Key-private proxy re-encryption under LWE

Proxy re-encryption (PRE) is a highly useful cryptographic primitive whereby Alice and Bob can endow a proxy with the capacity to change ciphertext recipients from Alice to Bob, without the proxy itself being able to decrypt, thereby providing delegation of decryption authority. Key-private PRE (KP-PRE) specifies an additional level of confidentiality, requiring pseudo-random proxy keys that leak no information on the identity of the delegators and delegatees. In this paper, we propose a CPA-secure PK-PRE scheme in the standard model (which we then transform into a CCA-secure scheme in the random oracle model). Both schemes enjoy highly desirable properties such as uni-directionality and multi-hop delegation. Unlike (the few) prior constructions of PRE and KP-PRE that typically rely on bilinear maps under ad hoc assumptions, security of our construction is based on the hardness of the standard Learning-With-Errors (LWE) problem, itself reducible from worst-case lattice hard problems that are conjectured immune to quantum cryptanalysis, or “post-quantum”. Of independent interest, we further examine the practical hardness of the LWE assumption, using Kannan’s exhaustive search algorithm coupling with pruning techniques. This leads to state-of-the-art parameters not only for our scheme, but also for a number of other primitives based on LWE published the literature.

Efficient selective identity-based encryption without random oracles

We construct two efficient Identity-Based Encryption (IBE) systems that admit selective-identity security reductions without random oracles in groups equipped with a bilinear map. Selective-identity secure IBE is a slightly weaker security model than the standard security model for IBE. In this model the adversary must commit ahead of time to the identity that it intends to attack, whereas in an adaptive-identity attack the adversary is allowed to choose this identity adaptively. Our first system—BB1—is based on the well studied decisional bilinear Diffie–Hellman assumption, and extends naturally to systems with hierarchical identities, or HIBE. Our second system—BB2—is based on a stronger assumption which we call the Bilinear Diffie–Hellman Inversion assumption and provides another approach to building IBE systems. Our first system, BB1, is very versatile and well suited for practical applications: the basic hierarchical construction can be efficiently secured against chosen-ciphertext attacks, and further extended to support efficient non-interactive threshold decryption, among others, all without using random oracles. Both systems, BB1 and BB2, can be modified generically to provide “full” IBE security (i.e., against adaptive-identity attacks), either using random oracles, or in the standard model at the expense of a non-polynomial but easy-to-compensate security reduction.

Shrinking the keys of discrete-log-type lossy trapdoor functions

To this day, realizations in the standard-model of (lossy) trapdoor functions from discrete-log-type assumptions require large public key sizes, e.g., about Θ(λ 2) group elements for a reduction from the decisional Diffie-Hellman assumption (where λ is a security parameter). We propose two realizations of lossy trapdoor functions that achieve public key size of only Θ(λ) group elements in bilinear groups, with a reduction from the decisional Bilinear Diffie-Hellman assumption. Our first construction achieves this result at the expense of a long common reference string of Θ(λ 2) elements, albeit reusable in multiple LTDF instantiations. Our second scheme also achieves public keys of size Θ(λ), entirely in the standard model and in particular without any reference string, at the cost of a slightly more involved construction. The main technical novelty, developed for the second scheme, is a compact encoding technique for generating compressed representations of certain sequences of group elements for the public parameters.

Universal designated-verifier signatures

Motivated by privacy issues associated with dissemination of signed digital certificates, we define a new type of signature scheme called a ‘Universal Designated-Verifier Signature’ (UDVS). A UDVS scheme can function as a standard publicly-verifiable digital signature but has additional functionality which allows any holder of a signature (not necessarily the signer) to designate the signature to any desired designated-verifier (using the verifier’s public key). Given the designated-signature, the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. We propose an efficient deterministic UDVS scheme constructed using any bilinear group-pair. Our UDVS scheme functions as a standard Boneh-Lynn-Shacham (BLS) signature when no verifier-designation is performed, and is therefore compatible with the key-generation, signing and verifying algorithms of the BLS scheme. We prove that our UDVS scheme is secure in the sense of our unforgeability and privacy notions for UDVS schemes, under the Bilinear Diffie-Hellman (BDH) assumption for the underlying group-pair, in the random-oracle model. We also demonstrate a general constructive equivalence between a class of unforgeable and unconditionally-private UDVS schemes having unique signatures (which includes the deterministic UDVS schemes) and a class of ID-Based Encryption (IBE) schemes which contains the Boneh-Franklin IBE scheme but not the Cocks IBE scheme.

