Affiliations: [a] Motorola Labs, Schaumburg, IL, USA. E-mail: Matthew.Pirretti@motorola.com | [b] College of Computing, Georgia Institute of Technology, Atlanta, GA, USA. E-mail: traynor@cc.gatech.edu | [c] SIIS Laboratory, CSE, Pennsylvania State University, University Park, PA, USA. E-mail: mcdaniel@cse.psu.edu | [d] The University of Texas at Austin, Austin, TX, USA. E-mail: bwaters@cs.utexas.edu
Abstract: Attributes define, classify, or annotate the datum to which they are assigned. However, traditional attribute architectures and cryptosystems are ill-equipped to provide security in the face of diverse access requirements and environments. In this paper, we introduce a novel secure information management architecture based on emerging attribute-based encryption (ABE) primitives. A policy system that meets the needs of complex policies is defined and illustrated. Based on the needs of those policies, we propose cryptographic optimizations that vastly improve enforcement efficiency. We further explore the use of such policies in two proposed applications: a HIPAA compliant distributed file system and a social network. A performance analysis and characterization of ABE primitives demonstrates the ability to reduce cryptographic costs by as much as 98% over previously proposed constructions. Through this, we demonstrate that our attribute system is an efficient solution for securely managing information in large, loosely-coupled, distributed systems.
