Sage Journals: Discover world-class research

Abstract

The requirement of cloud data sharing is becoming increasingly important to achieve flexible, scalable, reliable and fine grained access control. Currently decentralized access control model is widely used for data sharing in cloud environment. The existing multi authority decentralized data sharing model is discouraged for practical use due to its inefficiency in decryption and attribute revocation. Attribute revocation method is not supported by most of existing decentralized data sharing model. In this paper we propose a new data sharing model which supports decryption outsourcing as well as attribute revocation. In our proposed model most of the computational operations of decryption is transfered to cloud server which was earlier carried out by user. The use of linear secret sharing scheme strengthen the access control policy. The performance of our model outperforms LWABE in comparison with communication cost, secret key update ciphertext update and decryption cost. The cost incurred during encryption process of our model is almost same as LWABE.

Keywords

Cipher text policy attribute based encryption data sharing attribute revocation fine grained CSP

Get full access to this article

View all access options for this article.

References

Goyal

Pandey

Sahai

and Waters

, Attribute-based encryption for fine-grained access control of encrypted data, in: Proceedings of the 13th ACM Conference on Computer and Communications Security, 2006, pp. 89–98.

Bethencourt

Sahai

and Waters

, Ciphertext-policy attribute-based encryption, in: IEEE Symposium on Security and Privacy (SP’07), 2007, pp. 321–334.

Waters

, Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization, in: International Workshop on Public Key Cryptography, Springer, Berlin, Heidelberg, 2011, pp. 53–70.

Green

Hohenberger

and Waters

, Outsourcing the decryption of abe ciphertexts, in: USENIX Security Symposium 2011(3) (2011).

Sahai

and Waters

, Fuzzy identity-based encryption, in: Annual International Conference on the Theory and Applications of Cryptographic Techniques, Springer, Berlin, Heidelberg, 2005, pp. 457–473.

Hur

, Improving security and efficiency in attribute-based data sharing, IEEE Transactions on Knowledge and Data Engineering 25(10), (2013), 2271–2282.

Chase

, Multi-authority attribute based encryption, in: Theory of Cryptography Conference, Springer, Berlin, Heidelberg, 2007, pp. 515–534.

Lin

Cao

Liang

and Shao

, Secure threshold multi authority attribute based encryption without a central authority, in: International Conference on Cryptology, Kharagpur, India, Springer, Berlin, Heidelberg, 2008, pp. 426–436.

Chase

and Chow

S.S.

, sImproving privacy and security in multi-authority attribute-based encryption, in: Proceedings of the 16th ACM Conference on Computer and Communications Security, 2009, pp. 121–130.

10.

Muller

Katzenbeisser

and Eckert

, On multi-authority ciphertext-policy attribute-based encryption, Bulletin of the Korean Mathematical Society 46(4) (2009), 803–819.

11.

Lewko

and Waters

, Decentralizing attribute-based encryption, in: Annual International Conference on the Theory and Applications of Cryptographic Techniques, Springer, Berlin, Heidelberg, 2011, pp. 568–588.

12.

Pirretti

Traynor

McDaniel

and Waters

, Secure attribute-based systems, Journal of Computer Security 18(5) (2010), 799–837.

13.

Wang

Ren

and Lou

, Attribute based data sharing with attribute revocation, in: Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, 2010, pp. 261–270.

14.

Hur

and Noh

D.K.

, Attribute-based access control with efficient revocation in data outsourcing systems, IEEE Transactions on Parallel and Distributed Systems 22(7) (2011), 1214–1221.

15.

Hur

, Improving security and efficiency in attribute-based data sharing, IEEE Transactions on Knowledge and Data Engineering 25(10) (2013), 2271–2282.

16.

Attrapadung

and Imai

, Conjunctive broadcast and attribute-based encryption, in: International Conference on Pairing-Based Cryptography, Springer, Berlin, Heidelberg, 2009, pp. 248–265.

17.

Ruj

Nayak

and Stojmenovic

, DACC: Distributed access control in clouds, in: IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications, 2011, pp. 91–98.

18.

Yang

Jia

and Ren

, Attribute-based fine-grained access control with efficient revocation in cloud storage systems, in: Proceedings of the 8th ACM SIGSAC Symposium on Information, Computer and Communications Security, 2013, pp. 523–528.

19.

Yang

and Jia

, Attributed-based access control for multi-authority systems in cloud storage, in: IEEE 32nd International Conference on Distributed Computing Systems, 2012, pp. 536–545.

20.

Yang

Jia

Ren

Zhang

and Xie

, DAC-MACS: Effective data access control for multiauthority cloud storage systems, IEEE Transactions on Information Forensics and Security 8(11) (2013), 1790–1801.

21.

Jiang

and Bhargava

, On the security of data access control for multiauthority cloud storage systems, IEEE Transactions on Services Computing 10(2) (2017), 258–272.

22.

Yang

and Jia

, Expressive, efficient, and revocable data access control for multi-authority cloud storage, IEEE Transactions on Parallel and Distributed Systems 25(7) (2014), 1735–1744.

RACC: An efficient and revocable fine grained access control model for cloud storage

Abstract

Keywords

Get full access to this article

References