Abstract:Cloud computing is the widespread acceptance of a promising paradigm offering a substantial amount of storage and data services on demand. To preserve data confidentiality, many cryptosystems have been introduced. However, current solutions are incompatible with the resource-constrained end-devices because of a variety of vulnerabilities in terms of practicality and security. In this article, we propose a practical and secure data-sharing system by introducing a new design of attribute-based encryption with verifiable outsourced decryption-attribute-based encryption (VO-ABE for short). Our system offers: (1) data sharing at a fine-grained level; (2) a scalable key issuing protocol without any secure channel; (3) a verifiable outsourced decryption mechanism for resource-constrained end-devices against the malicious cloud service provider; and (4) adaptive security against the real-world attacks. To formalize our solution with cryptographic analysis, we present the formal definition of VO-ABE and its concrete construction with provable security. In particular, our design leverages the techniques of the traditional ABE, verifiable outsourced decryption, and randomness extractor to support fine-grained access control, cost-effective data sharing, and security assurance with high entropy. Moreover, our design is provably secure in the adaptive model under the standard assumption, which offers a stronger security guarantee since the state-of-the-art solution is selectively secure under the non-standard assumption and suffers from a variety of real-world attacks. The implementation and evaluation demonstrate that our solution enjoys superior functionality and better performance than the relevant solutions. More importantly, our solution is compatible with the resource-constrained end-devices since the decryption mechanism takes around 1.1 ms and is 22.7x faster than the state-of-the-art solution.

Secure and Practical Functional Dependency Discovery in Outsourced Databases.

Database Fragmentation with Confidentiality Constraints: A Graph Search Approach

Encrypted Databases Made Secure Yet Maintainable

EulerFD: an Efficient Double-Cycle Approximation of Functional Dependencies

Dynamic Functional Dependency Discovery with Dynamic Hitting Set Enumeration

ServeDB: Secure, Verifiable, and Efficient Range Queries on Outsourced Database

IoT data security in outsourced databases: A survey of verifiable database

Multiple Sensitive Association Protection in the Outsourced Database

Differential Privacy Enhanced Dynamic Searchable Symmetric Encryption for Cloud Environments.

Integrated Security over Outsourced Database Services Based on Encryption

Scalable Functional Dependencies Discovery from Big Data

Enforcing Data Privacy in Outsourced Database Services

Attribute fragmentation and encryption to enforce privacy in outsourced database services

Integrated privacy protection and access control over outsourced database services

Secure Storage and Fuzzy Query over Encrypted Databases.

Design and Implementation of Encrypted Data in Outsourced Database

SQL queries over encrypted databases: a survey

DOAS: Efficient data owner authorized search over encrypted cloud data

An Adaptive Secure and Practical Data Sharing System with Verifiable Outsourced Decryption

d-DSE: Distinct Dynamic Searchable Encryption Resisting Volume Leakage in Encrypted Databases

Privacy protection in outsourced database services