Abstract:Data access control is a challenging issue in public cloud storage systems. Ciphertext-policy attribute-based encryption (CP-ABE) has been adopted as a promising technique to provide flexible, fine-grained, and secure data access control for cloud storage with honest-but-curious cloud servers. However, in the existing CP-ABE schemes, the single attribute authority must execute the time-consuming user legitimacy verification and secret key distribution, and hence, it results in a single-point performance bottleneck when a CP-ABE scheme is adopted in a large-scale cloud storage system. Users may be stuck in the waiting queue for a long period to obtain their secret keys, thereby resulting in low efficiency of the system. Although multiauthority access control schemes have been proposed, these schemes still cannot overcome the drawbacks of single-point bottleneck and low efficiency, due to the fact that each of the authorities still independently manages a disjoint attribute set. In this paper, we propose a novel heterogeneous framework to remove the problem of single-point performance bottleneck and provide a more efficient access control scheme with an auditing mechanism. Our framework employs multiple attribute authorities to share the load of user legitimacy verification. Meanwhile, in our scheme, a central authority is introduced to generate secret keys for legitimacy verified users. Unlike other multi-authority access control schemes, each of the authorities in our scheme manages the whole attribute set individually. To enhance security, we also propose an auditing mechanism to detect which attribute authority has incorrectly or maliciously performed the legitimacy verification procedure. Analysis shows that our system not only guarantees the security requirements but also makes great performance improvement on key generation.

Multi-Authority Attribute Based Encryption Scheme with Revocation.

An attribute based encryption scheme with fine-grained attribute revocation

Attribute Based Data Sharing with Attribute Revocation.

Revocable attribute-based encryption from standard lattices

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

A revocable attribute-based encryption EHR sharing scheme with multiple authorities in blockchain

Revocable, dynamic and decentralized data access control in cloud storage

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things

Multiauthority Attribute-Based Encryption for Assuring Data Deletion

An Efficient Ciphertext-Policy Attribute-Based Encryption Scheme Supporting Collaborative Decryption With Blockchain

Hierarchical Multi-Authority and Attribute-Based Encryption Friend Discovery Scheme in Mobile Social Networks

A Blockchain-based Access Control Scheme with Multiple Attribute Authorities for Secure Cloud Data Sharing.

Key escrow-free attribute based encryption with user revocation

Efficiently Multi-User Searchable Encryption Scheme with Attribute Revocation and Grant for Cloud Storage

Flexibly expressive and revocable multi-authority KP-ABE scheme from RLWE for Internet of Medical Things

Attribute-Based Hierarchical Access Control with Extendable Policy

Privacy-Aware Attribute-Based Encryption with User Accountability

RAAC: Robust and Auditable Access Control with Multiple Attribute Authorities for Public Cloud Storage

Hierarchical and Non-Monotonic Key-Policy Attribute-Based Encryption and Its Application

A Lightweight CP-ABE Scheme with Direct Attribute Revocation for Vehicular Ad Hoc Network