Sage Journals: Discover world-class research

Abstract

Cloud computing, which provides quite inexpensive and dynamically scalable computing services via network and communication infrastructures, is increasingly important for future information and communication technologies. At the same time, it brings many new challenges for data security and access control when sensitive data are shared and stored on cloud servers. To protect the data privacy, cryptographic methods are usually used. Attribute-based encryption is a good way to implement access control. However, in practical application, efficiency of attribute-based encryption schemes is rather low due to a large number of algebraic operations. Thus, it is very important to improve efficiency of user addition/revocation and file re-encryption. In this paper we introduce an improved data access control scheme based on attribute-based encryption. Our scheme significantly improves the efficiency of adding and revoking user access to the cloud.

Keywords

Efficiency access control attribute-based encryption cloud computing

Get full access to this article

View all access options for this article.

References

[1]

M.A.

Azim and

Kabir, Availability study of M:N automatic protection switching scheme in WDM networks, Journal of High Speed Networks 18(1) (2011), 1–13.

[2]

Bethencourt,

Sahai and

Waters, Ciphertext-policy attribute-based encryption, in: Security and Privacy, Vol. 3494, Springer, 2007, pp. 321–334.

[3]

Boldyreva,

Goyal and

Kumar, Identity-based encryption with efficient revocation, in: Proceedings of the 15th ACM Conference on Computer and Communications Security, New York, NY, USA, October 2008, 2008, pp. 417–426.

[4]

Castiglione,

De Santis and

Masucci, Hierarchical and shared key assignment, in: 2014 17th International Conference on Network-Based Information Systems (NBiS), IEEE, 2014, pp. 263–270.

[5]

Castiglione,

A.D.

Santis and

Masucci, Key indistinguishability vs. strong key indistinguishability for hierarchical key assignment schemes, IEEE Transactions on Dependable and Secure Computing, Early Access (2015). doi:10.1109/TDSC.2015.2413415.

[6]

Chase and

S.S.M.

Chow, Improving privacy and security in multi-authority attribute-based encryption, in: Proceedings of the 16th ACM Conference on Computer and Communications Security, Chicago, IL, USA, November 2009, Springer, 2009, pp. 121–130.

[7]

Gorbunov,

Vaikuntanathan and

Wee, Attribute-based encryption for circuits, in: Proceedings of the 45th Annual ACM Symposium on Theory of Computing, New York, NY, USA, June 2013, 2013, pp. 545–554.

[8]

Goyal,

Pandey,

Sahai and

Waters, Attribute-based encryption for fine-grained access control of encrypted data, in: Proceedings of the 13th ACM Conference on Computer and Communications Security, New York, NY, USA, October 2006, Vol. 3494, ACM, 2006, pp. 89–98.

[9]

Han,

Susilo,

Mu,

Zhou and

M.H.

Au, PPDCP-ABE: Privacy-preserving decentralized ciphertext-policy attribute-based encryption, in: Proceedings of the 19th European Symposium on Research in Computer Security, Wroclaw, Poland, September 2014, Vol. 8713, Springer, 2014, pp. 73–90.

10.

[10]

Hohenberger and

Waters, Online/offline attribute-based encryption, in: Proceedings of the 17th International Conference on Practice and Theory in Public-Key Cryptography, Buenos Aires, Argentina, March 2014, Vol. 8383, Springer, 2014, pp. 293–310.

11.

[11]

Kapadia,

P.P.

Tsang and

S.W.

Smith, Attribute-based publishing with hidden credentials and hidden policies, in: Network and Distributed System Security Symposium (NDSS), 2007, pp. 179–192.

12.

[12]

Lai,

R.H.

Deng,

Li and

Weng, Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption, in: Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, ACM, New York, NY, USA, 2014, pp. 239–248.

13.

[13]

Li,

Zhou and

Feng, Capturing the object behaviour for storage system evaluation, International Journal of High Performance Computing and Networking 6(3,4) (2010), 226–233.

14.

