Abstract:To secure cloud storage and enforce access control, data encryption has become essential, given the ever increasing cyber threat everywhere. Attribute-based Encryption (ABE) crypto systems are widely considered as a promising solution under such a context for its security strength, scalability and control flexibility. One major challenge, however, for applying ABE-based techniques in real world applications is its high overhead in various aspects. In this research, we are particularly concerned with the storage size expansion in existing ABE schemes. This combined with the vast-size nature of the cloud data poses an enormous challenge to the effective usage of the cloud data storage space and affects the utility of data deduplication. Normally, data deduplication is carried out based on identifying similar and even identical contents both within and between data files, however, these patterns will be destroyed after performing data encryption using any semantically secure encryption scheme including ABE. In this research, we focus on ciphertexts deduplication under ABE, which to our best knowledge is the first of such an effort. Our fundamental observation stems from the structure of ABE ciphertexts and the possible similarities among different access structures. We show how to design a secure ciphertext deduplication scheme based on a classical CP-ABE scheme by innovatively modifying the construction with a recursive algorithm, eliminating the duplicated secrets and adding additional randomness to some certain ciphertext. We then give a detailed analysis on the proposed scheme with respect to both efficiency and security. To thoroughly assess the performance of the proposed scheme, we also implement a prototype system and conduct comprehensive experiments, which shows that our ciphertext reduplication scheme could reduce up to 80% computation and storage cost in the best case.

CABE: A New Comparable Attribute-Based Encryption Construction with 0-Encoding and 1-Encoding.

Large Universe CCA2 CP-ABE With Equality and Validity Test in the Standard Model

Attribute-based Encryption for Cloud Computing Access Control

Enhancing Attribute-Based Encryption with Attribute Hierarchy

High efficient key-insulated attribute based encryption scheme without bilinear pairing operations

Hierarchical and Non-Monotonic Key-Policy Attribute-Based Encryption and Its Application

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

How to use attribute-based encryption to implement role-based access control in the cloud.

Defending Against Key Exposure in Attribute-Based Encryption

Privacy-Aware Attribute-Based Encryption with User Accountability

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

Attribute-Based Hierarchical Access Control with Extendable Policy

Ciphertext-Policy Attribute-Based Encrypted Data Equality Test and Classification.

Secure and Efficient Attribute-Based Encryption with Keyword Search.

KP-ABE with Attribute Extension: Towards Functional Encryption Schemes Integration

Attribute-Based Equality Test Over Encrypted Data Without Random Oracles

Efficient and accountable anti-leakage attribute-based encryption scheme for cloud storage

Outsourced Ciphertext-Policy Attribute-Based Encryption with Equality Test.

Designing quantum-secure attribute-based encryption

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data