Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Efficient, Verifiable and Privacy Preserving Decentralized Attribute-Based Encryption for Mobile Cloud Computing

An Efficient Encryption Scheme with Verifiable Outsourced Decryption in Mobile Cloud Computing.

Ensuring Attribute Privacy Protection and Fast Decryption for Outsourced Data Security in Mobile Cloud Computing.

Improving Privacy and Security in Decentralizing Multi-Authority Attribute-Based Encryption in Cloud Computing.

A Secure and Lightweight Fine-Grained Data Sharing Scheme for Mobile Cloud Computing

Online/offline Unbounded Multi-Authority Attribute-Based Encryption for Data Sharing in Mobile Cloud Computing.

Offline/online Attribute‐based Encryption with Verifiable Outsourced Decryption

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Secure Attribute-Based Data Sharing for Resource-Limited Users in Cloud Computing

Blockchain-based efficient verifiable outsourced attribute-based encryption in cloud

Efficient Attribute-Based Data Sharing in Mobile Clouds

New Access Control Systems Based on Outsourced Attribute-Based Encryption

Verifiable Outsourced Attribute-Based Encryption Scheme for Cloud-Assisted Mobile E-health System

Attribute-Based Online/Offline Encryption with Outsourcing Decryption.

Cloud-aided Online/offline Ciphertext-Policy Attribute-Based Encryption in the Standard Model

An Efficient and Revocable Storage CP-ABE Scheme in the Cloud Computing

Revocable, dynamic and decentralized data access control in cloud storage

Fuzzy Encryption in Cloud Computation: Efficient Verifiable Outsourced Attribute-Based Encryption

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

Attribute-Based Data Sharing with Flexible and Direct Revocation in Cloud Computing.

A Flexible KP-ABE Suit for Mobile User Realizing Decryption Outsourcing and Attribute Revocation