Secure publish and subscribe systems with efficient revocation

Belguith, S; Cui, S; Asghar, MR; Russello, G

Abstract

User revocation is one of the main security issues in publish
and subscribe (pub/sub) systems. Indeed, to ensure data confidentiality, the system should be able to remove malicious
subscribers without affecting the functionalities and decoupling of authorised subscribers and publishers. To revoke
a user, there are solutions, but existing schemes inevitably
introduce high computation and communication overheads,
which can ultimately affect the system capabilities.
In this paper, we propose a novel revocation technique for
pub/sub systems that can efficiently remove compromised
subscribers without requiring regeneration and redistribution
of new keys as well as re-encryption of existing data with
those keys. Our proposed solution is such that a subscriber’s
interest is not revealed to curious brokers and published data
can only be accessed by the authorised subscribers. Finally,
the proposed protocol is secure against the collusion attacks
between brokers and revoked subscribers.

Citation

Belguith, S., Cui, S., Asghar, M., & Russello, G. (2018, April). Secure publish and subscribe systems with efficient revocation. Presented at ACM/SIGAPP Symposium On Applied Computing, Pau, France

• Presentation Conference Type: Other
• Conference Name: ACM/SIGAPP Symposium On Applied Computing
• Conference Location: Pau, France
• Start Date: Apr 9, 2018
• End Date: Apr 13, 2018
• Online Publication Date: Apr 13, 2018
• Publication Date: Apr 13, 2018
• Deposit Date: May 20, 2019
• DOI: https://doi.org/10.1145/3167132.3167176
• Publisher URL: https://doi.org/10.1145/3167132.3167176
• Additional Information: Additional Information : Proceedings ISBN: 978-1-4503-5191-1; Event Type : Conference