Abstract:The dissociation between data management and data ownership makes it difficult to protect data security and privacy in cloud storage systems.Traditional encryption technologies are not suitable for data protection in cloud storage systems.A novel multi-authority proxy re-encryption mechanism based on ciphertext-policy attribute-based encryption（MPRE-CPABE） is proposed for cloud storage systems.MPRE-CPABE requires data owner to split each file into two blocks,one big block and one small block.The small block is used to encrypt the big one as the private key,and then the encrypted big block will be uploaded to the cloud storage system.Even if the uploaded big block of file is stolen,illegal users cannot get the complete information of the file easily.Ciphertext-policy attribute-based encryption（CPABE）is always criticized for its heavy overload and insecure issues when distributing keys or revoking user’s access right.MPRE-CPABE applies CPABE to the multi-authority cloud storage system,and solves the above issues.The weighted access structure（WAS） is proposed to support a variety of fine-grained threshold access control policy in multi-authority environments,and reduce the computational cost of key distribution.Meanwhile,MPRE-CPABE uses proxy re-encryption to reduce the computational cost of access revocation.Experiments are implemented on platforms of Ubuntu and CloudSim.Experimental results show that MPRE-CPABE can greatly reduce the computational cost of the generation of key components and the revocation of user’s access right.MPRE-CPABE is also proved secure under the security model of decisional bilinear Diffie-Hellman（DBDH）.

Cloud Based Data Sharing with Fine-Grained Proxy Re-Encryption

Hierarchical Conditional Proxy Re-Encryption: A New Insight of Fine-Grained Secure Data Sharing.

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

A New Kind of Conditional Proxy Re-Encryption for Secure Cloud Storage

Pairing-Free Certificate-Based Proxy Re-Encryption Plus Scheme for Secure Cloud Data Sharing

Flexible, Efficient, and Secure Access Delegation in Cloud Computing

Certificateless Proxy Re-Encryption with Cryptographic Reverse Firewalls for Secure Cloud Data Sharing

Strongly Secure and Cost-Effective Certificateless Proxy Re-encryption Scheme for Data Sharing in Cloud Computing

Fine-grained and Heterogeneous Proxy Re-Encryption for Secure Cloud Storage

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

Ciphertext-Policy Attribute-Based Access Control with Effective User Revocation for Cloud Data Sharing System.

A Key-insulated Proxy Re-encryption Scheme for Data Sharing in a Cloud Environment.

Multi-authority Proxy Re-Encryption Based on CPABE for Cloud Storage Systems

Efficient functional encryption and proxy re-cryptography for secure public cloud data sharing

Hierarchical Attribute-Based Encryption and Scalable User Revocation for Sharing Data in Cloud Servers

A Limited Proxy Re-encryption with Keyword Search for Data Access Control in Cloud Computing.

Attribute Based Data Sharing with Attribute Revocation.

A Cloud Data Deduplication Scheme Based on Certificateless Proxy Re-Encryption.

Attribute-Based Access Control with Efficient and Secure Attribute Revocation for Cloud Data Sharing Service

A Survey of Proxy Re-Encryption for Secure Data Sharing in Cloud Computing

Efficient and HRA Secure Universal Conditional Proxy Re-Encryption for Cloud-Based Data Sharing