Efficient and scalable outsourced data access control with user revocation in cloud: A comprehensive study

Abstract

Data outsourcing into the third party cloud server has been radically increasing with the expanding popularity of cloud computing. Recently, researchers are more attentive on privacy preserved secure outsourced data access control due to data sensibility, gradually growth of data in size, dynamic nature of data user, accessing the data in lightweight device etc. Dynamic and efficient revocable data access control using attribute based encryption (ABE) is most prominent technology for such situation. In this article, we are concentrating to summarize several existing approaches to identify the current scenario of outsourced data access control in cloud with respect to security, privacy and efficient revocation. We are also concern about significant analysis of numerous advanced technologies to achieve dynamic and efficient revocable outsourced data access control for further research with respect to reliability, scalability and efficiency. We have presented here a comprehensive study and analysis of several functionalities of ABE, revocation and privacy preservation.

Keywords

Access control cloud computing data outsourcing privacy security attribute revocation

Get full access to this article

View all access options for this article.

References

Debnath

Sahana

S.C.

and Bhuyan

, A distributed fine-grained access control mechanism over cloud data outsourcing, Science and Technology Journal 3(II) (2015), 188–197.

Chen

and Zhao

, Data security and privacy protection issues in cloud computing, International Conference on Computer Science and Electronics Engineering (ICCSEE), Hangzhou, China, 23–25 March 2012, pp. 647–651.

Ruj

Stojmenovic

and Nayak

, Decentralized access control with anonymous authentication of data stored in clouds, IEEE Transactions on Parallel and Distributed Systems 25(2) (2014), 384–394.

Younis

Y.A.

Kifayat

and Merabti

, An access control model for cloud computing, Journal of Information Security and Applications 19(1) (2014), 45–60.

Yang

and Jia

, Expressive, efficient, and revocable data access control for multi-authority cloud storage, IEEE Transactions on Parallel and Distributed Systems 25(7) (2014), 1735–1744.

Han

Susilo

Zhou

and Au

M.H.A.

, Improving privacy and security in decentralized ciphertext-policy attribute-based encryption, IEEE Transactions on Information Forensics and Security 10(3) (2015), 665–678.

Rao

Y.S.

, A secure and efficient ciphertext-policy attribute-based signcryption for personal health records sharing in cloud computing, Future Generation Computer Systems 67 (2017), 133–151.

Shamir

, Identity-based cryptosystems and signature schemes, In Workshop: Theory and application of cryptographic techniques, Springer, Berlin, Heidelberg, 19 Aug 1984, pp. 47–53.

Boneh

and Franklin

, Identity-based encryption from the weil pairing, In:Annual international cryptology conference, Springer Springer, Berlin, Heidelberg, 2001, pp. 213–229.

10.

Sahai

Waters

et al. Fuzzy identity-based encryption, In EurocryptSpringer, vol 3494, 2005, pp. 457–473.

11.

Attrapadung

, Libert

and Panafieu

E.D.

, Expressive key-policy attribute-based encryption with constant-size ciphertexts, In Public Key Cryptography, Springer, vol 6571, 2011, pp. 90–108.

12.

Goyal

Pandey

Sahai

and Waters

, Attribute-based encryption for fine-grained access control of encrypted data, In Proceedings of the 13th ACM conference on Computer and communications security, New York, ACM, 2006, pp. 89–98.

13.

Ostrovsky

Sahai

and Waters

, Attribute based encryption with non-monotonic access structures, In: Proceedings of the 14th ACM conference on Computer and communications security, New York, ACM, 2007, pp, 195–203.

14.

Bethencourt

Sahai

and Waters

, Ciphertext policy attribute-based encryption, IEEE Symposium on Security and Privacy, Berkeley, USA 2007, pp, 321–334.

15.

Cheung

and Newport

, Provably secure ciphertext policy ABE, In: Proceedings of the 14th ACM conference on Computer and communications security, Virginia, USA, ACM, 2007. pp, 456–465.

16.

Lewko

Sahai

and Waters

, Revocation systems with very small private keys, IEEE Symposium on Security and Privacy (SP), 2010, Berkeley, IEEE, 2010. pp, 273–285.

17.

Lewko

and Waters

, Decentralizing Attribute Based Encryption, In: International Conference on the Theory and Applications of Cryptographic Techniques, Springer, Berlin, Heidelberg, 2011, pp. 568–588.

18.

Pirretti

Traynor

McDaniel

and Waters

, Secure attribute-based systems, Journal of Computer Security 18(5) (2010), 799–837.

19.

Waters

, Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization, In Public Key Cryptography, Springer, vol 6571, 2011, pp, 53–70.

20.

Kiraz

M.S.

and Uzunkol

, Still wrong use of pairings in cryptography, arXiv preprint arXiv:1603.02826, 2016.

21.

Agrawal

and Chase

, Fame: Fast attribute based message encryption, In Proceedings 2017 ACM SIGSAC Conference on Computer and Communications Security, Texas, USA, ACM, 2017, pp, 665–682.

22.

Ibraimi

Petkovic

Nikova

Hartel

and Jonker

, Mediated ciphertext-policy attribute based encryption and its application, International Workshop on Information Security Applications, Springer, Berlin, Heidelberg, 25 Aug 2009, pp, 309–323.

23.

Emura

Miyaji

Nomura

Omote

and Soshi

, A ciphertext-policy attribute based encryption scheme with constant ciphertext length, In ISPEC, Springer, vol 9, 2009, pp, 13–23.

24.

Rouselakis

and Waters

, New constructions and proof methods for large universe attribute-based encryption, IACR Cryptology EPrint Archive, In Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, ACM, 4 Nov 2013, pp. 463–474.

25.

