Hybrid Secure Model for Securing Data in The Cloud Computing System
by Combining RSA, AES and CP-ABE
Zakria Mahrousa
Mahmoud Rahhal
Nairouz Alzin
Faculty of Electrical and Electronic Engineering || Aleppo University || Syria
DOI ” type=”big” color=”orange”] DOI[/button]
Tab title The cloud healthcare system represents an important application for cloud computing, as it uses the cloud for the operations of storing patient medical data and sharing it between health care service providers and patients, making the security and privacy of e-health system data the main concern of researchers. This paper presents an integrated secure model for the healthcare system in cloud computing that achieves the security and confidentiality of data transferred through cloud computing, by combining the two algorithms AES and RSA with the access control algorithm CP-ABE in order to use the advantages of each of them, where the encryption process is done by a proposed algorithm which is based on the RSA algorithm, the XOR parameter, and the AES algorithm; the secrecy of the AES algorithm has been increased by generating a dynamic key, and the confidentiality of this key has been secured with two encryption levels, the first level using the CP-ABE algorithm and the second level using the RSA algorithm. The proposed model is characterized by meeting the requirements of access control, authentication, and verification for both the transmitter and the receiver, and the results of the application of this model proved its ability to meet the security requirements of the health care system in cloud computing with the lowest possible implementation time, as the execution times were at the transmitter’s end (43.2, 43.83, 45.11, 48. 23, 50.77, 52.16, 57.95, 63.2, and 63.35)ms for variable file sizes (37, 50, 100, 150, 200, 256, 512, 1000, and 1024)KB, respectively. The results also showed its superiority in terms of security requirements in cloud computing and the necessary implementation times on studied reference models. Keywords: Authentication and Verification, Data Security, Data Privacy, Data Confidentiality, Hybrid Encryption, access control.
Tab title
The cloud healthcare system represents an important application for cloud computing, as it uses the cloud for the operations of storing patient medical data and sharing it between health care service providers and patients, making the security and privacy of e-health system data the main concern of researchers. This paper presents an integrated secure model for the healthcare system in cloud computing that achieves the security and confidentiality of data transferred through cloud computing, by combining the two algorithms AES and RSA with the access control algorithm CP-ABE in order to use the advantages of each of them, where the encryption process is done by a proposed algorithm which is based on the RSA algorithm, the XOR parameter, and the AES algorithm; the secrecy of the AES algorithm has been increased by generating a dynamic key, and the confidentiality of this key has been secured with two encryption levels, the first level using the CP-ABE algorithm and the second level using the RSA algorithm. The proposed model is characterized by meeting the requirements of access control, authentication, and verification for both the transmitter and the receiver, and the results of the application of this model proved its ability to meet the security requirements of the health care system in cloud computing with the lowest possible implementation time, as the execution times were at the transmitter’s end (43.2, 43.83, 45.11, 48. 23, 50.77, 52.16, 57.95, 63.2, and 63.35)ms for variable file sizes (37, 50, 100, 150, 200, 256, 512, 1000, and 1024)KB, respectively. The results also showed its superiority in terms of security requirements in cloud computing and the necessary implementation times on studied reference models. Keywords: Authentication and Verification, Data Security, Data Privacy, Data Confidentiality, Hybrid Encryption, access control.
نموذج هجين آمن لحماية البيانات في الحوسبة السحابية بدمج RSA وAES وCP-ABE
زكريا مهروسة
محمود رحال
نيروز الزين
كلية الهندسة الكهربائية والإلكترونية || جامعة حلب || سوريا
Tab title
يمثل نظام الرعاية الصحية السحابي تطبيق مهم للحوسبة السحابية، فهو يستخدم السحابة لعمليات تخزين البيانات الطبية للمريض ومشاركتها بين مقدمي خدمات الرعاية الصحية والمرضى مما يجعل أمن وخصوصية بيانات نظام الصحة الإلكتروني هو الشاغل الرئيسي للباحثين. يقدم هذا البحث نموذج آمن متكامل لنظام الرعاية الصحية في الحوسبة السحابية يحقق أمن وسرية البيانات المنقولة عبر الحوسبة السحابية، من خلال دمج خوارزميتي AES وRSA مع خوارزمية التحكم في الوصول CP-ABE بغية الاستفادة من مزايا كل منها، حيث تتم عملية التشفير عن طريق خوارزمية مقترحة تعتمد على خوارزمية RSA والمعامل XOR وخوارزمية AES، كما تم زيادة سرية خوارزمية AES عبر توليد مفتاح ديناميكي، وتأمين سرية هذا المفتاح بمستويي تشفير، المستوى الأول باستخدام خوارزمية CP-ABE والمستوى الثاني باستخدام خوارزمية RSA. يتميز النموذج المقترح بتلبية متطلبات التحكم بالوصول والتوثيق والتحقق لكل من المرسل والمستقبل، وأثبتت نتائج تطبيق هذا النموذج قدرته على تلبية متطلبات الأمن في نظام الرعاية الصحية في الحوسبة السحابية بأقل زمن تنفيذ ممكن، فقد كانت أزمنة التنفيذ في طرف المرسل ms (43.2 و43.83 و45.11 و48.23 و50.77 و52.16 و57.95 و63.2 و63.35) لأحجام ملفات متغايرة KB (37 و50 و100 و150 و200 و256 و512 و1000 و1024) على الترتيب. كما أظهرت النتائج تفوقه من ناحية متطلبات الأمن في الحوسبة السحابية وأزمنة التنفيذ اللازمة على نماذج مرجعية مدروسة. الكلمات المفتاحية: التشفير الهجين، التوثيق والتحقق، أمن البيانات، خصوصية البيانات، سرية البيانات، التحكم بالوصول.