ensure that industrial data are protected at the desired level by DP mechanisms. However, existing auditing methods are not general and precise enough to deal with various kinds of AI models, because the existing auditing methods require customizing audit frameworks and utilize information from model parameters insufficiently. In this article, we propose aprecise andgeneral method toauditthe privacy budget of DPAImodels precisely. Our method associates the parameters of the DP AI model with privacy budget through the Bayesian perspective, achieving tight auditing results with a limited number of DP AI models. Extensive experiments show that our method is more precise and general than existing methods. In particular, the experiments involve ten different datasets, five different models, and three different ways to achieve differential privacy, which indicates the generality of our method. According to empirical experiment results, in 35 out of 36 comparison experiments, our method demonstrates improvements in precision.

Currently, no practical lightweight authenticated key agreement (AKA) protocol with fine-grained pre-authentication has been developed to address security issues such as data integrity, authenticity, traceability, tamper-proofing, and privacy in 5G NR V2X. In this paper, we introduce a lightweight anonymous attribute-based signature of knowledge (Lw-AABSoK) scheme built on Curve25519 to defend against key-leakage attacks. This scheme enables attribute revocation and online credential updating, serving as a fine-grained pre-authentication cryptographic module for V2X secure communication. Leveraging the proposed Lw-AABSoK, we design an end-to-end fine-grained pre-authenticated key agreement protocol (E2E-FGpAKA). The E2E-FGpAKA is UDP-compatible; all interactive messages are self-validated by the Lw-AABSoK, and their sizes are strictly below the 5G NR MAC Transport Block Size (TBS). Through rigorous comparative analysis, scientific experimental verification, and comprehensive evaluation, it is evident that the proposed scheme holds significant practical value for 5G NR V2X.

Summary In this work, privacy‐preserving distributed deep learning (PPDDL) is re‐visited with a specific application to diagnosing long‐term illness like diabetic retinopathy. In order to protect the privacy of participants datasets, a multi‐key PPDDL solution is proposed which is robust against collusion attacks and is also post‐quantum robust. Additionally, the PPDDL solution provides robust network security in terms of integrity of transmitted ciphertexts and keys, forward secrecy, and prevention of man‐in‐the‐middle attacks and is extensively verified using Verifpal. Proposed solution is evaluated on retina image datasets to detect diabetic retinopathy, with deep learning accuracy results of 96.30%, 96.21% and 96.20% for DDL, DDL + SINGLE and DDL + MULTI scenarios respectively. Results from our simulation indicate that accuracy of the PPDDL is maintained while protecting the privacy of the datasets of participants. Our proposed solution is also efficient in terms of the communication and run‐time costs.

Authenticated Key agreement protocol (AKA) is one of the essential components for reliable secure communication in Industrial Internet-of-Things (IIoT) communication model. Recently, Srinivas et al. proposed a three-factor elliptic curve cryptosystem (ECC)-based AKA protocol called UAP-BCIoT for WSN-based intelligent transportation system (ITS). In this paper, we first find out that their protocol has a security weak point inherently called master secret disclose and key forgery defect which makes their protocol susceptible to variant impersonation attacks. To overcome the deficiency of their protocol, we construct an improved ECC-based three-factors (credential, password and biometric) tripartite authenticated key agreement protocol among managers Ui, domain gateway DG and IIoT nodes INj with identity dynamic revocation and online updating (IDR-OU-TAKA) for secure communication in IIoT. Unlike the vast majority of previous GWN-assisted MAKA protocols that only negotiate the session key between Ui and INj, our IDR-OU-TAKA protocol can selectively achieve Ui DG INj tripartite key negotiation according to Ui’s IPv6 addresses, meaning that any two parties can use the session key to establish a secure channel which can achieve isolation security within the IIoT domain. Besides, in our proposed IDR-OU-TAKA, the overdue or corrupted manager can be immediately revoked by dynamically maintaining the revocation list and the identity of manager can be securely updated online through an open channel. We give rigorous security proof based on real-or-random (ROR) model and the non-mathematical (informal) security analysis to our proposed IDR-OU-TAKA protocol. Finally, we conduct a comprehensive comparison and evaluation to our proposed IDR-OU-TAKA protocol with other state-of-art MAKA protocols in terms of security and functionality features, communication, and computation costs which clearly indicate that our protocol is more practical and suitable for IIoT.

