Abstract:With recent advances in cloud computing, mobile devices are increasingly being used to record patient physiological parameters, and transfer them to a cloud‐based hospital information system, for access control mediation over a variety of stakeholders. In such a cloud‐based architecture, the patient must specify an access policy for a group of authorized parties towards its outsourced data. Multiauthority ciphertext‐policy attribute‐based encryption (CP‐ABE) was provided as an innovative cloud‐based access control cryptographic primitive to tackle the key escrow issue in a centralized architecture, and boost flexibility through cross‐domain attributes management. Existing works, however, still have glaring drawbacks. First, they still rely on a trusted authority to generate and distribute user secret keys. Second, they do not simultaneously provide encryption, decryption, or revocation outsourcing, resulting in high processing and communication cost for both the data sender and the data receiver. Third, they do not support both user and attribute revocation, and the integrity of ciphertext downloaded from the cloud is not always verified at the user end. As a result, this paper exploits the dummy attribute technique and introduces a novel, efficient, and secure multiauthority ciphertext‐policy ABE method for mediating access control over medical data, in the mobile cloud. The ciphertext access policy enforcement, partial ciphertext decryption, and both the user and attribute indirect revocation updates are safely outsourced to the cloud server in this study. Theoretical analysis demonstrates that our scheme is efficient and verifiable, and we prove that our construction is secure under the decisional bilinear Diffie‐Hellman assumption.

A Revocable and Fair Outsourcing Attribute-Based Access Control Scheme in Metaverse

New Access Control Systems Based on Outsourced Attribute-Based Encryption

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

A Revocable Outsourcing Attribute-Based Encryption Scheme.

A metaverse-oriented CP-ABE scheme with cryptographic reverse firewall

Attribute-Based Access Control with Efficient and Secure Attribute Revocation for Cloud Data Sharing Service

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

An Efficient and Revocable Storage CP-ABE Scheme in the Cloud Computing

Fine-Grained Access Control For Cloud Data Sharing By Secure And Efficient Attribute-Revocable Ciphertext-Policy Attribute-Based Encryption

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Practical Attribute-Based Encryption: Outsourcing Decryption, Attribute Revocation and Policy Updating

A Traceable Outsourcing CP-ABE Scheme with Attribute Revocation

A Blockchain-based Access Control Scheme with Multiple Attribute Authorities for Secure Cloud Data Sharing.

An efficient fine-grained data access control system with a bounded service number

Attribute-Based Encryption With Payable Outsourced Decryption Using Blockchain and Responsive Zero Knowledge Proof

Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment

A Flexible KP-ABE Suit for Mobile User Realizing Decryption Outsourcing and Attribute Revocation

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

EVOAC-HP: An Efficient and Verifiable Outsourced Access Control Scheme with Hidden Policy

Revocable, dynamic and decentralized data access control in cloud storage

Blockchain-based efficient verifiable outsourced attribute-based encryption in cloud