Abstract:People endorse the great power of cloud computing, but cannot fully trust the cloud providers to host privacy-sensitive data, due to the absence of user-to-cloud controllability. To ensure confidentiality, data owners outsource encrypted data instead of plaintexts. To share the encrypted files with other users, ciphertext-policy attribute-based encryption (CP-ABE) can be utilized to conduct fine-grained and owner-centric access control. But this does not sufficiently become secure against other attacks. Many previous schemes did not grant the cloud provider the capability to verify whether a downloader can decrypt. Therefore, these files should be available to everyone accessible to the cloud storage. A malicious attacker can download thousands of files to launch economic denial of sustainability (EDoS) attacks, which will largely consume the cloud resource. The payer of the cloud service bears the expense. Besides, the cloud provider serves both as the accountant and the payee of resource consumption fee, lacking the transparency to data owners. These concerns should be resolved in real-world public cloud storage. In this paper, we propose a solution to secure encrypted cloud storages from EDoS attacks and provide resource consumption accountability. It uses CP-ABE schemes in a black-box manner and complies with arbitrary access policy of the CP-ABE. We present two protocols for different settings, followed by performance and security analysis.

Security and Efficiency Data Sharing Scheme for Cloud Storage

Security Sharing Scheme for Encrypted Data in Cloud Storage

Improving Security and Privacy Attribute Based Data Sharing in Cloud Computing

EABDS: Attribute-Based Secure Data Sharing with Efficient Revocation in Cloud Computing

Efficient CP-ABE Scheme With Shared Decryption in Cloud Storage

Multi-authority attribute-based encryption access control scheme with policy hidden for cloud storage

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

A Privacy-Preserving Data Sharing System with Decentralized Attribute-based Encryption Scheme

Privacy-Preserving Decentralized Access Control for Cloud Storage Systems

Ciphertext-Policy Attribute-Based Access Control with Effective User Revocation for Cloud Data Sharing System.

Efficient Attribute-Based Data Sharing Scheme with Hidden Access Structures

Achieving an Effective, Scalable and Privacy-Preserving Data Sharing Service in Cloud Computing

Achieve Distributed, Scalable and Effective Access Control in Cloud Storage Services

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

Combining Data Owner-Side and Cloud-Side Access Control for Encrypted Cloud Storage.

CryptCloud$^+$+: Secure and Expressive Data Access Control for Cloud Storage

An Efficient Access Control Scheme Based on CP-ABE with Supporting Attribute Change in Cloud Storage Systems.

Cloud Storage Access Control Scheme of Ciphertext Algorithm Based on Digital Envelope

Efficient Attribute-Based Data Sharing in Mobile Clouds

Data Access Control Protocol for the Cloud Computing based on Ciphertext-policy Attribute based Encryption (CP-ABE)

An Efficient File Hierarchy Attribute-Based Encryption Scheme in Cloud Computing