Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

Attribute-Based Privacy-Preserving Data Sharing for Dynamic Groups in Cloud Computing

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

A Cloud Approach for Secure Multi Data sharing between the Users

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

A Dynamic Secure Group Sharing Framework in Public Cloud Computing

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

Achieving Privacy-preserving Data Sharing for Dual Clouds

A secure and efficient outsourced computation on data sharing scheme for privacy computing

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Secure and Reliable Data sharing scheme using Attribute-based Encryption with weighted attribute-based Encryption in Cloud Environment

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Towards Efficient Sharing of Encrypted Data in Cloud-Based Mobile Social Network

AnonyControl: Control Cloud Data Anonymously with Multi-Authority Attribute-Based Encryption

Functional Broadcast Encryption with Applications to Data Sharing for Cloud Storage

Control Cloud Data Access Privilege and Anonymity with Fully Anonymous Attribute-Based Encryption.

Shared Authority Based Privacy-Preserving Authentication Protocol in Cloud Computing

An Expressive Fully Policy-Hidden Ciphertext Policy Attribute-Based Encryption Scheme with Credible Verification Based on Blockchain

An ORAM-based Privacy Preserving Data Sharing Scheme for Cloud Storage

Anonymous deduplication of encrypted data with proof of ownership in cloud storage

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing