Abstract:Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by, on one hand, defining and enforcing access policies based on data attributes, and, on the other hand, allowing the data owner to delegate most of the computation tasks involved in fine-grained data access control to untrusted cloud servers without disclosing the underlying data contents. We achieve this goal by exploiting and uniquely combining techniques of attribute-based encryption (ABE), proxy re-encryption, and lazy re-encryption. Our proposed scheme also has salient properties of user access privilege confidentiality and user secret key accountability. Extensive analysis shows that our proposed scheme is highly efficient and provably secure under existing security models.

A Fine-grained Attribute-based Encryption Cloud Access Control Scheme

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

Hierarchical Attribute-Based Encryption For Fine-Grained Access Controlin Cloud Storage Services

New Constructions of Hierarchical Attribute-Based Encryption for Fine-Grained Access Control in Cloud Computing.

Decentralized Attribute-based Encryption Access Control in Cloud Storage Environment

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Method of Secure, Scalable, and Fine-Grained Data Access Control with Efficient Revocation in Untrusted Cloud

Enhanced Cloud Storage Access Control Scheme Based on Attribute

A CP-ABE scheme with system attributes revocation in cloud storage

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

An Efficient Access Control Scheme Based on CP-ABE with Supporting Attribute Change in Cloud Storage Systems.

Multi-authority attribute-based encryption access control scheme with policy hidden for cloud storage

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Securing Outsourced Data in the Multi-Authority Cloud with Fine-Grained Access Control and Efficient Attribute Revocation

Dynamic Data Access Control for Multi-Authority Cloud Storage.

From Rbac to Abac: Constructing Flexible Data Access Control for Cloud Storage Services

Multi-authority fine-grained access control with accountability and its application in cloud.

Efficient Decentralized Attribute-Based Access Control for Cloud Storage with User Revocation.

Attribute-based Fine-Grained Access Control with Efficient Revocation in Cloud Storage Systems.