{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:07:07Z","timestamp":1750223227128,"version":"3.37.3"},"reference-count":52,"publisher":"Oxford University Press (OUP)","issue":"8","license":[{"start":{"date-parts":[[2019,5,13]],"date-time":"2019-05-13T00:00:00Z","timestamp":1557705600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2017YFD0401002-3"],"award-info":[{"award-number":["2017YFD0401002-3"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Six Talent Peaks Project of Jiangsu Province, China","award":["2015-DZXX-020"],"award-info":[{"award-number":["2015-DZXX-020"]}]},{"name":"Special Scientific Research Fund of Food Public Welfare Profession of China","award":["201513004"],"award-info":[{"award-number":["201513004"]}]},{"name":"National Science and Technology Pillar Program of Jiangsu Province of China","award":["BE2016178","BE2015166"],"award-info":[{"award-number":["BE2016178","BE2015166"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,8,9]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>Information flow control (IFC) regulates where information is permitted to travel within information systems. To enforce IFC, access control encryption (ACE) was proposed to support both the no read-up rule and the no write-down rule. There are some problems in existing schemes. First, the communication cost is linear with the number of receivers. Second, senders are not authenticated, namely an unauthorized sender can send a message to a receiver. To reduce communication cost and implement sender authentication, we propose an attribute-based IFC (ABIFC) scheme by introducing attribute-based systems into IFC. Our ABIFC scheme captures the following features: (i) flexible IFC policies are defined over a universal set of descriptive attributes; (ii) both the no read-up rule and the no write-down rule are supported; (iii) the communication cost is linear with the number of required attributes, instead of receivers; (iv) receivers can outsource heavy computation to a server without compromising data confidentiality; (v) authorized senders can control release their attributes when sending messages to receivers. To the best of our knowledge, it is the first IFC scheme where flexible policies are defined over descriptive attributes and outsourced computation is supported.<\/jats:p>","DOI":"10.1093\/comjnl\/bxz018","type":"journal-article","created":{"date-parts":[[2019,5,3]],"date-time":"2019-05-03T11:09:05Z","timestamp":1556881745000},"page":"1214-1231","source":"Crossref","is-referenced-by-count":6,"title":["Attribute-Based Information Flow Control"],"prefix":"10.1093","volume":"62","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4993-9452","authenticated-orcid":false,"given":"Jinguang","family":"Han","sequence":"first","affiliation":[{"name":"Jiangsu Provincial Key Laboratory of E-Business, Nanjing University of Finance and Economics, Nanjing, Jiangsu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maoxuan","family":"Bei","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Nanjing University of Finance and Economics, Nanjing, Jiangsu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liqun","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Surrey Center for Cyber Security, University of Surrey, Guildford, Surrey, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Xiang","sequence":"additional","affiliation":[{"name":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, Victoria, VIC, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Cao","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Nanjing University of Finance and Economics, Nanjing, Jiangsu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fuchun","family":"Guo","sequence":"additional","affiliation":[{"name":"School of Computing and Information Technology, University of Wollongong, Wollongong, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weizhi","family":"Meng","sequence":"additional","affiliation":[{"name":"Department of Applied Mathematics and Computer Science, Technical University of Denmark, Copenhagen, Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2019,5,13]]},"reference":[{"key":"2020071623223963400_bxz018C1","doi-asserted-by":"crossref","first-page":"236","DOI":"10.1145\/360051.360056","article-title":"A lattice model of secure information flow","volume":"19","author":"Denning","year":"1976","journal-title":"Commun. ACM"},{"key":"2020071623223963400_bxz018C2","doi-asserted-by":"crossref","first-page":"504","DOI":"10.1145\/359636.359712","article-title":"Certification of programs for secure information flow","volume":"20","author":"Denning","year":"1977","journal-title":"Commun. ACM"},{"key":"2020071623223963400_bxz018C3","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/TNSM.2013.122313.130423","article-title":"Information flow control for secure cloud computing","volume":"11","author":"Bacon","year":"2014","journal-title":"IEEE Trans. Netwo. Serv. Manage."