Abstract:To secure cloud storage and enforce access control, data encryption has become essential, given the ever increasing cyber threat everywhere. Attribute-based Encryption (ABE) crypto systems are widely considered as a promising solution under such a context for its security strength, scalability and control flexibility. One major challenge, however, for applying ABE-based techniques in real world applications is its high overhead in various aspects. In this research, we are particularly concerned with the storage size expansion in existing ABE schemes. This combined with the vast-size nature of the cloud data poses an enormous challenge to the effective usage of the cloud data storage space and affects the utility of data deduplication. Normally, data deduplication is carried out based on identifying similar and even identical contents both within and between data files, however, these patterns will be destroyed after performing data encryption using any semantically secure encryption scheme including ABE. In this research, we focus on ciphertexts deduplication under ABE, which to our best knowledge is the first of such an effort. Our fundamental observation stems from the structure of ABE ciphertexts and the possible similarities among different access structures. We show how to design a secure ciphertext deduplication scheme based on a classical CP-ABE scheme by innovatively modifying the construction with a recursive algorithm, eliminating the duplicated secrets and adding additional randomness to some certain ciphertext. We then give a detailed analysis on the proposed scheme with respect to both efficiency and security. To thoroughly assess the performance of the proposed scheme, we also implement a prototype system and conduct comprehensive experiments, which shows that our ciphertext reduplication scheme could reduce up to 80% computation and storage cost in the best case.

Efficient Ciphertext Deduplication and Auditing Scheme with Attribute-based Encryption

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

A tunable emerald laser

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

Efficient CP-ABE Scheme With Shared Decryption in Cloud Storage

Block Level Cloud Data Deduplication Scheme Based on Attribute Encryption

Altered pathological progression of diaphragm and quadriceps muscle in TNF-deficient, dystrophin-deficient mice

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

Enhanced Data Confidentiality of Attribute-Based Encryption Scheme on Cloud Storage

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

Attribute Based Data Sharing with Attribute Revocation.

POSTER: Ciphertext-Policy Attribute-Based Encryption Method with Secure Decryption Key Generation and Outsourcing Decryption of ABE Ciphertexts

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

A revocable storage CP-ABE scheme with constant ciphertext length in cloud storage

Revocable, dynamic and decentralized data access control in cloud storage

Multi-Authority Attribute Based Encryption Scheme with Revocation.

A new verifiable outsourced ciphertext-policy attribute based encryption for big data privacy and access control in cloud

An efficient fine-grained data access control system with a bounded service number