[14]

Li,

Ren,

Zhu and

Wan, Privacy-aware attribute-based encryption with user accountability, in: Proceedings of the 12th International Conference, ISC 2009, Pisa, Italy, September 2009, Vol. 5735, Springer, 2009, pp. 347–362.

15.

[15]

Lin,

Cao,

Liang and

Shao, Secure threshold multi-authority attribute based encryption without a central authority, Information Sciences 180(13) (2010), 2618–2632.

16.

[16]

Liu,

Wu,

Qin and

Zhou, Practical direct chosen ciphertext secure key-policy attribute-based encryption with public ciphertext test, in: Proceedings of the 19th European Symposium on Research in Computer Security, Wroclaw, Poland, September 2014, Vol. 8713, Springer, 2014, pp. 91–108.

17.

[17]

Lubicz and

Sirvent, Attribute-based broadcast encryption scheme made efficient, in: Proceedings of the First International Conference on Cryptology in Africa, Casablanca, Morocco, June 2008, Vol. 5023, Springer, 2008, pp. 325–342.

18.

[18]

Miao,

Li,

Qu,

Du,

Wang and

Qi, Progressive transmission based on wavelet used in mobile visual search, International Journal of Embedded Systems 6(2,3) (2014), 114–123.

19.

[19]

Nabeel and

Bertino, Privacy preserving delegated access control in the storage as a service model, in: 2012 IEEE 13th International Conference on Information Reuse and Integration (IRI), IEEE, 2012, pp. 645–652.

20.

[20]

Nabeel and

Bertino, Privacy preserving delegated access control in public clouds, IEEE Transactions on Knowledge and Data Engineering 26(9) (2014), 2268–2280.

21.

[21]

Nali,

Adams and

Miri, Using threshold attribute-based encryption for practical biometric-based access control, International Journal of Network Security 1(3) (2005), 173–182.

22.

[22]

Naruse,

Mohri and

Shiraishi, Attribute-based encryption with attribute revocation and grant function using proxy re-encryption and attribute key for updating, Future Information Technology 276 (2014), 119–125.

23.

[23]

Nishide,

Yoneyama and

Ohta, Attribute-based encryption with partially hidden encryptor-specified access structures, in: Proceedings of the 6th International Conference, ACNS 2008, New York, NY, USA, June 2008, Vol. 5037, Springer, 2008, pp. 111–129.

24.

[24]

Okamoto and

Takashima, Adaptively attribute-hiding (hierarchical) inner product encryption, in: Proceedings of the 31st Annual International Conference on the Theory and Applications of Cryptographic Techniques, Cambridge, UK, April 2012, Vol. 7237, 2012, pp. 591–608.

25.

[25]

Ostrovsky,

Sahai and

Waters, Attribute-based encryption with non-monotonic access structures, in: Proceedings of the 14th ACM Conference on Computer and Communications Security, New York, NY, USA, October 2007, ACM, 2007, pp. 195–203.

26.

[26]

Parno,

Raykova and

Vaikuntanathan, How to delegate and verify in public: Verifiable computation from attribute-based encryption, in: Proceedings of the 9th Theory of Cryptography Conference, TCC 2012, Taormina, Sicily, Italy, March 2012, Vol. 7194, Springer, 2012, pp. 422–439.

27.

[27]

Ruan and

Xiao, An efficient scheme for two-link failure protection/restoration in WDM mesh networks, Journal of High Speed Networks 18(3) (2012), 185–195.

28.

[28]

Sahai and

Waters, Fuzzy identity-based encryption, in: Proceedings of the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark, May 2005, Vol. 3494, Springer, 2005, pp. 457–473.

29.

[29]

Wang,

Li and

Li, A novel technique of recognising multi-stage attack behaviour, Journal of High Speed Networks 6(3,4) (2010), 174–180.

30.

[30]

Ye,

Zhang,

Wu,

Gao and

Qiu, Attribute-based fine-grained access control with user revocation, in: Proceedings of the Second IFIP TC5/8 International Conference, ICT-EurAsia 2014, Bali, Indonesia, April 2014, Vol. 8407, Springer, 2014, pp. 586–595.