Unmanned aerial vehicle (UAV)-enabled intelligent systems are emerging and empowering real-time monitoring and modeling tasks. The security requirements in real-time UAV-enabled intelligent systems are data integrity, authenticity, traceability, tamper-proofing, and privacy. A secure channel established by authenticated key agreement (AKA) protocol can cover all the security requirements. However, no UDP-based lightweight pairing-free AKA protocol has been proposed for the UAV system. In this article, we propose a UDP-compatible Curve25519-infrastructural identity-based end-to-end pre-AKA protocol (UDP-IBE2E-pAKA) with system auto-upgrading and direct and lifecycle credential revocation as a lightweight and reliable UDP-based secure communication module for UAV-enabled networks, which perfectly fits the rapid mobility and extremely harsh work environments of UAVs. To protect UAV-enabled systems stable from DDoS attacks, we construct an efficient identity-based signature as a preauthentication mechanism for the verifier to directly authenticate the sender without any redundant operations. In addition, to prevent the corrupted UAV from monitoring and disrupting attacks, our protocol can revoke the malicious entities directly and immediately with a revocation list in the authentication phase. Moreover, online mode auto-upgradable algorithms are designed to achieve key exposure resistance in our protocol. The full proof of the authenticity and privacy are given in this article. The comprehensive comparison with other state-of-the-art end-to-end AKA protocols indicates that our protocol meets the most robustness and highest efficiency on Raspberry Pi 5.

Access control and authenticity are two critical concerns of the encrypted propagating data in edge computing-assisted intelligent transportation systems (EC-ITS). This paper presents a fully traceable and verifiable ciphertext-policy attribute-based encryption scheme with auditable outsourced decryption and dynamic identity revocation (FTV-AOD-DR-CP-ABE) for EC-ITS as a confidential and fine-grained data sharing and acquiring module. The proposed FTV-AOD-DR-CP-ABE is computing-efficient that all the algorithms executed by vehicles including\(\mathbf{Enc}\),\(\mathbf{OutKeyGen}\)and\(\mathbf{FinalDec}\)are constant complexity. In addition, an efficient identity-based signature and message commitment (IBSMC) algorithm is constructed for the ciphertext and message in our FTV-AOD-DR-CP-ABE to provide both of them with traceable authenticity and verifiability. An outsourced key auditing algorithm\(\mathbf{TKAudit}\)is also innovated for RSU to audit the legality and freshness of outsourced key\(\mathsf{TK}\), which can protect the propagating data system against the flooding and DDoS attack with the illegal outsourced keys. Based on the traceability of the ciphertext and outsourced key, a dynamic vehicle revocation mechanism is designed in our scheme. Next the rigorous proofs of the data confidentiality, ciphertext and message traceable verifiability,\(\mathsf{TK}\)auditability and revocable security are given in random oracle model (ROM). Finally, by comprehensive comparison and evaluation of the proposed FTV-AOD-DR-CP-ABE with other state-of-the-art data propagating schemes, our FTV-AOD-DR-CP-ABE is more comprehensive.

With the popularity of artificial intelligence and cloud computing, many neural network models can be placed on the cloud server as an open service, such as Google Goggles and the online face recognition system of Baidu. The data owner sends his data to the cloud server to get the prediction result of data. Obviously, the cloud service provider can access model parameters and private data if there is no additional protection mechanism. On the one hand, if the adversary can access private data, they can freely use the artificial intelligence model and Big Data technologies to analyze the data owner. On the other hand, when the adversary can access model parameters, the interest of model owner would be harmed. Thus, preserving model parameters (model privacy) and private data (data privacy) becomes the key for applying neural network models as open cloud services. In this article, to protect the model privacy and data privacy in neural network prediction even when a cloud service provider colludes with the data owner or the model owner, we first propose a new system model with two no-colluding cloud servers and a corresponding security model. Then, we propose a new non-interactive outsourcing scheme, which can protect model privacy together with data privacy. Our scheme is able to resist collusive attacks of one server and the data owner as well as collusive attacks of one server and the model owner. At last, the security analyses indicate that our scheme just needs no collusion between cloud servers. The performance analyses indicate that our scheme is very lightweight for the data owner, and it is about tens of milliseconds for a neural network model with 1000 parameters.

