A CP-ABE scheme with hidden policy and its application in cloud computing. (2015)

• Record Type: Journal Article
• Authors: Xu, Runhua; Lang, Bo
• Is Part Of: International journal of cloud computing. Volume 4:Number 4 (2015)
• Page Start: 279
• Page End: 298
• Publication Date: 2015
• Subjects: ciphertext policy -- attribute-based encryption -- CP-ABE -- access control -- hidden policy -- self-contained data protection -- cloud computing -- tree-based access -- chosen-plaintext attacks -- cloud security -- privacy protection -- privacy preservation; Cloud computing -- Periodicals; 004.678205
• Languages: English
• ISSNs: 2043-9989

Abstract

With flexible and scalable features for fine-grained access control, ciphertext policy attribute-based encryption (CP-ABE) is widely used as a kind of data protection mechanism in cloud computing. However, the access policy of CP-ABE scheme may contain sensitive information which causes privacy revelation of the data provider or receiver. Some papers proposed hidden policy CP-ABE schemes, which were based on And-gate access structure whose expressive ability of access policy was limited. CP-ABE with the tree-based access structure has stronger expressive ability and more flexible access control capability. Therefore, it has broad application prospects compared to other mechanisms. This paper proposed a tree-based access structure CP-ABE scheme with hidden policy (CP-ABE-HP), and also proved that the scheme had chosen-plaintext attack (CPA) security. CP-ABE-HP could both protect the policy and had flexible access control capability. Then, considering the characteristics of cloud computing environment, the paper constructed a new self-contained data protection mechanism based on CP-ABE-HP, which could provide reliable and flexible security control to the data in cloud.