Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Ciphertext-Policy Attribute-Based Signcryption with Verifiable Outsourced Designcryption for Sharing Personal Health Records

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

Group-Oriented Cryptosystem for Personal Health Records Exchange and Sharing

A secure and efficient outsourced computation on data sharing scheme for privacy computing

Secure and Efficient Personal Health Record Scheme Using Attribute-Based Encryption

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Designing cloud-based electronic health record system with attribute-based encryption

An Attribute-Based Encryption Scheme with Multiple Authorities on Hierarchical Personal Health Record in Cloud.

Dynamic access policy in cloud-based personal health record (PHR) systems

Secure Decentralized Attribute-Based Sharing of Personal Health Records with Blockchain

Efficient Attribute-Based Searchable Encryption with Policy Hiding over Personal Health Records

Patient-centric medical service matching with fine-grained access control and dynamic user management

An efficient fine-grained data access control system with a bounded service number

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

Efficient functional encryption and proxy re-cryptography for secure public cloud data sharing

PHAS-HEKR-CP-ABE: Partially Policy-Hidden CP-ABE with Highly Efficient Key Revocation in Cloud Data Sharing System

Verifiable Outsourced Attribute-Based Encryption Scheme for Cloud-Assisted Mobile E-health System

Towards Efficient Sharing of Encrypted Data in Cloud-Based Mobile Social Network

An Efficient Certificateless Public Key Encryption Scheme with Authorized Equality Test in Healthcare Environments