System Analysis Paper

The cloud, the group members can be completely releasedfrom the troublesome local data storage and maintenance. It also poses a significant risk to the confidentialityof those stored files.

A. Setup: The setup phase takes input a security parameter . It selects a bilinear group of prime order p with b as generator, and bilinear map The universe attribute is . It selects for attribute n, , and a random exponent . The public key and master key is given by

Creating and assigning users to groups in a protection scheme is not only a recommendation but also a standard for control all modern operating system. Users and machines alike can be assigned to groups and that group is then placed on ACLs as if they are individual users. Every group member inherits all the permissions granted to that group on the ACL. This assignment of users and machines to groups will solve many problems when addressing security issues, one such issue would be the assignment of permissions to massive number of people rather than individually

2. Our proposed plan has the capacity bolster dynamic gatherings productively. In particular, new allowed clients can straightforwardly unscramble information records transferred before their investment without reaching with information proprietors. Client repudiation can be effortlessly accomplished through a novel repudiation list without redesigning the mystery keys of the remaining clients. The size and calculation overhead of encryption are consistent and autonomous with the quantity of repudiated clients.

Information security refers to protection of information against unauthorised access whether in storage, being processed or in transit. The major goals of information security are confidentiality, integrity and availability. In order to meet these security goals, several access control models have been proposed. Access Control is the control of access to data, system and dialogues based on certain policies. Access control models were traditionally classified as Discretionary Access Control and Mandatory Access Control. However several newer models have since arrived such as I-BAC (Identity Based Access Control), RBAC (Role Based Access Control Model), ABAC (Attribute Based Access Control), TBAC (Task Based Access Control) and T-MAC (Team Based Access Control) (Joshi, Aref, Ghafoor & Spafford, 2001).

Personal health record (PHR) is an emerging model of patient-centric health information exchange system, which has been often outsourced to be stored at any third party locations, such as cloud service providers. However, there have been wide privacy concerns as the personal health information could be exposed to unauthorized parties and to those third party servers. To assure the patients control over accessing their own Personal Health Records, it is required to encrypt the PHRs before outsourcing. Yet, there are issues such as risks of scalability in key management, privacy exposure, flexible access, and efficient user revocation, has been remained the most important challenges toward achieving fine-grained, cryptographically enforced data access control. For, designing the above system different methods of encryption techniques have to be studied and see what are the main advantages and disadvantages of the system as few of disadvantage in one system can be used advantage of another system. We have to study how data is stored in cloud system and how users can access them. To design a system such that it has different level of accessing flexibility such that the owner can choose which accessing is required for different user such that data tamper and data corruption can be eliminated. To design a system which has time limited access and data

The objective of this paper is to bestow secure patient-centric personal health record access and efficient key management as well. Idea here is to introduce a new technology that includes the encryption standards as well as water marking concept in order to protect the privacy of the patient’s health records. Firstly, attribute based encryption concept which provides data encryption by generating private key to the user and gives the user to provide access to the person who they want to share by generating public key during the decryption of their personal health record.

ABSTRACT: A Distributed computing is a rising figuring innovation. It allows clients; store their information, learning or data remotely. The reason for this paper is to secure access control plan for open mists. We display a "Security Preserving Two Layer Encryption Access control in Public Clouds", which gives more security and protection as contrast with the custom approaches. Current ways to deal with uphold access administration polices (ACPs) on outsourced information utilizing chose encryption oblige associations to deals with all keys and encryptions and transfer encoded information on the remote stockpiling. Such kind of methodologies brings about high correspondences and the reckoning expense to oversee keys and encryptions at whatever point client roll out improvements. To delegating so as to take care of this issue as a significant part of the Access Control authorization obligations as conceivable to the cloud while diminishing the data presentation hazard because of intriguing clients and Cloud.

According to the concept above, our group work is going to concentrate on protecting the confidential information and being sure the integrity of the information through protecting by users’ password, backing up data periodically, and improving data integrity.

From the viewpoint of data security, which has always been an important form of quality of service, Cloud computing surely poses new challenging security threats for number of reasons. Firstly, traditional cryptographic primitives for the purpose of data security protection cannot be straight accepted due to users loss control of data under cloud computing. Therefore, verification of correct data storage in the cloud must be attended without accurate knowledge of the whole data. Considering different kind of data for every user stored in the cloud and the requirement of long term continuous security of their data safety, the problem of checking correctness of data storage in the cloud becomes even more challenging.[1]

Usage of remote servers via internet to store, manage and process data instead of using a personal computer is known as Cloud computing. It’s a set of Information Technology services with the ability to scale up or down their service requirements. Most of the cloud services are provided by a third party service provider. In cloud computing, organizations can utilize IT services without in advance investment. Despite its benefits obtained from the cloud computing, the organizations are slow in accepting it due to security issues and challenges. Security is one of the major problems which hinder the growth of cloud. It’s not wise to handing over the important data to another company; such that clients need to be vigilant in understanding the risks of data infringement in this new environment. This paper discusses a detailed analysis of the cloud computing security issues and challenges. (Ayoleke)

Authentication is the only method which protects information or data of an individual or organization from a second party to access. Based upon the confidentiality of that particular data or information, the level of authentication depends. Now-a-days, all this data and information what we are talking about is getting digitized all around the world. For this digitized data or information to be secure, a proper authentication procedure must be set. This arise the need for an authentication secret which belongs to the category “Something we know” to come into picture. These secrets authenticate each secret holder as the authorized legitimate user to access their particular account. Technology is

1 INTRODUCTION Public-key encryption is a powerful mechanism for ensuring the confidentiality of stored and transmitted data. The traditional encryption is regarded as a method to share data to some targeted person or device that the sender knows. This means the sender knows specifically which user he wants to share with. However, in many systems the message sender will want to share date with a group of people whose credentials or attributes accord to some access policy set by the sender.[8][9]A new vision of encryption[10]was presented, where the sender can express how he wants to share data in the encryption algorithm itself. The sender will give an attribute formula to describe the users who can decrypt this data.

Abstract: In this paper, we study Group key agreement means multiple parties want to create a common secret key to be used to exchange information securely. The group key agreement with an arbitrary connectivity graph, where each user is only aware of his neighbor and has no information about the existence of other users. Further, he has no information about the network topology. We implement the existing system with more time efficient manner and provide a multicast key generation server which is expected in future scope by current authors. We replace the Diffie Hellman key exchange protocol by a new multicast key exchange protocol that can work with one to one and one to many functionality. We also tend to implement a strong symmetric encryption for improving file security in the system.

: In this paper, we consider Group key assention implies different gatherings need to make a typical mystery key to be utilized to trade data safely. The gathering key concurrence with a self-assertive availability chart, where every client is just mindful of his neighbor and has no data about the presence of different clients. Further, he has no data about the system topology. We execute the current framework with additional time productive way and give a multicast key era server which is normal in future extension by current creators. We supplant the Diffie Hellman key trade convention by another multicast key trade convention that can work with balanced and one to numerous usefulness. We likewise tend to execute a solid symmetric encryption for enhancing document security in the framework.