},{"year":"1973","author":"Bell","key":"2020071623223963400_bxz018C4"},{"year":"2005","author":"Sahai","key":"2020071623223963400_bxz018C5"},{"year":"2006","author":"Goyal","key":"2020071623223963400_bxz018C6"},{"year":"2007","author":"Bethencourt","key":"2020071623223963400_bxz018C7"},{"key":"2020071623223963400_bxz018C8","doi-asserted-by":"crossref","first-page":"665","DOI":"10.1109\/TIFS.2014.2382297","article-title":"Improving privacy and security in decentralized ciphertext-policy attribute-based encryption","volume":"10","author":"Han","year":"2015","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2020071623223963400_bxz018C9","doi-asserted-by":"crossref","first-page":"2150","DOI":"10.1109\/TPDS.2012.50","article-title":"Privacy-preserving decentralized key-policy attribute-based encryption","volume":"23","author":"Han","year":"2012","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"year":"2016","author":"Damg\u00e5rd","key":"2020071623223963400_bxz018C10"},{"year":"2017","author":"Badertscher","key":"2020071623223963400_bxz018C11"},{"year":"2017","author":"Fuchsbauer","key":"2020071623223963400_bxz018C12"},{"year":"2017","author":"Tan","key":"2020071623223963400_bxz018C13"},{"year":"2017","author":"Kim","key":"2020071623223963400_bxz018C14"},{"key":"2020071623223963400_bxz018C15","doi-asserted-by":"crossref","first-page":"3430","DOI":"10.1109\/TC.2015.2401033","article-title":"Efficient attribute-based comparable data access control","volume":"64","author":"Wang","year":"2015","journal-title":"IEEE Trans. Comput."},{"year":"2013","author":"Hohenberger","key":"2020071623223963400_bxz018C16"},{"year":"2007","author":"Ostrovsky","key":"2020071623223963400_bxz018C17"},{"year":"2011","author":"Lewko","key":"2020071623223963400_bxz018C18"},{"year":"2011","author":"Waters","key":"2020071623223963400_bxz018C19"},{"year":"2011","author":"Green","key":"2020071623223963400_bxz018C20"},{"key":"2020071623223963400_bxz018C21","doi-asserted-by":"crossref","first-page":"1343","DOI":"10.1109\/TIFS.2013.2271848","article-title":"Attribute-based encryption with verifiable outsourced decryption","volume":"8","author":"Lai","year":"2013","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2020071623223963400_bxz018C22","doi-asserted-by":"crossref","first-page":"2201","DOI":"10.1109\/TPDS.2013.271","article-title":"Securely outsourcing attribute-based encryption with checkability","volume":"25","author":"Li","year":"2014","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"2020071623223963400_bxz018C23","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1109\/TPDS.2012.97","article-title":"Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption","volume":"1","author":"Li","year":"2013","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"2020071623223963400_bxz018C24","doi-asserted-by":"crossref","first-page":"533","DOI":"10.1109\/TDSC.2015.2423669","article-title":"Generic and efficient constructions of attribute-based encryption with verifiable outsourced decryption","volume":"13","author":"Mao","year":"2016","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"2020071623223963400_bxz018C25","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1109\/TIFS.2017.2738601","article-title":"Auditable \u03c3-time outsourced attribute-based encryption for access control in cloud computing","volume":"13","author":"Ning","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2020071623223963400_bxz018C26","doi-asserted-by":"crossref","first-page":"1661","DOI":"10.1109\/TIFS.2016.2549004","article-title":"Attribute-based data sharing scheme revisited in cloud computing","volume":"11","author":"Wang","year":"2016","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2020071623223963400_bxz018C27","doi-asserted-by":"crossref","first-page":"715","DOI":"10.1109\/TSC.2016.2542813","article-title":"KSF-OABE: outsourced attribute-based encryption with keyword search function for cloud storage","volume":"10","author":"Li","year":"2017","journal-title":"IEEE Trans. Serv. Comput."},{"key":"2020071623223963400_bxz018C28","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1002\/dac.2942","article-title":"Searchable ciphertext-policy attribute-based encryption with revocation in cloud storage","volume":"30","author":"Li","year":"2017","journal-title":"Int. J. Commun. Syst."