Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

Structured Document Model and Its Secure Access Control in Cloud Computing

Ensure Data Security in Cloud Storage

The Trusted Hierarchical Access Structure-Based Encryption Scheme for Cloud Computing

Flexible Access Control in a Cloud Storage System

Research on Cloud Storage Access Control System

An Effective and Secure Access Control System Scheme in the Cloud

A Framework for Storage Security in Cloud Computing

Study on the Security Models and Strategies of Cloud Computing

Research on Electronic Document Management System Based on Cloud Computing

Resource-centric Dynamic Access Control in Cloud

Secure Data Access and Sharing Scheme for Cloud Storage

An Action-Based Fine-Grained Access Control Mechanism for Structured Documents and Its Application

Secure Outsourced Medical Data Against Unexpected Leakage with Flexible Access Control in a Cloud Storage System.

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Isolated distributed architecture for cloud-storage services based on structured strategy

Achieving Secure and Efficient Data Collaboration in Cloud Computing

Cloud Data Security Access with Privacy-Preserving

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Proxy Re-Encryption Based Multi-Factor Access Control Scheme in Cloud

SECO: Secure and Scalable Data Collaboration Services in Cloud Computing

Data access control model based on data's role and attributes for cloud computing