Cloud Storage Access Control Scheme of Ciphertext Algorithm Based on Digital Envelope. Issue 2 (2nd April 2016)

• Record Type: Journal Article
• Authors: Xiong, Anping; Xu, Chunxiang
• Is Part Of: Intelligent automation & soft computing. Volume 22:Issue 2(2016)
• Page Start: 289
• Page End: 294
• Publication Date: 2016-04-02
• Subjects: Digital Envelope -- Proxy re-encryption -- Security protocol -- CP-ABE -- Access Control; Artificial intelligence -- Periodicals; Intelligent control systems -- Periodicals; 003.5
• DOI: 10.1080/10798587.2015.1095488
• Languages: English
• ISSNs: 1079-8587

Abstract

Abstract: Ciphertext Policy Attribute-Based Encryption (CP-ABE) has been widely studied in recent years because it is more suitable for access control of shared data under cloud storage environment. In view of problems of flexibility and efficiency of the existing encryption schemes under cloud storage environment, combined with digital envelopes technology, the paper puts forward an optimized scheme based on supporting fine-grained access control. The scheme has the following advantages: Adopting digital envelopes technology, reducing the computational overhead of Data Owner significantly on the basis of the ensuring data confidentiality, using proxy re-encryption technology to realize the support of user and attribute revocation flexibly, furthermore, the backward and forward secrecy also have been ensured. Adopting security protocols to distribute the shared keys between users and cloud storage server, cloud storage server can save the overhead in maintenance of a large user key's tree. Security and performance analysis show that Cloud storage access control scheme of ciphertext algorithm based on digital envelope can ensure the confidentiality of data, resist collusion attack with forward and backward security, and also reduce the calculation works of the user owners and accessing users.