Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Comments on “circuit Ciphertext-Policy Attribute-Based Hybrid Encryption with Verifiable Delegation”

Comments on "Verifiable and Exculpable Outsourced Attribute-Based Encryption for Access Control in Cloud Computing".

Analysis of an ABE Scheme with Verifiable Outsourced Decryption

Fuzzy Encryption in Cloud Computation: Efficient Verifiable Outsourced Attribute-Based Encryption

Attribute-Based Encryption with Efficient Verifiable Outsourced Decryption

Offline/online Attribute‐based Encryption with Verifiable Outsourced Decryption

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Securely Outsourcing Attribute-Based Encryption with Checkability

POSTER: Ciphertext-Policy Attribute-Based Encryption Method with Secure Decryption Key Generation and Outsourcing Decryption of ABE Ciphertexts

Fully Secure Ciphertext-Policy Attribute Based Encryption With Security Mediator

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

A Revocable Outsourcing Attribute-Based Encryption Scheme.

A Traceable Outsourcing CP-ABE Scheme with Attribute Revocation

Partially Policy-Hidden Attribute-Based Broadcast Encryption with Secure Delegation in Edge Computing.

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

A Flexible KP-ABE Suit for Mobile User Realizing Decryption Outsourcing and Attribute Revocation

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

Verifiable and Hybrid Attribute-Based Proxy Re-Encryption for Flexible Data Sharing in Cloud Storage

Defending Against Key Exposure in Attribute-Based Encryption

Practical Attribute-Based Encryption: Outsourcing Decryption, Attribute Revocation and Policy Updating

Blockchain-based efficient verifiable outsourced attribute-based encryption in cloud