Abstract:Data access control is a challenging issue in public cloud storage systems. Ciphertext-policy attribute-based encryption (CP-ABE) has been adopted as a promising technique to provide flexible, fine-grained, and secure data access control for cloud storage with honest-but-curious cloud servers. However, in the existing CP-ABE schemes, the single attribute authority must execute the time-consuming user legitimacy verification and secret key distribution, and hence, it results in a single-point performance bottleneck when a CP-ABE scheme is adopted in a large-scale cloud storage system. Users may be stuck in the waiting queue for a long period to obtain their secret keys, thereby resulting in low efficiency of the system. Although multiauthority access control schemes have been proposed, these schemes still cannot overcome the drawbacks of single-point bottleneck and low efficiency, due to the fact that each of the authorities still independently manages a disjoint attribute set. In this paper, we propose a novel heterogeneous framework to remove the problem of single-point performance bottleneck and provide a more efficient access control scheme with an auditing mechanism. Our framework employs multiple attribute authorities to share the load of user legitimacy verification. Meanwhile, in our scheme, a central authority is introduced to generate secret keys for legitimacy verified users. Unlike other multi-authority access control schemes, each of the authorities in our scheme manages the whole attribute set individually. To enhance security, we also propose an auditing mechanism to detect which attribute authority has incorrectly or maliciously performed the legitimacy verification procedure. Analysis shows that our system not only guarantees the security requirements but also makes great performance improvement on key generation.

An ID-based Hierarchical Access Control Scheme with Constant Size Public Parameter

Achieving Simple, Secure and Efficient Hierarchical Access Control in Cloud Computing.

Dynamic Authentication with Sensory Information for the Access Control Systems.

An Efficient Solution for Hierarchical Access Control Problem in Cloud Environment

An Efficient Delegation-Based Anonymous Authentication Protocol

Hash-function based efficient key assignment for hierarchical access control

A Practical Time Bound Hierarchical Key Scheme

Conditional Anonymous Certificateless Public Auditing Scheme Supporting Data Dynamics for Cloud Storage Systems

An Efficient Time-Bound Hierarchical Key Management Scheme Without Tamper-Resistant Devices

Efficient key assignment for hierarchical access control using one-way hash function

A Practical Hierarchical Key Management Scheme Based on One-Way Hash Function

A Hierarchical Key-Insulated Signature Scheme In The Ca Trust Model

RAAC: Robust and Auditable Access Control with Multiple Attribute Authorities for Public Cloud Storage

Enforcing Scalable and Dynamic Hierarchical Access Control in Cloud Computing

Ciphertext Storage Scheme Supporting Data Hierarchical Management and Control

A Hierarchical Access Control Technology for Cloud Storage

TMACS: A Robust and Verifiable Threshold Multi-Authority Access Control System in Public Cloud Storage

An Access Control Scheme with Fine-Grained Time Constrained Attributes Based on Smart Contract and Trapdoor

An Efficient Privacy-Aware Authentication Scheme with Hierarchical Access Control for Mobile Cloud Computing Services

A Lightening Fine-grained Access Control Scheme Supporting Full Policy Hiding in Cloud Storage

An Efficient Access Control Scheme Based on CP-ABE with Supporting Attribute Change in Cloud Storage Systems.