Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Server-Aided Bilateral Access Control for Secure Data Sharing with Dynamic User Groups.

Expressive Bilateral Access Control for Internet-of-Things in Cloud-Fog Computing

Match in My Way: Fine-Grained Bilateral Access Control for Secure Cloud-Fog Computing

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

A Secure and Verifiable Outsourced Access Control Scheme in Fog-Cloud Computing

Fine-Grained Data Access Control Systems with User Accountability in Cloud Computing

A Secure and Lightweight Fine-Grained Data Sharing Scheme for Mobile Cloud Computing

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

A searchable personal health records framework with fine-grained access control in cloud-fog computing

Secured Fine-Grained Selective Access to Outsourced Cloud Data in IoT Environments.

Secure, Efficient and Revocable Data Sharing Scheme for Vehicular Fogs

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Secure Attribute-Based Data Sharing for Resource-Limited Users in Cloud Computing

A Practical and Efficient Bidirectional Access Control Scheme for Cloud-Edge Data Sharing

Revocable and Privacy-Preserving Decentralized Data Sharing Framework for Fog-Assisted Internet of Things

Achieving an Effective, Scalable and Privacy-Preserving Data Sharing Service in Cloud Computing

An Adaptively Secure and Efficient Data Sharing System for Dynamic User Groups in Cloud

New Access Control Systems Based on Outsourced Attribute-Based Encryption

Method of Secure, Scalable, and Fine-Grained Data Access Control with Efficient Revocation in Untrusted Cloud

Access Control Based on ABE and IBS for the Cloud Outsourced Data

An Attribute-Based Encryption Scheme to Secure Fog Communications.