Abstract:To secure cloud storage and enforce access control, data encryption has become essential, given the ever increasing cyber threat everywhere. Attribute-based Encryption (ABE) crypto systems are widely considered as a promising solution under such a context for its security strength, scalability and control flexibility. One major challenge, however, for applying ABE-based techniques in real world applications is its high overhead in various aspects. In this research, we are particularly concerned with the storage size expansion in existing ABE schemes. This combined with the vast-size nature of the cloud data poses an enormous challenge to the effective usage of the cloud data storage space and affects the utility of data deduplication. Normally, data deduplication is carried out based on identifying similar and even identical contents both within and between data files, however, these patterns will be destroyed after performing data encryption using any semantically secure encryption scheme including ABE. In this research, we focus on ciphertexts deduplication under ABE, which to our best knowledge is the first of such an effort. Our fundamental observation stems from the structure of ABE ciphertexts and the possible similarities among different access structures. We show how to design a secure ciphertext deduplication scheme based on a classical CP-ABE scheme by innovatively modifying the construction with a recursive algorithm, eliminating the duplicated secrets and adding additional randomness to some certain ciphertext. We then give a detailed analysis on the proposed scheme with respect to both efficiency and security. To thoroughly assess the performance of the proposed scheme, we also implement a prototype system and conduct comprehensive experiments, which shows that our ciphertext reduplication scheme could reduce up to 80% computation and storage cost in the best case.

Cost-Effective and Scalable Data Sharing in Cloud Storage Using Hierarchical Attribute-Based Encryption with Forward Security.

Attribute-Based Hierarchical Access Control with Extendable Policy

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Secure and Reliable Data sharing scheme using Attribute-based Encryption with weighted attribute-based Encryption in Cloud Environment

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

How to use attribute-based encryption to implement role-based access control in the cloud.

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Enhancing Attribute-Based Encryption with Attribute Hierarchy

Revocable, dynamic and decentralized data access control in cloud storage

Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption

Efficient and accountable anti-leakage attribute-based encryption scheme for cloud storage

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

Enforcing Scalable and Dynamic Hierarchical Access Control in Cloud Computing

Efficient CP-ABE Scheme With Shared Decryption in Cloud Storage

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Towards Efficient Sharing of Encrypted Data in Cloud-Based Mobile Social Network

Enhanced Data Confidentiality of Attribute-Based Encryption Scheme on Cloud Storage

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control