A fine‐grained access control and revocation scheme on clouds. (22nd November 2012)

• Record Type: Journal Article
• Authors: Tu, Shan‐shan; Niu, Shao‐zhang; Li, Hui
• Other Names: Zhang Yunquan guestEditor.; Zhang Ji‐Lin guestEditor.; Notare Mirela Sechi Moretti Annoni guestEditor.; Li Gang guestEditor.; Niu Wenjia guestEditor.; Guo Li guestEditor.; Batten Lynn guestEditor.; Liu Yinlong guestEditor.; Cai Guoyong guestEditor.
• Is Part Of: Concurrency and computation. Volume 28:Number 6(2016)
• Page Start: 1697
• Page End: 1714
• Publication Date: 2012-11-22
• Subjects: secure storage -- attribute‐based encryption -- cloud computing -- user revocation; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.2956
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: In recent years, more and more companies outsource their data to the cloud service provider to greatly reduce the cost. However, it also raises underlying security and privacy issues for the significant corporate data. Therefore, a natural way to keep sensitive data confidential against an untrusted cloud service provider is only to store the encrypted data in the cloud. Flexible encryption schemes can provide a fine grain access control for the encrypted data and ensure legitimate user to decrypt the corresponding data. The key problems of this approach include establishing access control for the encrypted data and revoking the access rights from users when they are no longer authorized to access the encrypted data on cloud servers. This paper aims to solve these problems. First, with the attribute encryption and the dual encryption system, we propose a concrete access control scheme constructed over the composite‐order bilinear groups, and we prove its security under the standard model. Then, we propose a fully fine‐grained revocation scheme under the direct revocation model so as to efficiently revoke access rights from users on cloud servers. Copyright © 2012 John Wiley & Sons, Ltd.