},{"key":"2020071623223963400_bxz018C29","doi-asserted-by":"crossref","first-page":"5163","DOI":"10.1007\/s00500-017-2701-9","article-title":"Expressive attribute-based keyword search with constant-size ciphertext","volume":"22","author":"Han","year":"2018","journal-title":"Soft Comput."},{"key":"2020071623223963400_bxz018C30","doi-asserted-by":"crossref","first-page":"104","DOI":"10.1016\/j.future.2014.10.010","article-title":"A lightweight attribute-based encryption scheme for the internet of thing","volume":"49","author":"Yao","year":"2015","journal-title":"Future Generation Comput. Syst."},{"key":"2020071623223963400_bxz018C31","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1109\/MM.2016.101","article-title":"On the feasibility of attribute-based encryption on internet of things devices","volume":"36","author":"Ambrosin","year":"2016","journal-title":"IEEE Micro"},{"year":"2007","author":"Chase","key":"2020071623223963400_bxz018C32"},{"year":"2009","author":"Chase","key":"2020071623223963400_bxz018C33"},{"key":"2020071623223963400_bxz018C34","doi-asserted-by":"crossref","first-page":"1210","DOI":"10.1093\/comjnl\/bxx017","article-title":"Securing outsourced data in the multi-authority cloud with fine-grained access control and efficient attribute revocation","volume":"60","author":"Zhou","year":"2017","journal-title":"Comput. J."},{"key":"2020071623223963400_bxz018C35","doi-asserted-by":"crossref","first-page":"1220","DOI":"10.1093\/comjnl\/bxw007","article-title":"Revocable and decentralized attribute-based encryption","volume":"59","author":"Cui","year":"2016","journal-title":"Comput. J."},{"year":"2018","author":"Microsoft","key":"2020071623223963400_bxz018C36"},{"year":"2006","author":"Au","key":"2020071623223963400_bxz018C37"},{"year":"2013","author":"Garg","key":"2020071623223963400_bxz018C38"},{"year":"2014","author":"Hanser","key":"2020071623223963400_bxz018C39"},{"key":"2020071623223963400_bxz018C40","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1109\/TIT.1985.1057074","article-title":"A public-key cryptosystem and a signature scheme based on discrete logarithms","volume":"31","author":"ElGamal","year":"1985","journal-title":"IEEE Trans. Inf. Theory"},{"year":"2003","author":"Canetti","key":"2020071623223963400_bxz018C41"},{"key":"2020071623223963400_bxz018C42","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1007\/s00145-007-9005-7","article-title":"Short signatures without random oracles and the SDH assumption in bilinear groups","volume":"21","author":"Boneh","year":"2008","journal-title":"J. Cryptol."},{"year":"1997","author":"Camenisch","key":"2020071623223963400_bxz018C43"},{"year":"1986","author":"Fiat","key":"2020071623223963400_bxz018C44"},{"key":"2020071623223963400_bxz018C45","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/BF00196725","article-title":"Efficient signature generation by smart cards","volume":"4","author":"Schnorr","year":"1991","journal-title":"J. Cryptol."},{"year":"2016","author":"Camenisch","key":"2020071623223963400_bxz018C46"},{"key":"2020071623223963400_bxz018C47","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1109\/TPDS.2012.97","article-title":"Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption","volume":"24","author":"Li","year":"2013","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"year":"2014","author":"IBM","key":"2020071623223963400_bxz018C48"},{"year":"2015","author":"Pasquier","key":"2020071623223963400_bxz018C49"},{"year":"2018","author":"IBM","key":"2020071623223963400_bxz018C50"},{"year":"2012","author":"Vasudevan","key":"2020071623223963400_bxz018C51"},{"year":"2006","author":"Lynn","key":"2020071623223963400_bxz018C52"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/comjnl\/article-pdf\/62\/8\/1214\/29162314\/bxz018.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/academic.oup.com\/comjnl\/article-pdf\/62\/8\/1214\/29162314\/bxz018.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,17]],"date-time":"2020-07-17T12:12:40Z","timestamp":1594987960000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/62\/8\/1214\/5488733"}},"subtitle":[],"editor":[{"given":"Albert","family":"Levi","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2019,5,13]]},"references-count":52,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2019,5,13]]},"published-print":{"date-parts":[[2019,8,9]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxz018","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"type":"print","value":"0010-4620"},{"type":"electronic","value":"1460-2067"}],"subject":[],"published-other":{"date-parts":[[2019,8]]},"published":{"date-parts":[[2019,5,13]]}}}