Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Efficient Oblivious Transfer Construction Via Multiple Bits Dual-Mode Cryptosystem for Secure Selection in the Cloud

A General Framework to Design Secure Cloud Storage Protocol Using Homomorphic Encryption Scheme.

A Dual Privacy-Preservation Scheme for Cloud-Based Ehealth Systems

An Efficient Single Server-Aided K-out-of-n Oblivious Transfer Protocol

Outsourcing Eigen-Decomposition and Singular Value Decomposition of Large Matrix to a Public Cloud

PEO-Store: Delegation-Proof based Oblivious Storage with Secure Redundancy Elimination

Publicly Verifiable Secure Multi-Party Computation Framework Based on Bulletin Board

Obfuscating encrypted threshold signature algorithm and its applications in cloud computing

Cryptographic Public Verification of Data Integrity for Cloud Storage Systems

Cut-and-Choose Bilateral Oblivious Transfer and Its Application

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

Achieving Privacy-preserving Data Sharing for Dual Clouds

Dual-Mode Encryption for UC-Secure String OT from Learning with Errors

DOPIV: Post-Quantum Secure Identity-Based Data Outsourcing with Public Integrity Verification in Cloud Storage

Experimental Secure Multiparty Computation from Quantum Oblivious Transfer with Bit Commitment

Oblivious Transfer Based on NTRUEncrypt

A Lightweight Blockchain-based Public-Key Authenticated Encryption with Multi-Keyword Search for Cloud Computing

CryptCloud$^+$+: Secure and Expressive Data Access Control for Cloud Storage

Ensuring Data Storage Security in Cloud Computing.

Quantum Oblivious Transfer Based on POVM Measurements.

Secure Data Access and Sharing Scheme for Cloud Storage