Abstract:Cloud computing has become the priority for users to store and share data due to its numerous tempting advantages. The "encryption-before-outsourcing" mechanism is necessary to protect data privacy against the semi-trusted cloud server. Key-Aggregate Cryptosystem (KAC) is a novel encryption paradigm for cloud data sharing. It enables users to decrypt multiple data encrypted with different keys using a constant size aggregate key. When selectively sharing data, the KAC effectively addresses the challenges of expensive key management in symmetric encryption (SE) and eliminates the need for multiple copies of ciphertexts in public key encryption (PKE). However, previous KAC schemes can only control what data users are allowed to receive by distributing aggregate keys, but not what data users can send. This limitation could potentially allow a malicious data owner to leak sensitive information by distributing aggregate keys to unauthorized users. Therefore, this paper aims to design the key-aggregate cryptosystem with bidirectional access control, which can control both what the user can receive and what the data owner can send. Inspired by access control encryption (ACE), we first propose a key-aggregate based access control encryption with user level (KA-ACE-UL) system that can control whether a sender can share his data with a receiver. Then, we investigate a finer-grained access control policy and propose a key-aggregate based access control encryption with user-data level (KA-ACE-UDL) system that can control the data classes a sender can share with a receiver. We instantiate the KA-ACE-UL and KA-ACE-UDL schemes based on Chu et al.'s KAC scheme. We prove our proposed schemes can achieve both secure data storage and controlled data sharing, ensuring security against unauthorized receivers and malicious senders. Finally, theoretical performance analysis and practical experiments show the efficiency of our proposed schemes.

A Hierarchical Access Control Encryption Scheme Based on Partially Ordered Set.

Multi-level Access Control for Collaborative CAD

Achieving Simple, Secure and Efficient Hierarchical Access Control in Cloud Computing.

Attribute-Based Hierarchical Access Control with Extendable Policy

A Hierarchical Access Control Technology for Cloud Storage

An Efficient Solution for Hierarchical Access Control Problem in Cloud Environment

On the security of the hierarchical attribute based encryption scheme proposed by Wang et al

Access Control Encryption with Efficient Verifiable Sanitized Decryption

Hierarchy-aware ECC model for cloud

Enhancing Attribute-Based Encryption with Attribute Hierarchy

Access control encryption without sanitizers for Internet of Energy

Key-aggregate based access control encryption for flexible cloud data sharing

A secure solution on hierarchical access control

An Attribute-Based Encryption Scheme with Multiple Authorities on Hierarchical Personal Health Record in Cloud.

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

PHAS-HEKR-CP-ABE: Partially Policy-Hidden CP-ABE with Highly Efficient Key Revocation in Cloud Data Sharing System

Hierarchical Attribute-Based Encryption and Scalable User Revocation for Sharing Data in Cloud Servers

Ciphertext Storage Scheme Supporting Data Hierarchical Management and Control

Lattice‐Based CP‐ABE Access Control for SDS Constraint with Lazy Assignment of Attributes and Attribute Revocation

Enforcing Scalable and Dynamic Hierarchical Access Control in Cloud Computing

Decentralized Attribute-based Encryption Access Control in Cloud Storage Environment