Syh-yuan Tan

Followers

Following

Co-authors

Public Views

John F Dooley

Knox College

Andrej Dujella

University of Zagreb

Roshan Chitrakar

Nepal College of Information Technology

Utku Köse

Suleyman Demirel University

Viacheslav Kuleshov

Stockholm University

Paolo Carta

University of Trento

Ji-Jian Chin

University Of Plymouth

Mahmoud Maqableh

The University Of Jordan

Jai Maurya

Maharshi Dayanand University

Prof. dr Vladimir M . Cvetković

University of Belgrade

Interests

Uploads

Papers by Syh-yuan Tan

Cryptanalysis of a CP-ABE scheme with policy in normal forms

Information Processing Letters, 2016

Applications of undeniable signature schemes

2015 IEEE International Conference on Signal and Image Processing Applications (ICSIPA), 2015

On the Security of Two Pairing-Based Signature Schemes

2015 5th International Conference on IT Convergence and Security (ICITCS), 2015

Chapter Two Minutiae-Based Fingerprint Representations: Review, Privacy, Security and Cryptographic Realization

On the security of a lightweight authentication and encryption scheme for mobile ad hoc network

Security and Communication Networks, 2015

ABSTRACT In 2011, Eissa, Razak and Ngadi proposed a lightweight authentication and encryption sch... more ABSTRACT In 2011, Eissa, Razak and Ngadi proposed a lightweight authentication and encryption scheme to enhance the performance for mobile ad hoc network in Wireless Network, Vol. 17, No. 4, 2011. The main building block of such scheme is an identity-based encryption scheme. The scheme was proven secure in the random oracle model assuming the computational Diffie–Hellman assumption is hard. In this paper, we show that the proposed scheme is not even secure against chosen plaintext attack, which is the lowest acceptable level of security. In addition, we demonstrate the RSA parameter suggested by Eissa et al. to yield a better network performance is not appropriate under a wrong security assumption that each mobile node is totally trusted. Such short RSA parameter leads to a key recovery attack. Copyright © 2015 John Wiley &amp; Sons, Ltd.

Email Encryption System Using Certificateless Public Key Encryption Scheme

Lecture Notes in Electrical Engineering, 2012

Efficient encryption with keyword search in mobile networks

Security and Communication Networks, 2012

On these days, users tend to access to online content via mobile devices, for example, e-mails. B... more On these days, users tend to access to online content via mobile devices, for example, e-mails. Because these devices have constrained resources, users may wish to instruct e-mail gateways to search through new e-mails and only download those corresponding to particular keywords, such as "urgent." Yet, this searching should not compromise the user's privacy. A public key encryption with keyword search (PEKS) scheme achieves both these requirements. Most PEKS schemes are constructed on the basis of bilinear pairings. Recently, Khader proposed the first PEKS scheme that does not require bilinear pairings and is provably indistinguishable chosen-keyword attack (IND-CKA) secure in the standard model. Such a scheme is more efficient than pairing-based ones. In this paper, we show a drawback of Khader's scheme in that it depends on an unnecessary security assumption: Its IND-CKA security requires its underlying identity-based encryption building block to be indistinguishable chosen-ciphertext attack secure. We construct a more efficient PEKS scheme that achieves the same level of PEKS security as Khader's but that only requires the underlying identity-based encryption to be indistinguishable chosen-plaintext attack secure. We give a direct proof that the proposed scheme is IND-CKA secure. Our scheme outperforms other recent PEKS schemes in literature.

Download

A Study of Attribute-Based Encryption for Body Sensor Networks

Communications in Computer and Information Science, 2011

An implementation of enhanced public key infrastructure

Multimedia Tools and Applications, 2014

ABSTRACT In this paper, we present the implementation of an enhanced public key infrastructure (P... more ABSTRACT In this paper, we present the implementation of an enhanced public key infrastructure (PKI) which supports not only conventional public key cryptography (PKC) but also identity-based cryptography (IBC). In addition, we discuss the possible way of placing together IBC and PKI as well as solving the problems of user secret key revocation of PKI and IBC. As a proof of concept, an IBC framework is incorporated into Enterprise Java Bean Certified Authority (EJBCA) and the performance is reported.

An Enhanced Public Key Infrastructure

2013 International Conference on IT Convergence and Security (ICITCS), 2013

ABSTRACT In this paper, we present an enhanced public key infrastructure (PKI) which supports ide... more ABSTRACT In this paper, we present an enhanced public key infrastructure (PKI) which supports identity-based cryptography (IBC). In precise, we show how to integrate IBC into PKI as well as solving the problems of user secret key revocation and the cross validation of PKI and IBC. As a proof of concept, an IBC framework is incorporated into EJBCA and the performance is reported.

