Controlling Access to an Oblivious Database Using Stateful Anonymous Credentials

Authors:
Scott Coull;Matthew Green;Susan Hohenberger
Affiliations:
Information Security Institute, The Johns Hopkins University, Baltimore, USA MD 21218;Information Security Institute, The Johns Hopkins University, Baltimore, USA MD 21218;Information Security Institute, The Johns Hopkins University, Baltimore, USA MD 21218
Venue:
Irvine Proceedings of the 12th International Conference on Practice and Theory in Public Key Cryptography: PKC '09
Year:
2009

Citing 24
Cited 15

Security without identification: transaction systems to make big brother obsolete

Communications of the ACM
Private information retrieval

Journal of the ACM (JACM)
Oblivious Transfer with Adaptive Queries

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Separability and Efficiency for Generic Group Signature Schemes

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Non-Interactive and Information-Theoretic Secure Verifiable Secret Sharing

CRYPTO '91 Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology
Wallet Databases with Observers

CRYPTO '92 Proceedings of the 12th Annual International Cryptology Conference on Advances in Cryptology
Proofs of Partial Knowledge and Simplified Design of Witness Hiding Protocols

CRYPTO '94 Proceedings of the 14th Annual International Cryptology Conference on Advances in Cryptology
Statistical Zero Knowledge Protocols to Prove Modular Polynomial Relations

CRYPTO '97 Proceedings of the 17th Annual International Cryptology Conference on Advances in Cryptology
An Efficient System for Non-transferable Anonymous Credentials with Optional Anonymity Revocation

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
Priced Oblivious Transfer: How to Sell Digital Goods

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
A Statistically-Hiding Integer Commitment Scheme Based on Groups with Hidden Order

ASIACRYPT '02 Proceedings of the 8th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Signature schemes and applications to cryptographic protocol design

Signature schemes and applications to cryptographic protocol design
Oblivious keyword search

Journal of Complexity - Special issue on coding and cryptography
How to win the clonewars: efficient periodic n-times anonymous authentication

Proceedings of the 13th ACM conference on Computer and communications security
Simulatable Adaptive Oblivious Transfer

EUROCRYPT '07 Proceedings of the 26th annual international conference on Advances in Cryptology
Rapid demonstration of linear relations connected by boolean operators

EUROCRYPT'97 Proceedings of the 16th annual international conference on Theory and application of cryptographic techniques
Conditional oblivious transfer and timed-release encryption

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Proving in zero-knowledge that a number is the product of two safe primes

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Efficient proofs that a committed number lies in an interval

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
A signature scheme with efficient protocols

SCN'02 Proceedings of the 3rd international conference on Security in communication networks
Blind identity-based encryption and simulatable oblivious transfer

ASIACRYPT'07 Proceedings of the Advances in Crypotology 13th international conference on Theory and application of cryptology and information security
A verifiable random function with short proofs and keys

PKC'05 Proceedings of the 8th international conference on Theory and Practice in Public Key Cryptography
Efficient identity-based encryption without random oracles

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Balancing accountability and privacy using e-cash (extended abstract)

SCN'06 Proceedings of the 5th international conference on Security and Cryptography for Networks

Regulatory compliant oblivious RAM

ACNS'10 Proceedings of the 8th international conference on Applied cryptography and network security
Oblivious transfer with access control: realizing disjunction without duplication

Pairing'10 Proceedings of the 4th international conference on Pairing-based cryptography
Oblivious transfer with hidden access control policies

PKC'11 Proceedings of the 14th international conference on Practice and theory in public key cryptography conference on Public key cryptography
Secure blind decryption

PKC'11 Proceedings of the 14th international conference on Practice and theory in public key cryptography conference on Public key cryptography
Practical adaptive oblivious transfer from simple assumptions

TCC'11 Proceedings of the 8th conference on Theory of cryptography
Oblivious transfer with complex attribute-based access control

ICISC'10 Proceedings of the 13th international conference on Information security and cryptology
Practical PIR for electronic commerce

Proceedings of the 18th ACM conference on Computer and communications security
Efficient oblivious transfers with access control

Computers & Mathematics with Applications
Unlinkable priced oblivious transfer with rechargeable wallets

FC'10 Proceedings of the 14th international conference on Financial Cryptography and Data Security
Oblivious outsourced storage with delegation

FC'11 Proceedings of the 15th international conference on Financial Cryptography and Data Security
Efficient schemes for anonymous yet authorized and bounded use of cloud resources

SAC'11 Proceedings of the 18th international conference on Selected Areas in Cryptography
A new hash-and-sign approach and structure-preserving signatures from DLIN

SCN'12 Proceedings of the 8th international conference on Security and Cryptography for Networks
Oblivious transfer with hidden access control from attribute-based encryption

SCN'12 Proceedings of the 8th international conference on Security and Cryptography for Networks
Optimally private access control

Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society
Universally composable adaptive oblivious transfer (with access control) from standard assumptions

Proceedings of the 2013 ACM workshop on Digital identity management

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this work, we consider the task of allowing a content provider to enforce complex access control policies on oblivious protocols conducted with anonymous users. As our primary application, we show how to construct privacy-preserving databases by combining oblivious transfer with an augmented anonymous credential system. This permits a database operator to restrict which items each user may access, without learning anything about users' identities or item choices. This strong privacy guarantee holds even when users are assigned different access control policies and are allowed to adaptively make many queries. To do so, we show how to augment existing anonymous credential systems so that, in addition to certifying a user's attributes, they also store state about the user's database access history. Our construction supports a wide range of access control policies, including efficient and private realizations of the Brewer-Nash (Chinese Wall) and Bell-LaPadula (Multilevel Security) policies, which are used for financial and defense applications. In addition, our system is based on standard assumptions in the standard model and, after an initial setup phase, each transaction requires only constant time.