Abstract:Cloud file sharing (CFS) has become one of the important tools for enterprises to reduce technology operating costs and improve their competitiveness. Due to the untrustworthy cloud service provider, access control and security issues for sensitive data have been key problems to be addressed. Current solutions to these issues are largely related to the traditional public key cryptography, access control encryption or attribute-based encryption based on the bilinear mapping. The rapid technological advances in quantum algorithms and quantum computers make us consider the transition from the tradtional cryptographic primitives to the post-quantum counterparts. In response to these problems, we propose a lattice-based Ciphertext-Policy Attribute-Based Encryption(CP-ABE) scheme, which is designed based on the ring learing with error problem, so it is more efficient than that designed based on the learing with error problem. In our scheme, the indirect revocation and binary tree-based data structure are introduced to achieve efficient user revocation and dynamic management of user groups. At the same time, in order to further improve the efficiency of the scheme and realize file sharing across enterprises, the scheme also allows multiple authorities to jointly set up system parameters and manage distribute keys. Furthermore, by re-randomizing the user's private key and update key, we achieve decryption key exposure resistance(DKER) in the scheme. We provide a formal security model and a series of security experiments, which show that our scheme is secure under chosen-plaintext attacks. Experimental simulations and evaluation analyses demonstrate the high efficiency and practicality of our scheme.

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

An efficient fine-grained data access control system with a bounded service number

Revocable attribute-based encryption from standard lattices

Multi-Authority Attribute Based Encryption Scheme with Revocation.

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Unbounded and Efficient Revocable Attribute-Based Encryption With Adaptive Security for Cloud-Assisted Internet of Things

Revocable, dynamic and decentralized data access control in cloud storage

Attribute-based Fine-Grained Access Control with Efficient Revocation in Cloud Storage Systems.

Attribute Based Data Sharing with Attribute Revocation.

Searchable and revocable multi-data owner attribute-based encryption scheme with hidden policy in cloud storage

A revocable storage CP-ABE scheme with constant ciphertext length in cloud storage

Attribute-Based Hierarchical Access Control with Extendable Policy

Efficiently Multi-User Searchable Encryption Scheme with Attribute Revocation and Grant for Cloud Storage

Revocable and Traceable Undeniable Attribute-Based Encryption in Cloud-Enabled E-Health Systems

Efficient Revocable Storage Attribute-based Encryption with Arithmetic Span Programs in Cloud-assisted Internet of Things

An attribute based encryption scheme with fine-grained attribute revocation

Attribute-based Encryption for Cloud Computing Access Control

Ciphertext-Policy Attribute-Based Encryption with User and Authority Accountability.

HUAP: Practical Attribute-based Access Control Supporting Hidden Updatable Access Policies for Resource-Constrained Devices

Key escrow-free attribute based encryption with user revocation

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage