PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control

Tao Li, Rui Zhang, Yanchao Zhang

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)

Abstract

With the fast development of mobile Internet, ecommerce has been widely applied to the living of the masses. Because of the strong dependence of e-commerce, logistics industry has attracted much attention. However, when users get convenient service from the logistics industry, their privacy is compromised. Addresses, phone numbers and other private information on the parcel are accessible to anyone. Moreover, because users' logistics data is stored in plaintext in the companies' servers, it is vulnerable to the peep from staffs in the company and even the Hackers. This paper presents the first logistics system, PriExpress, which protects the users' privacy and ensures the efficient delivery of the parcel at the same time. To address the above problem, we improved attribute based encryption with a hidden access tree. Based on users' attributes, we enforce fine-grained access control on the logistic data. Our security and performance analysis shows that PriExpress is both secure and efficient.

Original languageEnglish (US)
Title of host publication2016 IEEE Conference on Communications and Network Security, CNS 2016
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages333-341
Number of pages9
ISBN (Electronic)9781509030651
DOIs
StatePublished - Feb 21 2017
Event2016 IEEE Conference on Communications and Network Security, CNS 2016 - Philadelphia, United States
Duration: Oct 17 2016Oct 19 2016

Other

Other2016 IEEE Conference on Communications and Network Security, CNS 2016
CountryUnited States
CityPhiladelphia
Period10/17/1610/19/16

Fingerprint

Access control
Logistics
Industry
Cryptography
Servers
Internet

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Safety, Risk, Reliability and Quality

Cite this

Li, T., Zhang, R., & Zhang, Y. (2017). PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control. In 2016 IEEE Conference on Communications and Network Security, CNS 2016 (pp. 333-341). [7860501] Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CNS.2016.7860501

PriExpress : Privacy-preserving express delivery with fine-grained attribute-based access control. / Li, Tao; Zhang, Rui; Zhang, Yanchao.

2016 IEEE Conference on Communications and Network Security, CNS 2016. Institute of Electrical and Electronics Engineers Inc., 2017. p. 333-341 7860501.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Li, T, Zhang, R & Zhang, Y 2017, PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control. in 2016 IEEE Conference on Communications and Network Security, CNS 2016., 7860501, Institute of Electrical and Electronics Engineers Inc., pp. 333-341, 2016 IEEE Conference on Communications and Network Security, CNS 2016, Philadelphia, United States, 10/17/16. https://doi.org/10.1109/CNS.2016.7860501
Li T, Zhang R, Zhang Y. PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control. In 2016 IEEE Conference on Communications and Network Security, CNS 2016. Institute of Electrical and Electronics Engineers Inc. 2017. p. 333-341. 7860501 https://doi.org/10.1109/CNS.2016.7860501
Li, Tao ; Zhang, Rui ; Zhang, Yanchao. / PriExpress : Privacy-preserving express delivery with fine-grained attribute-based access control. 2016 IEEE Conference on Communications and Network Security, CNS 2016. Institute of Electrical and Electronics Engineers Inc., 2017. pp. 333-341
@inproceedings{6df8bd05b0be436fa6258614a43d76b7,
title = "PriExpress: Privacy-preserving express delivery with fine-grained attribute-based access control",
abstract = "With the fast development of mobile Internet, ecommerce has been widely applied to the living of the masses. Because of the strong dependence of e-commerce, logistics industry has attracted much attention. However, when users get convenient service from the logistics industry, their privacy is compromised. Addresses, phone numbers and other private information on the parcel are accessible to anyone. Moreover, because users' logistics data is stored in plaintext in the companies' servers, it is vulnerable to the peep from staffs in the company and even the Hackers. This paper presents the first logistics system, PriExpress, which protects the users' privacy and ensures the efficient delivery of the parcel at the same time. To address the above problem, we improved attribute based encryption with a hidden access tree. Based on users' attributes, we enforce fine-grained access control on the logistic data. Our security and performance analysis shows that PriExpress is both secure and efficient.",
author = "Tao Li and Rui Zhang and Yanchao Zhang",
year = "2017",
month = "2",
day = "21",
doi = "10.1109/CNS.2016.7860501",
language = "English (US)",
pages = "333--341",
booktitle = "2016 IEEE Conference on Communications and Network Security, CNS 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
address = "United States",

}

TY - GEN

T1 - PriExpress

T2 - Privacy-preserving express delivery with fine-grained attribute-based access control

AU - Li, Tao

AU - Zhang, Rui

AU - Zhang, Yanchao

PY - 2017/2/21

Y1 - 2017/2/21

N2 - With the fast development of mobile Internet, ecommerce has been widely applied to the living of the masses. Because of the strong dependence of e-commerce, logistics industry has attracted much attention. However, when users get convenient service from the logistics industry, their privacy is compromised. Addresses, phone numbers and other private information on the parcel are accessible to anyone. Moreover, because users' logistics data is stored in plaintext in the companies' servers, it is vulnerable to the peep from staffs in the company and even the Hackers. This paper presents the first logistics system, PriExpress, which protects the users' privacy and ensures the efficient delivery of the parcel at the same time. To address the above problem, we improved attribute based encryption with a hidden access tree. Based on users' attributes, we enforce fine-grained access control on the logistic data. Our security and performance analysis shows that PriExpress is both secure and efficient.

AB - With the fast development of mobile Internet, ecommerce has been widely applied to the living of the masses. Because of the strong dependence of e-commerce, logistics industry has attracted much attention. However, when users get convenient service from the logistics industry, their privacy is compromised. Addresses, phone numbers and other private information on the parcel are accessible to anyone. Moreover, because users' logistics data is stored in plaintext in the companies' servers, it is vulnerable to the peep from staffs in the company and even the Hackers. This paper presents the first logistics system, PriExpress, which protects the users' privacy and ensures the efficient delivery of the parcel at the same time. To address the above problem, we improved attribute based encryption with a hidden access tree. Based on users' attributes, we enforce fine-grained access control on the logistic data. Our security and performance analysis shows that PriExpress is both secure and efficient.

UR - http://www.scopus.com/inward/record.url?scp=85016070827&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85016070827&partnerID=8YFLogxK

U2 - 10.1109/CNS.2016.7860501

DO - 10.1109/CNS.2016.7860501

M3 - Conference contribution

SP - 333

EP - 341

BT - 2016 IEEE Conference on Communications and Network Security, CNS 2016

PB - Institute of Electrical and Electronics Engineers Inc.

ER -