With the fast-paced progress of the Medical Internet of Things (MIoT), cross-institutional data sharing has become a crucial tool for chronic disease prevention and control. Attribute-based proxy re-encryption (ABPRE) is a novel cryptographic technique that facilitates secure medical data sharing by ensuring data confidentiality and supporting fine-grained access control. However, although the existing ABPRE solution supports fine-grained access control, it still lacks an effective accountability mechanism to address a series of key issues, such as system key abuse and user revocation from shared sets. Therefore, this paper proposes a lattice-based traceable and direct revocable ABPRE with a fair verification scheme (T-DR-VABPRE) for Data Sharing in MIoT. This scheme incorporates a traceability and user revocation mechanism within the ABPRE framework, locating and depriving access rights to malicious users within a shared data set, preventing innocent users from being affected by attribute revocation. Furthermore, a trusted third party is incorporated to establish a bidirectional fair verification mechanism, verifying the correctness of proxy re-encryption results. The scheme, based on lattice problems, is inherently resistant to quantum attacks. Experimental results and performance analysis demonstrate the proposed T-DR-VABPRE scheme to be efficient and practical.

In drone-assisted communication scenarios, especially in post-disaster rescue, there is a risk of privacy leakage when heterogeneous drone groups collaborate. Therefore, ensuring the anonymity of drones while guaranteeing the reliability of the message source is a significant challenge. Although existing schemes achieve anonymity, they are unable to dynamically adjust the authentication difficulty according to changes in the physical environment. In this paper, we propose an application of multi-factor puf authentication circuit based on lattice group signature for in drone-assisted communication. The scheme innovatively designs a PUF-based multi-factor authentication circuit and proposes a dynamic authentication strategy, achieving authentication and physical security under different security requirements. The scheme proposes a lattice-based heterogeneous drone group signature scheme through Merkle hash tree and lattice cryptography, which achieves efficient anonymous authentication and group member update and ensures post-quantum security. The security of the scheme is proved by formal security analysis based on AVISPA and random oracle model (ROM). Moreover, experimental results show that PUF-CLGS outperforms the benchmark schemes in terms of both computational and communication costs.

In cloud-based electronic medical record (EMR) systems, attribute-based encryption (ABE) has been utilized to protect the confidentiality of EMRs and provide keyword search over the encrypted EMRs. However, existing schemes are designed for a single attribute authority, and lack sufficient user privacy protection. In this article, we introduce TABKS, a privacy-preserving traceable attribute-based keyword search scheme in multi-authority medical cloud. First, we propose an anonymous EMR access control framework with multiple authorities, which provides user anonymity against the untrusted authorities. Second, we achieve traceable attribute-based Boolean keyword search, which enables the authorized user who satisfies the policy to conduct Boolean keyword search over the encrypted EMRs. In this process, TABKS improves the efficiency of legitimate users by partially decrypting the matched results, and also achieves efficient traitor trace by revealing the user identity from the trapdoor. Finally, we prove the security of TABKS against chosen plaintext attack and chosen keyword attack, and conduct extensive experiments with two real-world datasets to show the feasibility of TABKS.

Currently, various encryption techniques have been employed to protect the documents in cloud storage. In particular, attribute-based keyword search (ABKS) is a practical encryption primitive that can realize fine-grained access control and keyword based searching over encrypted documents. However, the search time in most of the existing ABKS schemes increases linearly with the size of document collection, which hinders the wide application of ABKS in cloud computing. To this end, we propose FAKS, a fast and privacy-preserving attribute-based keyword search system for cloud document services. Specifically, FAKS builds a Bloom filter tree structure from the document collection, which avoids matching keywords by traversing the entire collection. Then we introduce an attribute-based authenticated index retrieval (ABAIR) scheme to encrypt the Bloom filters in the tree node and retrieve the documents with the encrypted Bloom filters of the query keywords. Further, we give a concrete construction of FAKS from ABAIR to execute the keyword matching operations sublinearly in a top-down manner, and prove the security of FAKS against chosen keyword attack and keyword guessing attack. Finally, we conduct extensive experiments over the Wikipedia dataset, which show better and more stable search efficiency of FAKS compared to existing schemes.

Attribute-based keyword search (ABKS) has been proposed to realize fine-grained access control and provide search service in cloud computing. However, most ABKS schemes focus on single or conjunctive keyword search, while the recent Boolean keyword search schemes only support monotonic query formula mainly involving AND, OR and threshold operators. How to support more expressive Boolean query formulas and return the corresponding accurate search results to users have become challenges for practical ABKS over ciphertexts. In this paper, we introduce an attribute-based expressive and ranked keyword search scheme over encrypted documents named ABERKS, which allows authorized users to submit expressive Boolean query formulas involving AND, OR, NOT and threshold operators. ABERKS utilizes a non-monotonic access tree structure to construct the query formula, and further leverages extended Boolean model to rank the search results. Specifically, the users are able to define the weights in the query formula, and get the relevance score of each matched ciphertext if the attributes and keywords are both satisfied. We prove the security of ABERKS against chosen keyword attack under selective ciphertext policy model and against keyword guessing attack, and also conduct extensive experiments to show the efficiency and practicality of ABERKS.

With the popularization of location-based services (LBS), encryption techniques have been utilized to protect data security when outsourcing LBS to cloud. However, existing schemes only consider spatial range search or keyword search, while expressive and practical search over encrypted LBS data is still a challenging problem. In this article, we introduce PrivSTL, a privacy-preserving spatio-temporal keyword search framework over the encrypted LBS data based on attribute-based encryption, linear encryption and RSA encryption. It allows mobile users to submit LBS query with spatial range, time interval and Boolean keyword expression, and provides accurate and authorized search by matching these query conditions and also the access policy. Then we introduce an extended scheme PrivSTG, which utilizes Geohash to divide the locations into grids, and outsources an encrypted index tree to cloud servers. PrivSTG improves the service efficiency by searching only over the ciphertexts in the surrounding grids of mobile user. Finally, we analyze the security of PrivSTL against chosen-plaintext, chosen-keyword and outside keyword-guessing attacks in generic bilinear group model, and show that PrivSTL guarantees the spatio-temporal keyword profile privacy, and also protects the query privacy. The experimental results indicate that our scheme is practical and efficient for outsourced LBS.