Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

An Adaptively Secure and Efficient Data Sharing System for Dynamic User Groups in Cloud

Secure Data Access and Sharing Scheme for Cloud Storage

Share Your Data Carefree: an Efficient, Scalable and Privacy-Preserving Data Sharing Service in Cloud Computing

A Verifiable Short Secret Sharing Scheme Supporting General Access Structure

D-DOG: Securing Sensitive Data in Distributed Storage Space by Data Division and Out-Of-Order Keystream Generation

Achieve Distributed, Scalable and Effective Access Control in Cloud Storage Services

A General Framework to Design Secure Cloud Storage Protocol Using Homomorphic Encryption Scheme.

Security Enhancements for Data-Driven Systems: A Blockchain-Based Trustworthy Data Sharing Scheme

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

Forward Secure and Fine-grained Data Sharing for Mobile Crowdsensing

Ciphertext Storage Scheme Supporting Data Hierarchical Management and Control

Distributed Storage Scheme Based on Dynamic Searchable Encryption

Decentralized Secure Distributed Storage System

A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding

Secure Remote Storage through Authenticated Encryption

An Efficient and Secure Scheme for Dynamic Shared Data in Cloud

A Secure and Lightweight Fine-Grained Data Sharing Scheme for Mobile Cloud Computing

A Secure Data-Sharing Scheme for Privacy-Preserving Supporting Node–Edge–Cloud Collaborative Computation

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

Towards Data Isolation & Collaboration in Storage Cloud.