Representing team behaviours from noisy data using player role

Due to their unobtrusive nature, vision-based approaches to tracking sports players have been preferred over wearable sensors as they do not require the players to be instrumented for each match. Unfortunately however, due to the heavy occlusion between players, variation in resolution and pose, in addition to fluctuating illumination conditions, tracking players continuously is still an unsolved vision problem. For tasks like clustering and retrieval, having noisy data (i.e. missing and false player detections) is problematic as it generates discontinuities in the input data stream. One method of circumventing this issue is to use an occupancy map, where the field is discretised into a series of zones and a count of player detections in each zone is obtained. A series of frames can then be concatenated to represent a set-play or example of team behaviour. A problem with this approach though is that the compressibility is low (i.e. the variability in the feature space is incredibly high). In this paper, we propose the use of a bilinear spatiotemporal basis model using a role representation to clean-up the noisy detections which operates in a low-dimensional space. To evaluate our approach, we used a fully instrumented field-hockey pitch with 8 fixed high-definition (HD) cameras and evaluated our approach on approximately 200,000 frames of data from a state-of-the-art real-time player detector and compare it to manually labeled data.

Effect of constitutive material models on seismic response of two-story reinforced concrete frame

This paper focuses on the finite element (FE) response sensitivity and reliability analyses considering smooth constitutive material models. A reinforced concrete frame is modeled for FE sensitivity analysis followed by direct differentiation method under both static and dynamic load cases. Later, the reliability analysis is performed to predict the seismic behavior of the frame. Displacement sensitivity discontinuities are observed along the pseudo-time axis using non-smooth concrete and reinforcing steel model under quasi-static loading. However, the smooth materials show continuity in response sensitivity at elastic to plastic transition points. The normalized sensitivity results are also used to measure the relative importance of the material parameters on the structural responses. In FE reliability analysis, the influence of smoothness behavior of reinforcing steel is carefully noticed. More efficient and reasonable reliability estimation can be achieved by using smooth material model compare with bilinear material constitutive model.

Negative priming in naming of categorically related objects: An fMRI study

Ignoring an object slows subsequent naming responses to it, a phenomenon known as negative priming (NP). A central issue in NP research concerns the level of representation at which the effect occurs. As object naming is typically considered to involve access to abstract semantic representations, Tipper 1985 proposed that the NP effect occurred at this level of processing, and other researchers supported this proposal by demonstrating a similar result with categorically related objects (e.g., Allport et al., 1985; Murray, 1995), an effect referred to as semantic NP. However, objects within categories share more physical or structural features than objects from different categories. Consequently, the NP effect observed with categorically related objects might occur at a structural rather than semantic level of representation. We used event related fMRI interleaving overt object naming and image acquisition to demonstrate for the first time that the semantic NP effect activates the left posterior-mid fusiform and insular-opercular cortices. Moreover, both naming latencies and left posterior-mid fusiform cortex responses were influenced by the structural similarity of prime-probe object pairings in the categorically related condition, increasing with the number of shared features. None of the cerebral regions activated in a previous fMRI study of the identity NP effect (de Zubicaray et al., 2006) showed similar activation during semantic NP, including the left anterolateral temporal cortex, a region considered critical for semantic processing. The results suggest that the identity and semantic NP effects differ with respect to their neural mechanisms, and the label "semantic NP" might be a misnomer. We conclude that the effect is most likely the result of competition between structurally similar category exemplars that determines the efficiency of object name retrieval.

