Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

How Location-Aware Access Control Affects User Privacy and Security in Cloud Computing Systems

A Clustering-Based Location Privacy Protection Scheme for Pervasive Computing.

SecLoc: Securing Location-Sensitive Storage in the Cloud.

Protecting Location Privacy for Task Allocation in Ad Hoc Mobile Cloud Computing.

Cognitive Approach for Location Privacy Protection

A Privacy Preserving Location Service for Cloud-of-things System

Cloud-Based Access Control Including Time and Location

Location privacy attacks and defenses in cloud-enabled internet of vehicles.

Access control for cloud-based eHealth social networking: design and evaluation

Survey on Access Control Technologies for Cloud Computing

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Resource-centric Dynamic Access Control in Cloud

Access Control Security Model Based on Behavior in Cloud Computing Environment

Using Risk in Access Control for Cloud-Assisted eHealth

Privacy-preserving Computation for Location-Based Information Survey Via Mobile Cloud Computing

Mobile cloud computing based privacy protection in location-based information survey applications

Comprehensive Review: Privacy Protection of User in Location-Aware Services of Mobile Cloud Computing

Key Techniques of Access Control for Cloud Computing

Enabling Secure Location-Based Services in Mobile Cloud Computing

Cloud Edge-Client Collaborative Trajectory Privacy Protection System and Technology

LABAC: A Location-Aware Attribute-Based Access Control Scheme for Cloud Storage.