Abstract:Cloud computing has become the priority for users to store and share data due to its numerous tempting advantages. The "encryption-before-outsourcing" mechanism is necessary to protect data privacy against the semi-trusted cloud server. Key-Aggregate Cryptosystem (KAC) is a novel encryption paradigm for cloud data sharing. It enables users to decrypt multiple data encrypted with different keys using a constant size aggregate key. When selectively sharing data, the KAC effectively addresses the challenges of expensive key management in symmetric encryption (SE) and eliminates the need for multiple copies of ciphertexts in public key encryption (PKE). However, previous KAC schemes can only control what data users are allowed to receive by distributing aggregate keys, but not what data users can send. This limitation could potentially allow a malicious data owner to leak sensitive information by distributing aggregate keys to unauthorized users. Therefore, this paper aims to design the key-aggregate cryptosystem with bidirectional access control, which can control both what the user can receive and what the data owner can send. Inspired by access control encryption (ACE), we first propose a key-aggregate based access control encryption with user level (KA-ACE-UL) system that can control whether a sender can share his data with a receiver. Then, we investigate a finer-grained access control policy and propose a key-aggregate based access control encryption with user-data level (KA-ACE-UDL) system that can control the data classes a sender can share with a receiver. We instantiate the KA-ACE-UL and KA-ACE-UDL schemes based on Chu et al.'s KAC scheme. We prove our proposed schemes can achieve both secure data storage and controlled data sharing, ensuring security against unauthorized receivers and malicious senders. Finally, theoretical performance analysis and practical experiments show the efficiency of our proposed schemes.

Managing Data Security in E-Markets through Relationship Driven Access Control

Multi-level Access Control for Collaborative CAD

Construction of security architecture of web services based EAI

A Comprehensive RMS Model for P2P e-Commerce Communities

Dynamic Security Access Control Model Based on System Reliability

Secure Information Exchange Model Between PDM Systems

Securing Role-Based Distributed Collaboration System

Dynamic Role-based Access Control for Web Services Using Context and Trust

Resource-centric Dynamic Access Control in Cloud

A Trust-Role Based Context Aware Access Control Model

Research of User Access Control for Networked Manufacturing System

Computer security technology in E-commerce platform business model construction

Securely Sharing Data in Encrypted Databases

A smart contract-driven access control scheme with integrity checking for electronic health records

Access Control in New Network Environment

Relation-Based Access Control: an Access Control Model for Context-Aware Computing Environment

Privacy, How Can I Protect You? How to Construct Safe Data Security System in E-commerce Transaction

A Secure Model for Electronic Contract Enactment, Monitoring and Management

Scalable Industry Data Access Control in RFID-Enabled Supply Chain.

Securing RC Based P2P Networks: A Blockchain-based Access Control Framework utilizing Ethereum Smart Contracts for IoT and Web 3.0

Key-aggregate based access control encryption for flexible cloud data sharing