Abstract:With the rapid development and application of the Internet, traditional storage resources have been found unable to meet the growing demand for massive data storage. An increasing number of users have attempted to upload their data to third-party cloud servers for unified storage. Efficient deduplication and secure file sharing in the cloud have emerged as critical concerns. Moreover, users have always preferred to customize their passwords for encrypting and decrypting files, only sharing encrypted files when necessary. Based on this preference, a deterministic stepwise encryption algorithm was first designed. It was such that when the keys for the two steps of encryption satisfied a certain relationship, the two steps of encryption could be equivalent to a single encryption process. A novel key-customizable encrypted deduplication scheme with access control for cloud storage was proposed, utilizing the deterministic stepwise encryption algorithm to encrypt files and a ciphertext-policy attribute-based encryption algorithm to encrypt file keys. This scheme not only offered the flexibility to customize encryption and decryption keys for different users with the same files, but also ensured secure file sharing through a dynamic access control mechanism. Moreover, the optional access control component was made compatible with the majority of existing ciphertext-policy attribute-based encryption (CP-ABE) schemes, even allowing for different CP-ABE schemes within different attribute groups. Security analysis results show that the proposed scheme achieves the highest level of security under the current encrypted deduplication paradigm. Experimental and analytical results indicate that it effectively meets the practical needs of cloud service providers and users, and also achieves acceptable efficiency.

An Efficient Key Management Scheme for Segment-Based Document Protection

SDDRM: Toward segment-based dynamic digital rights management in document protection

Multi-level Access Control for Collaborative CAD

An Efficient Time-Bound Hierarchical Key Management Scheme Without Tamper-Resistant Devices

An Efficient Solution for Hierarchical Access Control Problem in Cloud Environment

New key management scheme in database encryption

Defending Against Key Exposure in Attribute-Based Encryption

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

An Efficient Safe Directory Based File Protection Mechanism

On the security of an efficient time-bound hierarchical key management scheme

A Novel Xml-Based Document Format with Printing Quality for Web Publishing

An Efficient Multi-data Owner Cooperative Resource Sharing Scheme Against Key Regeneration in Edge Computing

A Practical Time Bound Hierarchical Key Scheme

Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

EACS: an Efficient Access Control Scheme for Electronic Publishing in Cloud Computing

Efficient Processing of Secured XML Metadata

A Model for Dynamic Access Control of XML Documents Using Semantics

A Practical Hierarchical Key Management Scheme Based on One-Way Hash Function

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Secure Group Key Management Approach Based upon N-dimensional Hyper-sphere.