A Client-Server Prototype of a Symmetric Key Searchable Encryption Scheme Using Open-Source Applications

by Ji-Jian Chin and Syh-yuan Tan

2015 5th International Conference on IT Convergence and Security (ICITCS), 2015

Cryptanalysis of Two Identification Schemes

by Ji-Jian Chin and Syh-yuan Tan

2015 2nd International Conference on Information Science and Security (ICISS), 2015

Implementation of searchable symmetric encryption for privacy-preserving keyword search on cloud storage

by Ji-Jian Chin and Syh-yuan Tan

Human-centric Computing and Information Sciences, 2015

ABSTRACT Ensuring the cloud data security is a major concern for corporate cloud subscribers and ... more ABSTRACT Ensuring the cloud data security is a major concern for corporate cloud subscribers and in some cases for the private cloud users. Confidentiality of the stored data can be managed by encrypting the data at the client side before outsourcing it to the remote cloud storage server. However, once the data is encrypted, it will limit server’s capability for keyword search since the data is encrypted and server simply cannot make a plaintext keyword search on encrypted data. But again we need the keyword search functionality for efficient retrieval of data. To maintain user’s data confidentiality, the keyword search functionality should be able to perform over encrypted cloud data and additionally it should not leak any information about the searched keyword or the retrieved document. This is known as privacy preserving keyword search. This paper aims to study privacy preserving keyword search over encrypted cloud data. Also, we present our implementation of a privacy preserving data storage and retrieval system in cloud computing. For our implementation, we have chosen one of the symmetric key primitives due to its efficiency in mobile environments. The implemented scheme enables a user to store data securely in the cloud by encrypting it before outsourcing and also provides user capability to search over the encrypted data without revealing any information about the data or the query.

Twin-Beth: Security under active and concurrent attacks for the beth identity-based identification scheme

by Ji-Jian Chin and Syh-yuan Tan

Cryptography and Communications, 2015

Argument on biometrics identity-based encryption schemes

by ZHE JIN, Syh-yuan Tan, and Andrew Beng Jin Teoh

Recently, a few biometric identity-based encryption (BIO-IBE) schemes have been proposed. BIO-IBE... more Recently, a few biometric identity-based encryption (BIO-IBE) schemes have been proposed. BIO-IBE leverages both fuzzy extractor and Lagrange polynomial to extract biometric feature as a user public key and as a preventive measure of collusion attack, respectively. In this paper, we reveal that BIO-IBE is not realistic whereby a query of fresh biometrics is needed for each encryption process. Moreover, the use of both fuzzy extractor and Lagrange polynomial in BIO-IBE simultaneously is a redundancy; it confers no advantage, but simply computational overhead. Therefore, we amend the progression of the BIO-IBE scheme by eliminating either Lagrange polynomial or fuzzy extractor to alleviate computational complexity. Subsequently, we demonstrate that the amendment does not compromise the security of the BIO-IBE scheme. Such amendments can be applied to other BIO-IBE schemes as well.

Download

On the realization of fuzzy identity-based identification scheme using fingerprint biometrics

by ZHE JIN and Syh-yuan Tan

Fuzzy identity-based identification (FIBI) scheme is a recently proposed cryptographic identifica... more Fuzzy identity-based identification (FIBI) scheme is a recently proposed cryptographic identification protocol. The scheme utilizes user biometric trait as public keys. The authentication is deemed success in the presence of the genuine query biometric together with the valid private key. Because of the fuzziness nature of biometrics, FIBI does not correct the errors on the query biometric with respect to the public key; instead, it tolerates the errors using Lagrange polynomial interpolation. Therefore, FIBI requires the biometric trait to be represented in a discrete (binary or integer) array that is fixed in length. In this paper, we report the first realization of FIBI scheme by means of fingerprint biometrics using minutia representation where our technique integrates the security features of both biometric and cryptography effectively. The simulation shows that the entire protocol can be completed within 1 s where false acceptance rate (FAR) = 0% and false reject rate (FRR) = 0.25% in FVC2002 DB1, and FAR = 0% and FRR = 0.125% in FVC2002 DB2. Our integration technique may also be applied on other fuzzy identity-based cryptosystems.

Download

Security and efficiency analysis of a certificateless encryption scheme based on chebyshev polynomial

by Ji-Jian Chin, Syh-yuan Tan, and M. Mohamad

International Conference on Frontiers of Communications, Networks and Applications (ICFCNA 2014 - Malaysia), 2014

On the Security of Two Fuzzy Identity-Based Signature Schemes

... and Technology, Multimedia University Melaka, Malaysia 2 [email protected] & Faculty of E... more

