Abstract:As the next-generation internet paradigm, Web 3.0 aims to build a free, equal and decentralized Internet. Different from the data monopoly of the Internet oligarchy in Web 2.0, users in Web 3.0 are fairly endowed with the right to store, share, access and manage data. However, as data leakage, tampering and loss may result in a forfeiture of users’ data control, the security of data storage has become a key and essential prerequisite to safeguard users’ data rights. Blockchain has gained widespread acknowledgment as a prospective technology for solving data security. Nonetheless, its primary suitability for large-scale datasets is limited, owing to the substantial communication and storage overheads. Fortunately, a distributed data storage network (DDSN) can compensate for accommodating large-scale datasets by providing sizeable and inexpensive storage space. In this article, we first summarize the data storage advantages of blockchain and DDSN, and analyze their security challenges in terms of access control, authenticity and confidentiality. To address these challenges, we propose a general and versatile data security storage framework, where we adopt ciphertext-policy attribute-based encryption (CP-ABE) to enable user-centric fine-grained access control and decentralized authorization. Furthermore, to reduce storage costs while protecting data authenticity, we propose a ciphertext split storage model for CP-ABE. In this model, the CP-ABE ciphertext is divided into the attribute component and the data component based on functional structure to realize on-chain/off-chain split storage. In addition, by embedding the ambiguity factor required for decryption and the attributes in the access policy into the index, we design an efficient attribute-based keyword search mechanism to resolve the conflict between confidentiality and availability caused by encryption. Finally, we demonstrate the effective performance of the proposed framework through numerical results.

Robust and Scalable Data Access Control in D2D Communications

Adaptive Multimedia Data Forwarding for Privacy Preservation in Vehicular Ad-Hoc Networks.

A Distributed Publisher-Driven Secure Data Sharing Scheme for Information-Centric IoT.

EAP-DDBA: Efficient Anonymity Proximity Device Discovery and Batch Authentication Mechanism for Massive D2D Communication Devices in 3GPP 5G HetNet

A Lightweight and Verifiable Access Control Scheme with Constant Size Ciphertext in Edge-Computing-Assisted IoT

Dynamic Data Access Control for Multi-Authority Cloud Storage.

Improving Wireless Physical Layer Security Via D2D Communication

Achieve Distributed, Scalable and Effective Access Control in Cloud Storage Services

Secure Data Access Control for Fog Computing Based on Multi-Authority Attribute-Based Signcryption with Computation Outsourcing and Attribute Revocation.

DAC-MACS: Effective Data Access Control for Multi-Authority Cloud Storage Systems

Secrecy Ensured Socially Aware Resource Allocation in Device-to-Device Communications Underlaying HetNet

An Anonymous and Secure Data Transmission Mechanism With Trajectory Tracking for D2D Relay Communication in 3GPP 5G Networks

Secure Multi-Authority Data Access Control Scheme in Cloud Storage System Based on Attribute-Based Signcryption

FDO-ABE: A Fully Decentralized Lightweight Access Control Architecture for Mobile Edge Computing

Adaptive Power And Access Control For Physical Security Of Heterogeneous Cellular Network

A Secure and Lightweight Fine-Grained Data Sharing Scheme for Mobile Cloud Computing

Access Control for Machine-Type Communication Assisted by D2D in Heterogeneous Networks

Revocable Attribute-Based Data Storage in Mobile Clouds

Joint Power and Access Control for Physical Layer Security in D2d Communications Underlaying Cellular Networks

Enabling Security-Aware D2D Spectrum Resource Sharing for Connected Autonomous Vehicles.

Towards Secure Data Storage in Web 3.0: Ciphertext-Policy Attribute-Based Encryption