Abstract:With the rapid development and application of the Internet, traditional storage resources have been found unable to meet the growing demand for massive data storage. An increasing number of users have attempted to upload their data to third-party cloud servers for unified storage. Efficient deduplication and secure file sharing in the cloud have emerged as critical concerns. Moreover, users have always preferred to customize their passwords for encrypting and decrypting files, only sharing encrypted files when necessary. Based on this preference, a deterministic stepwise encryption algorithm was first designed. It was such that when the keys for the two steps of encryption satisfied a certain relationship, the two steps of encryption could be equivalent to a single encryption process. A novel key-customizable encrypted deduplication scheme with access control for cloud storage was proposed, utilizing the deterministic stepwise encryption algorithm to encrypt files and a ciphertext-policy attribute-based encryption algorithm to encrypt file keys. This scheme not only offered the flexibility to customize encryption and decryption keys for different users with the same files, but also ensured secure file sharing through a dynamic access control mechanism. Moreover, the optional access control component was made compatible with the majority of existing ciphertext-policy attribute-based encryption (CP-ABE) schemes, even allowing for different CP-ABE schemes within different attribute groups. Security analysis results show that the proposed scheme achieves the highest level of security under the current encrypted deduplication paradigm. Experimental and analytical results indicate that it effectively meets the practical needs of cloud service providers and users, and also achieves acceptable efficiency.

A Secure Revocable Identity-Based Proxy Re-encryption Scheme for Cloud Storage.

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

��计算中基于可转换代理签密的可证安全的认证协议

Privacy-Preserving Protocol for Data Stored in the Cloud

A No-Pairing Proxy Re-Encryption Scheme for Data Sharing in Untrusted Cloud.

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

A Key-insulated Proxy Re-encryption Scheme for Data Sharing in a Cloud Environment.

Revocable and Fog-Enabled Proxy Re-Encryption Scheme for IoT Environments

Pairing-Free Certificate-Based Proxy Re-Encryption Plus Scheme for Secure Cloud Data Sharing

Multi-Keyword Searchable Identity-Based Proxy Re-Encryption from Lattices

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

A Limited Proxy Re-encryption with Keyword Search for Data Access Control in Cloud Computing.

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

Revocable, dynamic and decentralized data access control in cloud storage

CCA-Secure Key-Aggregate Proxy Re-Encryption for Secure Cloud Storage

Weighted Attribute-Based Proxy Re-Encryption Scheme with Distributed Multi-Authority Attributes

A Restricted Proxy Re‐encryption with Keyword Search for Fine‐grained Data Access Control in Cloud Storage

Anonymous deduplication of encrypted data with proof of ownership in cloud storage

Proxy Re-Encryption Based Multi-Factor Access Control Scheme in Cloud

CloudKeyBank: Privacy and owner authorization enforced key management framework