CryptoDB
Delegating Capabilities in Predicate Encryption Systems
| Authors: | |
|---|---|
| Download: | |
| Abstract: | In predicate encryption systems, given a capability, one can evaluate one or more predicates on the encrypted data, while all other information about the plaintext remains hidden. We consider the first such systems to permit delegation of capabilities. In a system that supports delegation, a user Alice who has a capability can delegate to Bob a more restrictive capability, which allows him to learn less about encrypted data than she did. We formally define delegation in predicate encryption systems, and propose a new security definition for delegation. In addition, we present an efficient construction supporting conjunctive queries. The security of our construction can be reduced to the general 3-party Bilinear Diffie-Hellman assumption, and the Bilinear Decisional Diffie-Hellman assumption in composite-order bilinear groups. |
BibTeX
@misc{eprint-2008-17956,
title={Delegating Capabilities in Predicate Encryption Systems},
booktitle={IACR Eprint archive},
keywords={public-key cryptography / predicate encryption, delegation, bilinear groups},
url={http://eprint.iacr.org/2008/279},
note={full version of a paper in ICALP08 rshi@cmu.edu 14050 received 20 Jun 2008},
author={Elaine Shi and Brent Waters},
year=2008
}