Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

Secure and Verifiable Data Access Control Scheme with Policy Update and Computation Outsourcing for Edge Computing

A Lightweight and Verifiable Access Control Scheme with Constant Size Ciphertext in Edge-Computing-Assisted IoT

Secure and Verifiable Policy Update Outsourcing for Big Data Access Control in the Cloud

Flexible and Controllable Access Policy Update for Encrypted Data Sharing in the Cloud

An Efficient Attribute-Based Encryption Scheme with Policy Update and File Update in Cloud Computing

An Efficient and Outsourcing-Supported Attribute-Based Access Control Scheme for Edge-Enabled Smart Healthcare.

Enabling efficient access control with dynamic policy updating for big data in the cloud

Partially Policy-Hidden Attribute-Based Broadcast Encryption with Secure Delegation in Edge Computing.

An Adaptive Access Control Scheme Based on Trust Degrees for Edge Computing

Service-Oriented and Cloud Computing

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

A secure and efficient outsourced computation on data sharing scheme for privacy computing

A Secure and Verifiable Outsourced Access Control Scheme in Fog-Cloud Computing

A Practical and Efficient Bidirectional Access Control Scheme for Cloud-Edge Data Sharing

Lightweight Fine-Grained Multiowner Search over Encrypted Data in Cloud-Edge Computing

New Access Control Systems Based on Outsourced Attribute-Based Encryption

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Dynamic Data Access Control for Multi-Authority Cloud Storage.

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

An Efficient Attribute-Based Encryption Scheme with Data Security Classification in the Multi-Cloud Environment

CP-ABE with Multi-Authorization Centers and Supporting Outsourcing Encryption and Decryption