%0 Conference Proceedings %T Mutually Private Location Proximity Detection with Access Control %+ Emory University [Atlanta, GA] %+ University of Arizona %A Solomon, Michael, G. %A Sunderam, Vaidy %A Xiong, Li %A Li, Ming %Z Part 2: Privacy %< avec comité de lecture %( Lecture Notes in Computer Science %B 31th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC) %C Philadelphia, PA, United States %Y Giovanni Livraga %Y Sencun Zhu %I Springer International Publishing %3 Data and Applications Security and Privacy XXXI %V LNCS-10359 %P 164-184 %8 2017-07-19 %D 2017 %R 10.1007/978-3-319-61176-1_9 %Z Computer Science [cs]Conference papers %X Mobile application users want to consume location-based services without disclosing their locations and data owners (DO) want to provide different levels of service based on consumer classifications, sometimes without disclosing areas of interest (AOI) locations to all users. Both actors want to leverage location-based services utility without sacrificing privacy. We propose a protocol that supports queries from different classifications of users, such as subscribers/non-subscribers, or internal/external personnel, and imposes embedded fine-grained access control without disclosing user or DO location information. We use Ciphertext Policy Attribute-Based Encryption (CP-ABE) and Hidden Vector Encryption (HVE) to provide flexible access control and mutually private proximity detection (MPPD). Our protocol minimizes expensive cryptographic operations through the use of location mapping with compressed Gray codes, each representing multiple locations. Our protocol encrypts AOI locations using HVE, and then encrypts AOI information using CP-ABE with an expressive access policy. Our protocol’s use of these two encryption methods allows DOs to define a single set of AOIs that can be accessed by sets of users, each with potentially different access permissions. A separate service provider (SP) processes queries without divulging location information of the user or any DO provided AOI. %G English %Z TC 11 %Z WG 11.3 %2 https://inria.hal.science/hal-01684358/document %2 https://inria.hal.science/hal-01684358/file/453481_1_En_9_Chapter.pdf %L hal-01684358 %U https://inria.hal.science/hal-01684358 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC11 %~ IFIP-WG11-3 %~ IFIP-DBSEC %~ IFIP-LNCS-10359