Summary Due to successful applications of data analysis technologies in many fields, various institutions have accumulated a large amount of data to improve their services. As the speed of data collection has increased dramatically over the last few years, an increasing number of users are growing concerned about their personal information. Therefore, privacy preservation has become an urgent problem to be solved. Differential privacy as a strong privacy preservation tool has attracted significant attention. In this review, we focus on improving data utility of differentially private mechanisms through technologies related to cryptography. In particular, we first focus on how to improve data utility through anonymous communication. Then, we summarize how to improve data utility by combining differentially private mechanisms with homomorphic encryption schemes. Next, we summarize hardness results of what is impossible to achieve for differentially private mechanisms' data utility from the view of cryptography. Differential privacy borrowed intuitions from cryptography and still benefits from the progress of cryptography. To summarize the state‐of‐the‐art and to benefit future researches, we are motivated to provide this review.

Outsourced decryption attribute-based encryption (OD-ABE) is emerging as a promising cryptographic tool to provide efficient fine-grained access control for data accessing and sharing in cloud-assisted Intelligent Internet of Mobile Things (IIoMT). Decryption verification is an essential property of OD-ABE to enable the mobile user to verify the precision of the decryption data. Unfortunately, the most representative verification (commitment) algorithms have various security flaws. In this article, we first indicate that the two state-of-art key-based commitment schemes are vulnerable to “Commitment Extract(Decrypt)-then-Reuse Attack” and “Commitment Impersonation Attack” which demolish the unforgeability of the commitment. Then to cover all the existing attacks to commitment algorithms, we redefine a robuster verifiable security model for verifiable OD-ABE. Subsequently, we invent a ciphertext fingerprint (CTfp)-based commitment scheme and give rigorous proof to the proposed commitment scheme, including binding, hiding, unforgeability, and nonrepudiation (traceability) in the random oracle. Next, we apply our CTfp-based commitment to the widely used OD-ABE schemes to provide them robuster verifiability. Finally, the theoretical comparison and simulation experiments are presented to show our new type of commitment algorithm is more secure and practical.

Massive Internet of Things (IoT) data sets are possessed by big institutions serving daily life because IoT devices are widely used in our daily life such as wearable devices and smart home devices. Publishing these data sets among various institutions causes an increasing number of users to concern their personal privacy. Differential privacy is the state-of-the-art concept of privacy preservation, but it suffers from the low accuracy. In this article, we improve differentially private mechanisms including the Laplace mechanism as well as the sample and aggregation mechanism by bringing the personalized sampling technology into these mechanisms so that IoT data sets can be privately published through differentially private mechanisms. In particular, improved mechanisms assign a personalized sampling probability to each data record in a way that their accuracy can be improved. We analyse improved mechanisms in terms of their privacy and accuracy. Then, we empirically demonstrate that the performance of improved mechanisms is better than original mechanisms through extensive experiments on synthetic data sets and real-world data sets.

Differential privacy is a widely accepted concept of privacy preservation, and the Laplace mechanism is a famous instance of differentially private mechanisms used to deal with numerical data. In this paper, we find that differential privacy does not take the linear property of queries into account, resulting in unexpected information leakage. Specifically, the linear property makes it possible to divide one query into two queries, such as$q(D)=q(D_{1})+q(D_{2})$if$D=D_{1}\cup D_{2}$and$D_{1}\cap D_{2}=\emptyset $. If attackers try to obtain an answer to$q(D)$, they can not only issue the query$q(D)$but also issue$q(D_{1})$and calculate$q(D_{2})$by themselves as long as they know$D_{2}$. Through different divisions of one query, attackers can obtain multiple different answers to the same query from differentially private mechanisms. However, from the attackers’ perspective and differentially private mechanisms’ perspective, the total consumed privacy budget is different if divisions are delicately designed. This difference leads to unexpected information leakage because the privacy budget is the key parameter for controlling the amount of information that is legally released from differentially private mechanisms. To demonstrate unexpected information leakage, we present a membership inference attack against the Laplace mechanism. Specifically, under the constraints of differential privacy, we propose a method for obtaining multiple independent identically distributed samples of answers to queries that satisfy the linear property. The proposed method is based on a linear property and some background knowledge of the attackers. When the background knowledge is sufficient, the proposed method can obtain a sufficient number of samples from differentially private mechanisms such that the total consumed privacy budget can be made unreasonably large. Based on the obtained samples, a hypothesis testing method is used to determine whether a target record is in a target dataset.

