On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets

Mahdi Mahdavi Oliaiy; Mahshid Delavar; Mohammad Hassan Ameri; Javad Mohajeri; Mohammad Reza Aref

doi:10.1109/ISCISC.2017.8488358

On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets

Mahdi Mahdavi Oliaiy, Mahshid Delavar, Mohammad Hassan Ameri, Javad Mohajeri, Mohammad Reza Aref

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

In recent years, determining the common information privately and efficiently between two mutually mistrusting parties have become an important issue in social networks. Many Private set intersection (PSI) protocols have been introduced to address this issue. By applying these protocols, two parties can compute the intersection between their sets without disclosing any information about components that are not in the intersection. Due to the broad range of computational resources that the cloud can provide for its users, determining the set intersection by cloud may decrease the computational cost of the users. The proposed protocol by Abadi et al. is one of the introduced protocols in this context. In this paper, we show that their protocol is vulnerable against man in the middle attack and the collusion between the cloud and one of the communicating parties. Also, a solution will be proposed to secure the protocol against mentioned attacks.

Original language	English
Title of host publication	The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC)
Place of Publication	Shiraz, Iran, Iran
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Number of pages	5
ISBN (Electronic)	978-1-5386-6560-2
ISBN (Print)	978-1-5386-6561-9
DOIs	https://doi.org/10.1109/ISCISC.2017.8488358
Publication status	Published - 11 Oct 2018
Event	14th International ISC Conference on Information Security and Cryptology - Shiraz University, Shiraz, Iran, Islamic Republic of Duration: 6 Sep 2017 → 7 Sep 2017 http://iscisc2017.shirazu.ac.ir/en/index

Publication series

Name
Publisher	IEEE
ISSN (Print)	2475-2363
ISSN (Electronic)	2475-2371

Conference

Conference	14th International ISC Conference on Information Security and Cryptology
Abbreviated title	ISCISC 2017
Country/Territory	Iran, Islamic Republic of
City	Shiraz
Period	6/09/17 → 7/09/17
Internet address	http://iscisc2017.shirazu.ac.ir/en/index

Access to Document

10.1109/ISCISC.2017.8488358

https://ieeexplore.ieee.org/document/8488358

Cite this

Mahdavi Oliaiy, M., Delavar, M., Hassan Ameri, M., Mohajeri, J., & Reza Aref, M. (2018). On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets. In The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC) Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/ISCISC.2017.8488358

@inproceedings{84bda863d50e486ebb8865e0c6cfe464,

title = "On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets",

abstract = "In recent years, determining the common information privately and efficiently between two mutually mistrusting parties have become an important issue in social networks. Many Private set intersection (PSI) protocols have been introduced to address this issue. By applying these protocols, two parties can compute the intersection between their sets without disclosing any information about components that are not in the intersection. Due to the broad range of computational resources that the cloud can provide for its users, determining the set intersection by cloud may decrease the computational cost of the users. The proposed protocol by Abadi et al. is one of the introduced protocols in this context. In this paper, we show that their protocol is vulnerable against man in the middle attack and the collusion between the cloud and one of the communicating parties. Also, a solution will be proposed to secure the protocol against mentioned attacks.",

author = "{Mahdavi Oliaiy}, Mahdi and Mahshid Delavar and {Hassan Ameri}, Mohammad and Javad Mohajeri and {Reza Aref}, Mohammad",

year = "2018",

month = oct,

day = "11",

doi = "10.1109/ISCISC.2017.8488358",

language = "English",

isbn = "978-1-5386-6561-9",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

booktitle = "The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC)",

address = "United States",

note = "14th International ISC Conference on Information Security and Cryptology , ISCISC 2017 ; Conference date: 06-09-2017 Through 07-09-2017",

url = "http://iscisc2017.shirazu.ac.ir/en/index",

}

Mahdavi Oliaiy, M, Delavar, M, Hassan Ameri, M, Mohajeri, J & Reza Aref, M 2018, On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets. in The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC). Institute of Electrical and Electronics Engineers (IEEE), Shiraz, Iran, Iran, 14th International ISC Conference on Information Security and Cryptology , Shiraz, Iran, Islamic Republic of, 6/09/17. https://doi.org/10.1109/ISCISC.2017.8488358

On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets. / Mahdavi Oliaiy, Mahdi; Delavar, Mahshid; Hassan Ameri, Mohammad et al.

The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC). Shiraz, Iran, Iran : Institute of Electrical and Electronics Engineers (IEEE), 2018.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets

AU - Mahdavi Oliaiy, Mahdi

AU - Delavar, Mahshid

AU - Hassan Ameri, Mohammad

AU - Mohajeri, Javad

AU - Reza Aref, Mohammad

PY - 2018/10/11

Y1 - 2018/10/11

N2 - In recent years, determining the common information privately and efficiently between two mutually mistrusting parties have become an important issue in social networks. Many Private set intersection (PSI) protocols have been introduced to address this issue. By applying these protocols, two parties can compute the intersection between their sets without disclosing any information about components that are not in the intersection. Due to the broad range of computational resources that the cloud can provide for its users, determining the set intersection by cloud may decrease the computational cost of the users. The proposed protocol by Abadi et al. is one of the introduced protocols in this context. In this paper, we show that their protocol is vulnerable against man in the middle attack and the collusion between the cloud and one of the communicating parties. Also, a solution will be proposed to secure the protocol against mentioned attacks.

AB - In recent years, determining the common information privately and efficiently between two mutually mistrusting parties have become an important issue in social networks. Many Private set intersection (PSI) protocols have been introduced to address this issue. By applying these protocols, two parties can compute the intersection between their sets without disclosing any information about components that are not in the intersection. Due to the broad range of computational resources that the cloud can provide for its users, determining the set intersection by cloud may decrease the computational cost of the users. The proposed protocol by Abadi et al. is one of the introduced protocols in this context. In this paper, we show that their protocol is vulnerable against man in the middle attack and the collusion between the cloud and one of the communicating parties. Also, a solution will be proposed to secure the protocol against mentioned attacks.

U2 - 10.1109/ISCISC.2017.8488358

DO - 10.1109/ISCISC.2017.8488358

M3 - Conference contribution

SN - 978-1-5386-6561-9

BT - The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC)

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Shiraz, Iran, Iran

T2 - 14th International ISC Conference on Information Security and Cryptology

Y2 - 6 September 2017 through 7 September 2017

ER -

Mahdavi Oliaiy M, Delavar M, Hassan Ameri M, Mohajeri J, Reza Aref M. On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets. In The 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology (ISCISC). Shiraz, Iran, Iran: Institute of Electrical and Electronics Engineers (IEEE). 2018 doi: 10.1109/ISCISC.2017.8488358

On the Security of O-PSI a Delegated Private Set Intersection on Outsourced Datasets

Abstract

Publication series

Conference

Access to Document

Fingerprint

Cite this