Abstract:Cloud computing economically enables a fundamental paradigm of data service outsourcing, which provides lower up-front capital costs and less hands-on management. However, outsourcing data services to the commercial public cloud deprives customers' control over the systems that manage their data, raising security and privacy as the primary obstacles to the adoption of the cloud. To address these challenges, in this dissertation we explore the problem of secure and privacy-assured data service outsourcing in cloud computing. We aim at deploying the most fundamental data services including data storage, search, and sharing on the commercial public cloud, with built-in security and privacy assurance as well as high level service performance, usability, and scalability. Our contributions are as follows: Firstly, we focus on privacy-preserving secure cloud storage auditing to maintain strong storage correctness guarantee, given the difficulty that data files are no longer locally possessed by data owners. We first develop a random-masking sampling approach to allow a third party auditor to perform on-demand privacy-preserving storage correctness auditing on behalf of data owners, without violating owners' data privacy. For storage correctness assurance with data dynamics, we further investigate a novel sequence-enforced Merkle Hash Tree and manipulate it with the random sampling approach to support fully dynamic data operations. Secondly, we focus on privacy-assured and effective cloud data search services with strong privacy-assurance, while enjoying high service-level performance inherently demanded by the large number of data users and huge amount data files. We first investigate a widely applicable fuzzy/similarity keyword search problem, and develop a brand new symbol-based trie-traverse searching approach, where transformed fuzzy keywords extracted from data files are stored using a multi-way tree structure, while protecting keyword privacy. To enable search result relevance ranking, we further investigate secure ranked search, which facilitates efficient server-side result ranking without leaking any keyword related information. Thirdly, we study how to enable scalable and owner-controlled cloud data sharing services, given the challenge that data no longer resides on owners' trusted domain. We first associate data with a set of meaningful attributes, use logical composition of attributes to reflect fine-grained data access, and enforce owner's control via attribute-based encryption. For the inherent scalability requirement of cloud system, we further leverage the cloud as a mediated proxy, to which data owners can delegate most cumbersome data/user management workload, without affecting the underlying data confidentiality.

Service Outsourcing in F2C Architecture with Attribute-based Anonymous Access Control and Bounded Service Number

An efficient fine-grained data access control system with a bounded service number

New Access Control Systems Based on Outsourced Attribute-Based Encryption

k-Times Attribute-Based Anonymous Access Control for Cloud Computing

Csfc: Building Credible Service Function Chain on the Cloud

Expressive Bilateral Access Control for Internet-of-Things in Cloud-Fog Computing

TAFC: Time and Attribute Factors Combined Access Control on Time-Sensitive Data in Public Cloud

Secure Data Service Outsourcing in Cloud Computing

Conditional Anonymous Certificateless Public Auditing Scheme Supporting Data Dynamics for Cloud Storage Systems

Control Cloud Data Access Privilege and Anonymity with Fully Anonymous Attribute-Based Encryption.

Dual Attribute-Based Auditing Scheme for Fog Computing-Based Data Dynamic Storage With Distributed Collaborative Verification

Server-Aided Bilateral Access Control for Secure Data Sharing with Dynamic User Groups.

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Match in My Way: Fine-Grained Bilateral Access Control for Secure Cloud-Fog Computing

PTAC: Privacy-Preserving Time and Attribute Factors Combined Cloud Data Access Control with Computation Outsourcing

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

FASE: Fine-Grained Accountable and Space-Efficient Access Control for Multimedia Content with In-Network Caching.

A2UA: An Auditable Anonymous User Authentication Protocol Based on Blockchain for Cloud Services

SE-VFC: Secure and Efficient Outsourcing Computing in Vehicular Fog Computing.

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Fog-Aided Verifiable Privacy Preserving Access Control for Latency-Sensitive Data Sharing in Vehicular Cloud Computing