Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

Fine-grained Access Control and Revocation for Sharing Data on Clouds

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Attribute-based Fine-Grained Access Control with Efficient Revocation in Cloud Storage Systems.

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

Hierarchical Attribute-Based Encryption and Scalable User Revocation for Sharing Data in Cloud Servers

Two-Factor Data Access Control with Efficient Revocation for Multi-Authority Cloud Storage Systems

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Fine-grained access control for cloud computing

Dynamic Data Access Control for Multi-Authority Cloud Storage.

Efficient Keyword Search over Encrypted Data with Fine-Grained Access Control in Hybrid Cloud.

An efficient fine-grained data access control system with a bounded service number

An Improved Cloud Data Sharing Scheme with Hierarchical Attribute Structure.

Enforcing Scalable and Dynamic Hierarchical Access Control in Cloud Computing

Revocable, dynamic and decentralized data access control in cloud storage

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

Attribute-Based Data Sharing with Flexible and Direct Revocation in Cloud Computing.

Attribute-Based Access Control with Efficient and Secure Attribute Revocation for Cloud Data Sharing Service

Achieving Fine-Grained Data Sharing for Hierarchical Organizations in Clouds

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Ciphertext-Policy Attribute-Based Access Control with Effective User Revocation for Cloud Data Sharing System.