Abstract:Cloud file sharing (CFS) has become one of the important tools for enterprises to reduce technology operating costs and improve their competitiveness. Due to the untrustworthy cloud service provider, access control and security issues for sensitive data have been key problems to be addressed. Current solutions to these issues are largely related to the traditional public key cryptography, access control encryption or attribute-based encryption based on the bilinear mapping. The rapid technological advances in quantum algorithms and quantum computers make us consider the transition from the tradtional cryptographic primitives to the post-quantum counterparts. In response to these problems, we propose a lattice-based Ciphertext-Policy Attribute-Based Encryption(CP-ABE) scheme, which is designed based on the ring learing with error problem, so it is more efficient than that designed based on the learing with error problem. In our scheme, the indirect revocation and binary tree-based data structure are introduced to achieve efficient user revocation and dynamic management of user groups. At the same time, in order to further improve the efficiency of the scheme and realize file sharing across enterprises, the scheme also allows multiple authorities to jointly set up system parameters and manage distribute keys. Furthermore, by re-randomizing the user's private key and update key, we achieve decryption key exposure resistance(DKER) in the scheme. We provide a formal security model and a series of security experiments, which show that our scheme is secure under chosen-plaintext attacks. Experimental simulations and evaluation analyses demonstrate the high efficiency and practicality of our scheme.

Ciphertext-Policy Attribute-Based Access Control with Effective User Revocation for Cloud Data Sharing System.

Attribute-Based Access Control with Efficient and Secure Attribute Revocation for Cloud Data Sharing Service

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

A Cloud-Based Access Control Scheme with User Revocation and Attribute Update.

An Efficient Ciphertext-Policy Attribute-Based Access Control Towards Revocation in Cloud Computing

Traceable Ciphertext Policy Attribute-based Encryption Scheme with User Revocation for Cloud Storage

New ciphertext-policy attribute-based access control with efficient revocation

Attribute-based Fine-Grained Access Control with Efficient Revocation in Cloud Storage Systems.

Attribute Based Data Sharing with Attribute Revocation.

Attribute-Based Data Sharing with Flexible and Direct Revocation in Cloud Computing.

Achieving Collaborative Cloud Data Storage by Key-Escrow-Free Multi-Authority CP-ABE Scheme with Dual-Revocation.

Efficient Revocation in Ciphertext-Policy Attribute-Based Encryption Based Cryptographic Cloud Storage.

A CP-ABE scheme with system attributes revocation in cloud storage

An Efficient Access Control Scheme Based on CP-ABE with Supporting Attribute Change in Cloud Storage Systems.

An Efficient and Revocable Storage CP-ABE Scheme in the Cloud Computing

Attribute-Based Encryption with Efficient Keyword Search and User Revocation.

Dynamic Data Access Control for Multi-Authority Cloud Storage.

A Traceable Outsourcing CP-ABE Scheme with Attribute Revocation

Multi-authority attribute-based encryption scheme with constant-size ciphertexts and user revocation: Multi-authority attribute-based encryption scheme with constant-size ciphertexts and user revocation

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

PHAS-HEKR-CP-ABE: Partially Policy-Hidden CP-ABE with Highly Efficient Key Revocation in Cloud Data Sharing System