Best individual template selection from deformation tensor minimization

We study the influence of the choice of template in tensor-based morphometry. Using 3D brain MR images from 10 monozygotic twin pairs, we defined a tensor-based distance in the log-Euclidean framework [1] between each image pair in the study. Relative to this metric, twin pairs were found to be closer to each other on average than random pairings, consistent with evidence that brain structure is under strong genetic control. We also computed the intraclass correlation and associated permutation p-value at each voxel for the determinant of the Jacobian matrix of the transformation. The cumulative distribution function (cdf) of the p-values was found at each voxel for each of the templates and compared to the null distribution. Surprisingly, there was very little difference between CDFs of statistics computed from analyses using different templates. As the brain with least log-Euclidean deformation cost, the mean template defined here avoids the blurring caused by creating a synthetic image from a population, and when selected from a large population, avoids bias by being geometrically centered, in a metric that is sensitive enough to anatomical similarity that it can even detect genetic affinity among anatomies.

Feature overlap slows lexical selection: Evidence from the picture–word interference paradigm

How does the presence of a categorically related word influence picture naming latencies? In order to test competitive and noncompetitive accounts of lexical selection in spoken word production, we employed the picture–word interference (PWI) paradigm to investigate how conceptual feature overlap influences naming latencies when distractors are category coordinates of the target picture. Mahon et al. (2007. Lexical selection is not by competition: A reinterpretation of semantic interference and facilitation effects in the picture-word interference paradigm. Journal of Experimental Psychology. Learning, Memory, and Cognition, 33(3), 503–535. doi:10.1037/0278-7393.33.3.503) reported that semantically close distractors (e.g., zebra) facilitated target picture naming latencies (e.g., HORSE) compared to far distractors (e.g., whale). We failed to replicate a facilitation effect for within-category close versus far target–distractor pairings using near-identical materials based on feature production norms, instead obtaining reliably larger interference effects (Experiments 1 and 2). The interference effect did not show a monotonic increase across multiple levels of within-category semantic distance, although there was evidence of a linear trend when unrelated distractors were included in analyses (Experiment 2). Our results show that semantic interference in PWI is greater for semantically close than for far category coordinate relations, reflecting the extent of conceptual feature overlap between target and distractor. These findings are consistent with the assumptions of prominent competitive lexical selection models of speech production.

An Explicit Guidance Scheme For A Low-Thrust Terminal Rendezvous

An explicit near-optimal guidance scheme is developed for a terminal rendezvous of a spacecraft with a passive target in circular orbit around the earth. The thrust angle versus time profile for the continuous-thrust, constant-acceleration maneuver is derived, based on the assumption that the components of inertial acceleration due to relative position and velocity are negligible on account of the close proximity between the two spacecraft. The control law is obtained as a ''bilinear tangent law'' and an analytic solution to the state differential equations is obtained by expanding a portion of the integrand as an infinite series in time. A differential corrector method is proposed, to obtain real-time updates to the guidance parameters at regular time intervals. Simulation of the guidance scheme is carried out using the Clohessy-Wiltshire equations of relative motion as well as the inverse-square two-body equations of motion. Results for typical examples are presented.

Mycelial compatibility reactions of Australian Fusarium graminearum and F. pseudograminearum isolates compared with AFLP groupings

Using the mycelial reactions of 435 combinations of 14 Fusarium pseudograminearum and 15 F. graminearum isolates, it was demonstrated for the first time that mycelial reactions/barrage formation cannot be clearly used to distinguish F. graminearum and F. pseudograminearum. Mutually compatible isolates produced very different patterns of compatibility with other isolates. However, about 60% of pairings between F. graminearum and F. pseudograminearum isolates were compatible, indicating common ancestry. The Mantel tests used to determine any possible associations between mycelial compatibility reactions and AFLP genotypic diversity data revealed no association between the two systems in either species. In addition, no association was found between mycelial compatibility reactions and sexual reproduction in the two species. Implications of the higher frequency of mycelial compatibility reactions observed in F. pseudograminearum than in F. graminearum are discussed.

