Abstract:Nowadays, secure data access control has become one of the major concerns in a cloud storage system. As a logical combination of attribute-based encryption and attribute-based signature, attribute-based signcryption (ABSC) can provide confidentiality and an anonymous authentication for sensitive data and is more efficient than traditional ``encrypt-then-sign”or ``sign-then-encrypt”strategies. Thus, ABSC is suitable for fine-grained access control in a semi-trusted cloud environment and is gaining more and more attention in recent years. However, in many previous ABSC schemes, user's sensitive attributes can be disclosed to the authority, and only a single authority that is responsible for attribute management and key generation exists in the system. In this paper, we propose PMDAC-ABSC, a novel privacy-preserving data access control scheme based on Ciphertext-Policy ABSC, to provide a fine-grained control measure and attribute privacy protection simultaneously in a multi-authority cloud storage system. The attributes of both the signcryptor and the designcryptor can be protected to be known by the authorities and cloud server. Furthermore, the decryption overhead for user is significantly reduced by outsourcing the undesirable bilinear pairing operations to the cloud server without degrading the attribute privacy. The proposed scheme is proven to be secure in the standard model and has the ability to provide confidentiality, unforgeability, anonymous authentication, and public verifiability. The security analysis, asymptotic complexity comparison, and implementation results indicate that our construction can balance the security goals with practical efficiency in computation.

PRAM: privacy preserving access management scheme in cloud services.

Privacy-Preserving Protocol for Data Stored in the Cloud

Privacy Protection Based Access Control Scheme in Cloud-Based Services

A Practical Privacy-preserving Password Authentication Scheme for Cloud Computing

Secure Data Access and Sharing Scheme for Cloud Storage

Cloud Data Security Access with Privacy-Preserving

Proxy Re-Encryption Based Multi-Factor Access Control Scheme in Cloud

An ORAM-based Privacy Preserving Data Sharing Scheme for Cloud Storage

A Privacy-Preserving Attribute-Based Access Control Scheme.

Secure Multi-Authority Data Access Control Scheme in Cloud Storage System Based on Attribute-Based Signcryption

Shared Authority Based Privacy-Preserving Authentication Protocol in Cloud Computing

Revocable and Privacy-Preserving Bilateral Access Control for Cloud Data Sharing

Privacy Protection Scheme for Cloud Computing

Dynamic Data Access Control for Multi-Authority Cloud Storage.

Reputation and Attribute Based Dynamic Access Control Framework in Cloud Computing Environment for Privacy Protection

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

Privacy Enhanced Access Control in Pervasive Computing Environments

An Approach to Identity Management in Clouds without Trusted Third Parties

An Efficient Privacy-Aware Authentication Scheme with Hierarchical Access Control for Mobile Cloud Computing Services

Research on Cloud Storage Access Control System

PSMPA: Patient Self-Controllable and Multi-Level Privacy-Preserving Cooperative Authentication in Distributedm-Healthcare Cloud Computing System