Analysis Of Public Key Encryption

Information security refers to protection of information against unauthorised access whether in storage, being processed or in transit. The major goals of information security are confidentiality, integrity and availability. In order to meet these security goals, several access control models have been proposed. Access Control is the control of access to data, system and dialogues based on certain policies. Access control models were traditionally classified as Discretionary Access Control and Mandatory Access Control. However several newer models have since arrived such as I-BAC (Identity Based Access Control), RBAC (Role Based Access Control Model), ABAC (Attribute Based Access Control), TBAC (Task Based Access Control) and T-MAC (Team Based Access Control) (Joshi, Aref, Ghafoor & Spafford, 2001).

Today with drastic changes in communication technologies based on computer and internet, people more often communicate via emails. However, traditional email protocol is insecure because the message that has been transmitted is in plain text. Someone can intercepts copy or even alter the emails. Individual privacies such as personal/commercial secrets, bank transaction and even the countries intelligence information that send through email are more vulnerable to be hacked. Therefore, the security of emails has raised the attention of community. The primary explanations behind the Email communication not utilizing encryption is that the current Email encryption results require monotonous operations and hard key administrations. In this way, research about on basic, very secured also effective Email content protection frameworks are in incredible need.

Data encryption and decryption have become increasingly important as more people are communicating over the internet. Although cryptology is not new, the demand for this technology has soared as its usefulness for security purposes has become more evident. Cryptology involves converting original messages into non-readable formats and plays an important role in keeping data safe while it is in transit (Agrawal & Mishra, 2012). Two popular forms of cryptology are symmetric and asymmetric.

The objective of this paper is to bestow secure patient-centric personal health record access and efficient key management as well. Idea here is to introduce a new technology that includes the encryption standards as well as water marking concept in order to protect the privacy of the patient’s health records. Firstly, attribute based encryption concept which provides data encryption by generating private key to the user and gives the user to provide access to the person who they want to share by generating public key during the decryption of their personal health record.

The framework proposes a characteristic based secure information recovery plot utilizing CP-ABE for decentralized DTNs. The proposed plot highlights the accompanying accomplishments. In the first place, quick property disavowal upgrades in reverse/forward mystery of secret information by decreasing the windows of helplessness. Second, encryptors can characterize a fine-grained get to approach utilizing any monotone get to structure under qualities issued from any picked set of specialists. Third, the key escrow issue is settled by a without escrow key issuing convention that adventures the normal for the decentralized DTN design. The key issuing convention produces and issues client mystery keys by playing out a safe two-party calculation (2PC) convention among the key specialists with their own particular ace privileged insights. The 2PC

In this ideal architecture the whole process is divided into the three main components the mediator, customer and a group of data service providers. Previously there is no interaction between the customer and the data provider. And when the client sends a query, the mediator forwards the information to all data holders and via exchange of the acknowledgements, the mediator generates the connection with the data providers[4].

CP-ABE is a promising cryptographic solution to the access control issues like data confidentiality and privacy can be cryptographically enforced

With the advent of the online era, comes a very new challenge of protection of confidential information from unauthorized access and its misuse or modification. The

Key is an important requirement in encryption process.pk is denoted as public key and sk as private key [5]. Encryption process is denoted by Enc and decryption process is denoted by Dec. Given a plaintext m and key k, encryption is defined as Enc (m, k) and Decryption is defined as

Thus, it is essential that computational techniques are performed so that the requirements of information protection are met. In this scenario are presented the two basic types of encryption, symmetric or private key and public key or asymmetric.

For many computing systems, database technologies are an essential component. They permit data to be reserved and shared electronically and the quantity of data retained in these systems continually develops at an exponential rate. As organizations upsurge their dependence on, possibly distributed, systems of information for daily business, they develop the vulnerability to security breaches even as they get efficiency and productivity advantages. However, numerous techniques like encryption and electronic signatures, are presently available for data protection whenever transmitted across the sites, an actually comprehensive tactic to protect data must also contain mechanisms to enforce access control policies centered on data contents, characteristics and subject qualifications, and other relevant appropriate information, like time. It is currently well recognized that the semantics of data has to be taken into consideration so as to stipulate effective policies of access control. Moreover, data integrity and availability techniques must be adopted that specially tailored to database systems. In this regard, for many years, the community for database security has developed various different techniques and approaches which assure data privacy, integrity, and availability. However, in spite of such advancements, the database security zone faces numerous inventive challenges. The security concern evolution, the "disintermediation" of data access, novel computing

Cryptography is defined as the art or process of writing in or deciphering secret code: any system of secret writing. Encryption is used in electronic systems to achieve privacy and authentication of information. The privacy requires, two questions need to be answered: what are the consequences of unauthorized access to or disclosure of the valuable information, and how often the possibility of unauthorized access to or disclosure of information. Authentication addresses the issues of whether data is from the correct source or if it has been unauthorized with. Functions embedded with in cryptographic systems help ensure data integrity by guaranteeing authenticity of a message and allowing the use of digital signature, a data block attached to a message that binds the message to a sender so that it can be verified by the receiver or others.

ABE can be implemented in two ways called Key policy Attribute Based Encryption (KP-ABE) and Ciphertext-policy Attribute Based Encryption (CP-ABE). In CP-ABE scheme, the textcipher is encrypted with an access policy chosen by an encryptor like commander, but this key is going to be created with respect to a set of attributes. CP-ABE is more appropriate to decentralized DTNs than KP-ABE because this scheme enables encryptors such as an authorized commander to choose access policies on attributes and to encrypt confidential data under that access structure by encrypting with the corresponding public keys or attributes. Many related studies suggested key revocation mechanisms in CP-ABE and KP-ABE schemes in DTNs, respectively. Those all solutions are to append to each attribute an expiration timestamp and distribute a fresh set of keys to all valid users after the expiration. The timestamp based revocable Attribute Based Encryption schemes suffer from two main problems. The

As the online services offered through internet has progressed and computing systems have become much more complex, security and privacy issues have become essential. Generally, Information system security should be able to provide user’s confidentiality, data integrity, data availability whenever a legitimate user wishes to access, in this context security can be divided into four areas as follows: Confidentiality, Integrity, Authentication and Non-Repudiation [23].

In contemporary times where, data privacy and security is of utmost importance especially in mobile computing and cloud computing, proposing a privacy solution like 'Mimesis Aegis ' application is a very good effort. The authors of the paper have come up with a mobile application that is a privacy-preserving system which protects the privacy of user data stored in the cloud.