Konstruktioiden dynamiikkaa

Dynamic constructions Dynamic constructions is a study of the dynamism of Finnish grammar. Dynamism as a linguistic phenomenon is studied on both the diachronic and synchronic level. The study therefore focuses not only on the temporal changes of grammar but also on the conventionality of grammatical structures and on the interplay between closely related constructions. Dynamism is also treated as a phenomenon occurring between different varieties of Finnish. All in all, dynamism is shown to be a key feature of the nature of grammar. The study is set within the framework of cognitive linguistics and construction grammar. Both theories emphasise the role of constructions pairings of form with semantic or discourse function in the composition and development of grammar. The grammar of a language is understood to be a structured inventory of such constructions. I argue that the constructions are best studied in their original contexts of use. Thus, the study is usage-based in a strict sense. The data is compiled from various corpora consisting of both written and spoken as well as standard and non-standard Finnish. The dissertation consists of an introduction and four empirical studies. The four papers examine various Finnish constructions and thereby shed light on different aspects of the dynamism of a grammar. The first paper focuses on the diachronic development of the Finnish temporal converb essa. The second paper discusses a specific construction which includes the essa converb, that is, the mikäs on ollessa construction. Some closely related constructions and their semantic interplay are also examined. The third paper extensively studies what is generally regarded as an ellipsis of the negation verb in Finnish. By using present day Finnish data, I show that the omission of the negation verb is not an instance of mere ellipsis but rather a construction. The final paper combines the themes of the second and the third paper by focusing on closely related constructions of the negative ellipsis construction.

Low cycle fatigue behaviour of a low interstitial Ni-base superalloy

The low cycle fatigue behaviour of precipitation strengthened nickel-base superalloy 720Li containing a low concentration of interstitial carbon and boron was studied at 25, 400 and 650 degrees C. Cyclic stress response at all temperatures was stable under fully reversed constant total strain amplitude (Delta epsilon/2) when Delta epsilon/2 <= 0.6%. At Delta epsilon/2 > 0.6%, cyclic hardening was followed by softening, until fracture at 25 and 650 degrees C. At 400 degrees C, however, cyclic stress plateaued after initial hardening. Dislocation-dislocation interactions and precipitate shearing were the micromechanisms responsible for the cyclic hardening and softening, respectively. The number of reversals to failure vs. plastic strain amplitude plot exhibits a bilinear Coffin-Manson relation. Transmission electron microscopy substructures revealed that planar slip was the major deformation mode under the conditions examined. However, differences in its distribution were observed to be the cause for the bilinearity in fatigue lives. The presence of fine deformation twins at low Delta epsilon/2 at 650 degrees C suggests the role of twinning in homogenization of cyclic deformation.

Look-alike, sound-alike medication errors: A novel case concerning a Slow-Na, Slow-K prescribing error

A 59-year-old man was mistakenly prescribed Slow-Na instead of Slow-K due to incorrect selection from a drop-down list in the prescribing software. This error was identified by a pharmacist during a home medicine review (HMR) before the patient began taking the supplement. The reported error emphasizes the need for vigilance due to the emergence of novel look-alike, sound-alike (LASA) drug pairings. This case highlights the important role of pharmacists in medication safety.

Prediction of Compressibility of Overconsolidated Uncemented Soils

Overconsolidated soils exhibit a bilinear e-log p relationship. During virgin compression, microstructural units form larger stable groups, thereby reducing the operating specific surface and, in turn, net osmotic repulsive forces in the soil. The rebound portion of the e-log p curve is consequently flatter. The generalized relationship for compressibility of uncemented soils in the overconsolidated state has been developed in the form of e/eL = 1.122 = 0.188 log pc - 0.0463 log p in which e/eL is the generalized soil state parameter, pc is the preconsolidation pressure in kPa, p is the effective overburden pressure in kPa, e is the in situ void ratio, and eL is the void ratio corresponding to the liquid limit water content (wLG). This relationship can be usefully employed to predict both the preconsolidation pressure and compressibility responses of overconsolidated uncemented soils.