Twin-Schnorr: A Security Upgrade for the Schnorr Identity-Based Identification Scheme

by Ji-Jian Chin and Syh-yuan Tan

The Scientific World Journal, 2015

Most identity-based identification (IBI) schemes proposed in recent literature are built using pa... more Most identity-based identification (IBI) schemes proposed in recent literature are built using pairing operations. This decreases efficiency due to the high operation costs of pairings. Furthermore, most of these IBI schemes are proven to be secure against impersonation under active and concurrent attacks using interactive assumptions such as the one-more RSA inversion assumption or the one-more discrete logarithm assumption, translating to weaker security guarantees due to the interactive nature of these assumptions. The Schnorr-IBI scheme was first proposed through the Kurosawa-Heng transformation from the Schnorr signature. It remains one of the fastest yet most secure IBI schemes under impersonation against passive attacks due to its pairing-free design. However, when required to be secure against impersonators under active and concurrent attacks, it deteriorates greatly in terms of efficiency due to the protocol having to be repeated multiple times. In this paper, we upgrade the Schnorr-IBI scheme to be secure against impersonation under active and concurrent attacks using only the classical discrete logarithm assumption. This translates to a higher degree of security guarantee with only some minor increments in operational costs. Furthermore, because the scheme operates without pairings, it still retains its efficiency and superiority when compared to other pairing-based IBI schemes.

Download

Efficient and Provable Secure Pairing-Free Security-Mediated Identity-Based Identification Schemes

by Ji-Jian Chin and Syh-yuan Tan

The Scientific World Journal, 2014

Security-mediated cryptography was first introduced by Boneh et al. in 2001. The main motivation ... more Security-mediated cryptography was first introduced by Boneh et al. in 2001. The main motivation behind security-mediated cryptography was the capability to allow instant revocation of a user&amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;amp;#39;s secret key by necessitating the cooperation of a security mediator in any given transaction. Subsequently in 2003, Boneh et al. showed how to convert a RSA-based security-mediated encryption scheme from a traditional public key setting to an identity-based one, where certificates would no longer be required. Following these two pioneering papers, other cryptographic primitives that utilize a security-mediated approach began to surface. However, the security-mediated identity-based identification scheme (SM-IBI) was not introduced until Chin et al. in 2013 with a scheme built on bilinear pairings. In this paper, we improve on the efficiency results for SM-IBI schemes by proposing two schemes that are pairing-free and are based on well-studied complexity assumptions: the RSA and discrete logarithm assumptions.

Cryptanalysis of a CP-ABE scheme with policy in normal forms

Information Processing Letters, 2016

Applications of undeniable signature schemes

2015 IEEE International Conference on Signal and Image Processing Applications (ICSIPA), 2015

On the Security of Two Pairing-Based Signature Schemes

2015 5th International Conference on IT Convergence and Security (ICITCS), 2015

Chapter Two Minutiae-Based Fingerprint Representations: Review, Privacy, Security and Cryptographic Realization

On the security of a lightweight authentication and encryption scheme for mobile ad hoc network

Security and Communication Networks, 2015

Email Encryption System Using Certificateless Public Key Encryption Scheme

Lecture Notes in Electrical Engineering, 2012

Efficient encryption with keyword search in mobile networks

Security and Communication Networks, 2012

Download

A Study of Attribute-Based Encryption for Body Sensor Networks

Communications in Computer and Information Science, 2011

An implementation of enhanced public key infrastructure

Multimedia Tools and Applications, 2014

An Enhanced Public Key Infrastructure

2013 International Conference on IT Convergence and Security (ICITCS), 2013

A Client-Server Prototype of a Symmetric Key Searchable Encryption Scheme Using Open-Source Applications

by Ji-Jian Chin and Syh-yuan Tan

2015 5th International Conference on IT Convergence and Security (ICITCS), 2015

Cryptanalysis of Two Identification Schemes

by Ji-Jian Chin and Syh-yuan Tan

2015 2nd International Conference on Information Science and Security (ICISS), 2015

Implementation of searchable symmetric encryption for privacy-preserving keyword search on cloud storage

by Ji-Jian Chin and Syh-yuan Tan

Human-centric Computing and Information Sciences, 2015

Twin-Beth: Security under active and concurrent attacks for the beth identity-based identification scheme

by Ji-Jian Chin and Syh-yuan Tan

Cryptography and Communications, 2015

Argument on biometrics identity-based encryption schemes

by ZHE JIN, Syh-yuan Tan, and Andrew Beng Jin Teoh

Download

On the realization of fuzzy identity-based identification scheme using fingerprint biometrics

by ZHE JIN and Syh-yuan Tan

Download

Security and efficiency analysis of a certificateless encryption scheme based on chebyshev polynomial

by Ji-Jian Chin, Syh-yuan Tan, and M. Mohamad

International Conference on Frontiers of Communications, Networks and Applications (ICFCNA 2014 - Malaysia), 2014

On the Security of Two Fuzzy Identity-Based Signature Schemes

... and Technology, Multimedia University Melaka, Malaysia 2 [email protected] & Faculty of E... more

Twin-Schnorr: A Security Upgrade for the Schnorr Identity-Based Identification Scheme

by Ji-Jian Chin and Syh-yuan Tan

The Scientific World Journal, 2015

Download

Efficient and Provable Secure Pairing-Free Security-Mediated Identity-Based Identification Schemes

by Ji-Jian Chin and Syh-yuan Tan

The Scientific World Journal, 2014

Syh-yuan Tan

Related Authors

Uploads

Papers by Syh-yuan Tan

Log In