Abstract:Cloud computing has become the priority for users to store and share data due to its numerous tempting advantages. The "encryption-before-outsourcing" mechanism is necessary to protect data privacy against the semi-trusted cloud server. Key-Aggregate Cryptosystem (KAC) is a novel encryption paradigm for cloud data sharing. It enables users to decrypt multiple data encrypted with different keys using a constant size aggregate key. When selectively sharing data, the KAC effectively addresses the challenges of expensive key management in symmetric encryption (SE) and eliminates the need for multiple copies of ciphertexts in public key encryption (PKE). However, previous KAC schemes can only control what data users are allowed to receive by distributing aggregate keys, but not what data users can send. This limitation could potentially allow a malicious data owner to leak sensitive information by distributing aggregate keys to unauthorized users. Therefore, this paper aims to design the key-aggregate cryptosystem with bidirectional access control, which can control both what the user can receive and what the data owner can send. Inspired by access control encryption (ACE), we first propose a key-aggregate based access control encryption with user level (KA-ACE-UL) system that can control whether a sender can share his data with a receiver. Then, we investigate a finer-grained access control policy and propose a key-aggregate based access control encryption with user-data level (KA-ACE-UDL) system that can control the data classes a sender can share with a receiver. We instantiate the KA-ACE-UL and KA-ACE-UDL schemes based on Chu et al.'s KAC scheme. We prove our proposed schemes can achieve both secure data storage and controlled data sharing, ensuring security against unauthorized receivers and malicious senders. Finally, theoretical performance analysis and practical experiments show the efficiency of our proposed schemes.

New Methods for the Implementation of Double-Operator Conditional Access System by Key

Dynamic Authentication with Sensory Information for the Access Control Systems.

A Key Distribution Scheme Base on Dual-grouping Access

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Analysis of Key Transportation Mechanism for Conditional Access System

Dynamic Security Access Control Model Based on System Reliability

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

Hierarchical Key Distribution Scheme for Conditional Access System in DTV Broadcasting

Conditional Access Technique Based on Iterative Secret Key Encryption

A Conditional Access System for IP Networking TV Systems

On key distribution management for conditional access system on pay-TV system

Multiple access algorithm based on channel sensing and prediction

Design and Implementation of Conditional Access System for Mobile Streaming Media

Secure communication protocol between set-top box and smart card in conditional access system

A Key Distribution Scheme Based on Chinese Remainder Theorem and Dynamic Grouping Management

Key-aggregate based access control encryption for flexible cloud data sharing

An Access Control System Based on State Secret Code Algorithm and CPU Card

Access Control in New Network Environment

Towards Efficient and Secure Access Control System for Mobile Cloud Computing

Technique of Access Control Based on B/S System

Formal analysis and systematic construction of two-factor authentication scheme (short paper)