Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

A Fine-Grained Authorized Keyword Secure Search Scheme with Efficient Search Permission Update in Cloud Computing

Fuzzy Keyword Search over Encrypted Cloud Data with Dynamic Fine-grained Access Control.

Keyword Search with Access Control over Encrypted Data in Cloud Computing

Altered pathological progression of diaphragm and quadriceps muscle in TNF-deficient, dystrophin-deficient mice

Enabling Secure and Efficient Ranked Keyword Search over Outsourced Cloud Data

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

Authorized Data Secure Access Scheme With Specified Time and Relevance Ranked Keyword Search for Industrial Cloud Platforms

An efficient multi-user multi-keyword fuzzy search scheme over encrypted cloud storage

Fuzzy Keyword Search over Encrypted Data in Cloud Computing.

A Restricted Proxy Re‐encryption with Keyword Search for Fine‐grained Data Access Control in Cloud Storage

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

Searchable and revocable multi-data owner attribute-based encryption scheme with hidden policy in cloud storage

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

A Secure Key-Aggregate Keyword Retrieval Scheme over Encrypted Data in Cloud Computing

VMKDO: Verifiable multi-keyword search over encrypted cloud data for dynamic data-owner

DOAS: Efficient data owner authorized search over encrypted cloud data

On the Security of Secure Keyword Search and Data Sharing Mechanism for Cloud Computing

An improved finegrained ciphertext policy based temporary keyword search on encrypted data for secure cloud storage

Scalable Fuzzy Keyword Ranked Search over Encrypted Data on Hybrid Clouds

SE-PPFM: A Searchable Encryption Scheme Supporting Privacy-Preserving Fuzzy Multikeyword in Cloud Systems

Multi-keyword ranked searchable encryption scheme with access control for cloud storage