Rao

Y.S.

and Dutta

, Decentralized ciphertext policy attribute-based encryption scheme with fast decryption, In: International Conference on Communications and Multimedia Security, Springer, Berlin, Heidelberg, 25 Sep 2013, pp, 66–81.

26.

Green

Hohenberger

Waters

, et al. Outsourcing the decryption of ABE ciphertexts, In: USENIX Security Symposium, volume 2011.

27.

Yamada

Attrapadung

Hanaoka

and Kunihiro

, A framework and compact constructions for non-monotonic attribute-based encryption, In: International Workshop on Public Key Cryptography, Springer, Berlin, Heidelberg, 26 Mar 2014, pp. 275–292.

28.

Yang

and Jia

, Dac-macs: Effective data access control for multi-authority cloud storage systems, In Security for Cloud Storage Systems Springer, Berlin, Heidelberg, 2014, pp, 59–83.

29.

Youm

H.Y.

and Yung

, Information Security Applications: 10th International Workshop, WISA 2009, Busan, Koreavol, 5932. Springer, 2009.

30.

Yang

Liu

Cao

Jia

Wong

D.S

and Ren

, Taac: Temporal attribute-based access control for multi-authority cloud storage systems, IACR Cryptology EPrint Archive, 2012, pp, 651.

31.

Attrapadung

and Imai

, Attribute-based encryption supporting direct/indirect revocation modes, In IMA Int. Conf. Springer, Berlin, Heidelberg, 15 Dec 2009, pp, 278–300.

32.

Boldyreva

Goyal

and Kumar

, Identity-based encryption with efficient revocation. In: Proceedings of ACM conference on Computer and communications security, ACM, 27 Oct 2008, pp, 417–426.

33.

Hur

and Noh

D.K.

, Attribute-based access control with efficient revocation in data outsourcing systems, IEEE Transactions on Parallel and Distributed Systems 22(7) (2011), 1214–1221.

34.

Liang

Cao

Lin

and Shao

, Attribute based proxy re-encryption with delegating capabilities, In: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, ACM, 2009, pp, 276–286.

35.

Luo

and Chen

, Ciphertext policy attribute-based proxy re-encryption, In International Conference on Information and Communications Security, Springer, Berlin, Heidelberg 15 Dec 2010, pp, 401–415.

36.

Wang

Ren

and Lou

, Achieving secure, scalable, and fine-grained data access control in cloud computing, In: Infocom, 2010 proceedings IEEE, 14 Mar 2010, pp, 1–9.

37.

Tysowski

P.K.

and Hasan

M.A.

, Hybrid attribute-and re-encryption-based key management for secure and scalable mobile applications, IEEE Transactions on Cloud Computing 1(2) (2013), 172–186.

38.

Jiang

and Bhargava

, On the security of data access control for multi-authority cloud storage systems, IEEE Transactions on Services Computing 10(2) (2017), 258–272.

39.

K.E.

, Group sharing and random access in cryptographic storage file systems, PhD thesis, Massachusetts Institute of Technology, 1999.

40.

Zarandioon

Yao

D.D.

and Ganapathy

, K2C: Cryptographic cloud storage with lazy revocation and anonymous access, In International Conference on Security and Privacy in Communication Systems, Springer, Berlin, Heidelberg, 2011, pp, 59–76.

41.

Barsoum

and Hasan

, Enabling dynamic data and indirect mutual trust for cloud computing storage systems, IEEE Transactions on Parallel and Distributed Systems 24(12) (2013), 2375–2385.

42.

Chase

, Multi-authority attribute based encryption, In: Theory of Cryptography Conference Springer, Berlin, Heidelberg, 2007, pp, 515–534.

43.

Chase

and Chow

S.S.

, Improving privacy and security in multi-authority attribute-based encryption, In Proceedings of the 16th ACM conference on Computer and communications security, ACM, 2009. pp, 121–130.

44.

Lewko

and Waters

, New proof methods for attribute-based encryption: Achieving full security through selective techniques, In Advances in Cryptology-CRYPTO, Springer, Berlin, Heidelberg, 2012, pp, 180–198.

45.

Maji

H.K.

Prabhakaran

and Rosulek

, Attribute-based signatures, In Cryptographers Track at the RSA Conference, SpringerBerlin, Heidelberg, 2011, pp. 376–392.

46.

Pandit

Pandey

S.K.

and Barua

, Attribute-based signcryption: Signer privacy, strong unforgeability and ind-cca2 security in adaptive-predicates attack, In International Conference on Provable Security, Springer, Cham, 9 Oct 2014, pp. 274–290.

47.

Wei

and Liu

, Traceable attribute-based signcryption, Security and Communication Networks 7(12) (2014), 2302–2317.

48.

Liu

Huang

and Liu

J.K.

, Secure sharing of personal health records in cloud computing: ciphertextpolicy attribute-based signcryption, Future Generation Computer Systems 52(1) (2015), 67–76.

49.

Liang

Fang

Wong

D.S

and Susilo

, A ciphertext-policy attribute-based proxy re-encryption scheme for data sharing in public clouds, Concurrency and Computation: Practice and Experience 27(8) (2015), 2004–2027.

50.

Tang

Wang

and Chen

, Two-factor data access control with efficient revocation for multi-authority cloud storage systems, IEEE Access5(1) (2017), 393–405.

51.

Rouselakis

and Waters

, Efficient statically secure large-universe multi-authority attribute-based encryption, In International Conference on Financial Cryptography and Data Security, Springer, Berlin, Heidelberg, 2015, pp, 315–332.

52.

Liu

and Li

, New ciphertext policy attribute-based encryption with efficient revocation, In IEEE International Conferenceon Computer and Information Technology (CIT), 11 Sep 2014, pp. 281–287.