Abstract:Cloud file sharing (CFS) has become one of the important tools for enterprises to reduce technology operating costs and improve their competitiveness. Due to the untrustworthy cloud service provider, access control and security issues for sensitive data have been key problems to be addressed. Current solutions to these issues are largely related to the traditional public key cryptography, access control encryption or attribute-based encryption based on the bilinear mapping. The rapid technological advances in quantum algorithms and quantum computers make us consider the transition from the tradtional cryptographic primitives to the post-quantum counterparts. In response to these problems, we propose a lattice-based Ciphertext-Policy Attribute-Based Encryption(CP-ABE) scheme, which is designed based on the ring learing with error problem, so it is more efficient than that designed based on the learing with error problem. In our scheme, the indirect revocation and binary tree-based data structure are introduced to achieve efficient user revocation and dynamic management of user groups. At the same time, in order to further improve the efficiency of the scheme and realize file sharing across enterprises, the scheme also allows multiple authorities to jointly set up system parameters and manage distribute keys. Furthermore, by re-randomizing the user's private key and update key, we achieve decryption key exposure resistance(DKER) in the scheme. We provide a formal security model and a series of security experiments, which show that our scheme is secure under chosen-plaintext attacks. Experimental simulations and evaluation analyses demonstrate the high efficiency and practicality of our scheme.

How to use attribute-based encryption to implement role-based access control in the cloud.

Attribute-based Encryption for Cloud Computing Access Control

Attribute Based Encryption with Efficient Revocation from Lattices

Attribute-based Encryption for Cloud Computing Access Control: A Survey

Large-Universe Attribute-Based Encryption with Public Traceability for Cloud Storage.

Practical Attribute-Based Encryption: Outsourcing Decryption, Attribute Revocation and Policy Updating

Dynamic Attribute-Based Access Control in Cloud Storage Systems

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

Decentralized Attribute-based Encryption Access Control in Cloud Storage Environment

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Cloud Storage Data Access Control Scheme Based on Blockchain and Attribute-Based Encryption

Protecting Data in Cloud Environment with Attribute-Based Encryption

New Access Control Systems Based on Outsourced Attribute-Based Encryption

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

CR-FH-CPABE: Secure File Hierarchy Attribute-Based Encryption Scheme Supporting User Collusion Resistance in Cloud Computing

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Multi-authority fine-grained access control with accountability and its application in cloud.

Efficient and accountable anti-leakage attribute-based encryption scheme for cloud storage

Revocable, dynamic and decentralized data access control in cloud storage

Batch Attribute-Based Encryption For Secure Clouds