arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2302.11292cs.CRcs.NI
收藏

一种具备时间依赖访问控制的端到端加密缓存系统

An End-To-End Encrypted Cache System with Time-Dependent Access Control

TIS Inc.(TIS株式会社)

Keita Emura, Masato Yoshimi

AI总结:

针对原始Cache-22加密缓存系统无具体访问控制方法的问题,本文为其新增了通信开销为$O(\log T_{\sf max})$的可扩展时间依赖访问控制协议,实验验证了其访问控制有效性,并发现缓存容量与网络流量存在关联。

摘要:

随着传输层安全(Transport Layer Security,TLS)等加密通信技术的应用日益广泛,加密缓存系统成为兼顾通信效率与隐私性的一种极具前景的方案。Cache-22是一种由Emura等人于2020年ISITA会议上提出的加密缓存系统,能够大幅降低缓存服务器与服务提供商之间的通信量。在Cache-22的最终流程中,服务提供商会通过TLS将对应的解密密钥发送给用户,该流程使得服务提供商可以控制哪些用户能够访问内容。例如,如果用户下载了某部剧集多集的密文,服务提供商可以决定免费提供部分内容(如第一集),而对剩余内容收取费用。然而,原始的Cache-22系统中并未实现具体的访问控制方法。本文为Cache-22新增了一种可扩展的访问控制协议。具体而言,我们提出了一种时间依赖的访问控制机制,其通信开销为$O(\log T_{\sf max})$,其中$T_{\sf max}$为最大时间周期。尽管该协议是有状态的,但我们可以通过密钥管理的开销,实现具备可扩展性的时间依赖访问控制。我们给出了实验结果,证明改进后的系统能够有效控制访问权限。我们还观察到了缓存容量与网络流量之间的关联:由于引入了时间依赖访问控制,重复内容的数量高于原始Cache-22系统中的数量。

英文摘要:

Due to the increasing use of encrypted communication, such as Transport Layer Security (TLS), encrypted cache systems are a promising approach for providing communication efficiency and privacy. Cache-22 is an encrypted cache system (Emura et al. ISITA 2020) that makes it possible to significantly reduce communication between a cache server and a service provider. In the final procedure of Cache-22, the service provider sends the corresponding decryption key to the user via TLS and this procedure allows the service provider to control which users can access the contents. For example, if a user has downloaded ciphertexts of several episodes of a show, the service provider can decide to provide some of the contents (e.g., the first episode) available for free while requiring a fee for the remaining contents. However, no concrete access control method has been implemented in the original Cache-22 system. In this paper, we add a scalable access control protocol to Cache-22. Specifically, we propose a time-dependent access control that requires a communication cost of $O(\log T_{\sf max})$ where $T_{\sf max}$ is the maximum time period. Although the protocol is stateful, we can provide time-dependent access control with scalability at the expense of this key management. We present experimental results and demonstrate that the modified system is effective for controlling access rights. We also observe a relationship between cache capacity and network traffic because the number of duplicated contents is higher than that in the original Cache-22 system, due to time-dependent access control.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