As data is growing in different dimensions, it is difficult to get appropriate data analytic tools. Spark is one of high speed "in-memory computing" big data analytic tool designed to improve the efficiency of data computing in both batch and realtime data analytic. Spark is memory bottleneck problem which degrades the performance of applications due to in memory computation and uses of storing intermediate and output result in memory. Investigating how performance is increased in relation to spark executor memory, number of executors, number of cores, and deploy mode parameters configuration in a standalone cluster model is our primary goal. Three representative spark applications are used as workloads to evaluates performance in relation to changing these parameters value. Experimental result show, submitting the job in cluster deploy mode is faster to finish than a submitting job in client deploy mode under two workloads. This implies spark performance does not depend on deploy mode rather it depends on types of application. However, increasing number of executor per worker, a number of core per executor and memory fraction will increase spark performance under all workloads in any deploy mode.

The differential privacy is the state-of-the-art conception for privacy preservation due to its strong privacy guarantees, however it suffers from low accuracy. In this paper, we propose a personalized sample Laplace mechanism by combining the Laplace mechanism with sampling technology. In order to improve the accuracy, the proposed mechanism assigns personalized sampling probability to each record. Based on the personalized sampling probability, we prove that the proposed mechanism satisfies ε differential privacy. Then we compare the proposed mechanism with other mechanisms in term of the accuracy. Through extensive experiments on synthetic data set and real world data set, we demonstrate that the performance of proposed mechanism is better.

The Internet of Things (IoT), recognized as one of the major technological revolutions in the century, is deployed and used today sociality. The related security issues are taken into account by the academia and industry. Recently, an online/offline certificateless signature scheme (OO-CLS) proposed by Saeed et al. is used to construct a heterogeneous remote anonymous authentication protocol (HRAAP) in wireless body area networks based on the IoT. However, in this article, we show that the scheme is vulnerable to the forgery attack which is not necessary to know any information except public system parameters. Furthermore, we show that the sensor node can generate the partial private keys and secret values of other sensor nodes after it obtains its partial private key. This causes that the HRAAP is also insecure. Finally, we improve the OO-CLS and analyze the security of our improved scheme.

The logistic model is a very elementary and important model in the field of machine learning. In this article, an efficient differential privacy logistic classification mechanism is proposed. The proposed mechanism is better than object function perturbation mechanism in terms of running time and accuracy. Regarding accuracy, the proposed mechanism's accuracy is almost the same as the no differential privacy (non-dp) mechanism, and the proposed mechanism is better than that of the object function perturbation mechanism in both the test accuracy and the train accuracy. As for the running time of the training model, the proposed mechanism is better than the object function mechanism and is the same as the non-dp mechanism.

An approximate message authentication scheme is a primitive that allows a sender Alice to send a source state to a receiver Bob such that the latter is assured of its authenticity, where the source state is considered as authentic if it only undergoes a minor change. Here, the authors propose an efficient scheme for this problem and prove its security under a rigorous model. Our scheme only needs a lightweight computation cost and hence is very efficient. As the authentication message is transmitted over a noisy channel, we also value the channel efficiency (i.e. the coding rate). For a fixed coding method, this is determined by the admissible decoding bit error probability . A larger admits a shorter codeword length and hence a larger coding rate. It turns out that the can be set to be a significantly large constant (determined by the legal distortion level for the source state). Compared with existing schemes, the advantage in is evident.

Many RFID tags store valuable information that can easily be subject to unauthorized reading, leading to system security and privacy risks. The detection methods existed are not only complex and impractical, but also unable to extract more information about the abnormal signal. In this paper, we propose a lightweight detection approach for the unauthorized reading without affecting the operation of RFID systems. Such an approach contains three parts: RF signal scanner, signalevent model construction and abnormal feature extraction. In particular, we design and implement a RF scanner to acquire RF signals and measure RSSI values. After that, we build a signal-event model to analyze how the RSSI value is related to the RFID event. The detection of unauthorized reading is to investigate the deviation of observed RSSI values from their expected values. Finally, we extract and separate abnormal RSSI values to estimate the risk of unauthorized reading. The primary experimental results show that our approach can achieve high prediction accuracy in detecting unauthorized reading and make better performance in extracting abnormal features.

Recently, there has been growing interest in indoor localization, because numerous applications depend on the rapid and accurate position estimation of tagged objects. While RFID-based indoor localization is attractive, the need for a large-scale and high-density deployment of readers and reference tags is costly. Being the range-free localization, our schemes depend solely on mobile readers without reference tags or other devices, and it avoids the need of distance estimation according to RSSI or phase difference. We propose two novel algorithms, continuous scanning and category-based scheduling, for locating single and multiple tagged objects, respectively. Our primary experimental results show that the system can achieve high time efficiency and localization accuracy.