Abstract:Data access control is a challenging issue in public cloud storage systems. Ciphertext-policy attribute-based encryption (CP-ABE) has been adopted as a promising technique to provide flexible, fine-grained, and secure data access control for cloud storage with honest-but-curious cloud servers. However, in the existing CP-ABE schemes, the single attribute authority must execute the time-consuming user legitimacy verification and secret key distribution, and hence, it results in a single-point performance bottleneck when a CP-ABE scheme is adopted in a large-scale cloud storage system. Users may be stuck in the waiting queue for a long period to obtain their secret keys, thereby resulting in low efficiency of the system. Although multiauthority access control schemes have been proposed, these schemes still cannot overcome the drawbacks of single-point bottleneck and low efficiency, due to the fact that each of the authorities still independently manages a disjoint attribute set. In this paper, we propose a novel heterogeneous framework to remove the problem of single-point performance bottleneck and provide a more efficient access control scheme with an auditing mechanism. Our framework employs multiple attribute authorities to share the load of user legitimacy verification. Meanwhile, in our scheme, a central authority is introduced to generate secret keys for legitimacy verified users. Unlike other multi-authority access control schemes, each of the authorities in our scheme manages the whole attribute set individually. To enhance security, we also propose an auditing mechanism to detect which attribute authority has incorrectly or maliciously performed the legitimacy verification procedure. Analysis shows that our system not only guarantees the security requirements but also makes great performance improvement on key generation.

An efficient fine-grained data access control system with a bounded service number

Attribute-based Fine-Grained Access Control with Efficient Revocation in Cloud Storage Systems.

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

A Boolean circuit-based revocable ciphertext policy attribute-based encryption scheme

Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment

An Attribute-Based Controlled Collaborative Access Control Scheme for Public Cloud Storage.

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

Efficient Outsourced Data Access Control with User Revocation for Cloud-Based IoT

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Revocable, dynamic and decentralized data access control in cloud storage

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Searchable and revocable multi-data owner attribute-based encryption scheme with hidden policy in cloud storage

A secure and efficient outsourced computation on data sharing scheme for privacy computing

Efficient and Secure Attribute-Based Access Control with Identical Sub-Policies Frequently Used in Cloud Storage

RAAC: Robust and Auditable Access Control with Multiple Attribute Authorities for Public Cloud Storage

Fine-grained Data Access Control with Attribute-Hiding Policy for Cloud-Based IoT.

Secure and Verifiable Policy Update Outsourcing for Big Data Access Control in the Cloud

Efficient lattice-based revocable attribute-based encryption against decryption key exposure for cloud file sharing

Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing

Attribute Based Data Sharing with Attribute Revocation.