Abstract:Attribute-based encryption (ABE) is a promising cryptographic mechanism for providing confidentiality and fine-grained access control in the cloud-based area. However, due to high computational overhead, common ABE schemes are not suitable for resource-constrained devices. Moreover, data owners should be able to update their defined access policies efficiently, and in some cases, applying hidden access policies is required to preserve the privacy of clients and data. In this paper, we propose a ciphertext-policy attribute-based access control scheme which for the first time provides online/offline encryption, hidden access policy, and access policy update simultaneously. In our scheme, resource-constrained devices are equipped with online/offline encryption reducing the encryption overhead significantly. Furthermore, attributes of access policies are hidden such that the attribute sets satisfying an access policy cannot be guessed by other parties. Moreover, data owners can update their defined access policies while outsourcing a major part of the updating process to the cloud service provider. In particular, we introduce blind access policies that enable the cloud service provider to update the data owners' access policies without receiving a new re-encryption key. Besides, our scheme supports fast decryption such that the decryption algorithm consists of a constant number of bilinear pairing operations. The proposed scheme is proven to be secure in the random oracle model and under the hardness of Decisional Bilinear Diffie-Hellman (DBDH) and Decision Linear (D-Linear) assumptions. Also, performance analysis results demonstrate that the proposed scheme is efficient and practical.

Blind Expressive Ciphertext Policy Attribute Based Encryption for Fine Grained Access Control on the Encrypted Data.

Oblivious Transfer with Fine Grained Access Control from Ciphertext Policy Attribute Based Encryption in the Standard Model

Symmetrically Oblivious Envelope Protocol

An efficient fine-grained data access control system with a bounded service number

An Efficient and Fine-Grained Big Data Access Control Scheme With Privacy-Preserving Policy.

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

Ciphertext Policy Attribute based Encryption with anonymous access policy

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

A Lightening Fine-grained Access Control Scheme Supporting Full Policy Hiding in Cloud Storage

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

Fine-grained access control based on Trusted Execution Environment

A Lightweight Access Control Scheme Supporting Policy Hidden Based on Path Bloom Filter.

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

A Privacy-Preserving Attribute-Based Access Control Scheme.

Attribute-Based Hierarchical Access Control with Extendable Policy

Attribute Based Data Sharing with Attribute Revocation.

Efficient ciphertext-policy attribute based encryption with hidden policy

CP-IPFE: Ciphertext-Policy Based Inner Product Functional Encryption

HUAP: Practical Attribute-based Access Control Supporting Hidden Updatable Access Policies for Resource-Constrained Devices

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.